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INTEL MEMORY TECHNOLOGIES 
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Most of this handbook is devoted to techniques and 
information to help you design and implement semi- 
conductor memory in your application or system. In 
this section, however, the memory chip itself will be 
examined and the processing technology required to 
turn a bare slice of silicon into high performance 
memory devices is described. The discussion has 
been limited to the basics of MOS (Metal Oxide 
Semiconductor) technologies as they are responsi- 
ble for the majority of memory devices manufactured 
at Intel. 

There are three major MOS technology families— 
PMOS, NMOS, and CMOS (Figure 1). They refer to 
the channel type of the MOS transistors made with 
the technology. PMOS technologies implement 
p-channel transistors by diffusing p-type dopants 
(usually boron) into an n-type silicon substrate to 
form the source and drain. P-channel is so named 
because the channel is comprised of positively 
charged carriers. NMOS technologies are similar, 
but use n-type dopants (normally phosphorus or ar- 
senic) to make n-channel transistors in p-type silicon 
substrates. N-channel is so named because the 


channel is comprised of negatively charged carriers. 
CMOS or Complementary MOS technologies com- 
bine both p-channel and n-channel devices on the 
same silicon. Either p- or n-type silicon substrates 
can be used, however, deep areas of the opposite 
doping type (called wells) must be defined to allow 
fabrication of the complementary transistor type. 

Most of the early semiconductor memory devices, 
like Intel’s pioneering 1103 dynamic RAM and 1702 
EPROM were made with PMOS technologies. As 
higher speeds and greater densities were needed, 
most new devices were implemented with NMOS. 
This was due to the inherently higher speed of 
n-channel charge carriers (electrons) in silicon along 
with improved process margins. CMOS technology 
has begun to see widespread commercial use in 
memory devices. It allows for very low power devic- 
es used for battery operated or battery back-up ap- 
plications. Historically, CMOS has been slower than 
any NMOS device. Today, CMOS technology has 
been improved to produce higher speed devices. 
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Figure 1. MOS Process Cross-sections 




INTEL MEMORY TECHNOLOGIES 


In the following section, the basic fabrication se- 
quence for an HMOS circuit will be described. 
HMOS is a high performance n-channel MOS pro- 
cess developed by Intel for 5V single supply circuits. 
HMOS, and CHMOS, CHMOS-E (EPROM) and 
ETOX (Flash Memory), along with their evolutionary 
counterparts comprise the process family response 
ble for most of the memory components produced 
by Intel today. 

The MOS 1C fabrication process begins with a slice 
(or wafer) of single crystal silicon. Typically, it’s 150 
or 200 millimeter in diameter, about a half millimeter 
thick, and uniformly doped p-type. The wafer is then 
oxidized in a furnace at around 1000°C to grow a 
thin layer of silicon dioxide (Si 02 ) on the surface. 
Silicon nitride is then deposited on the oxidized wa- 
fer in a gas phase chemical reactor. The wafer is 
now ready to receive the first pattern of what is to 
become a many layered complex circuit. The pattern 
is etched into the silicon nitride using a process 
known as photolithography, which will be described 
in a later section. This first pattern (Figure 2) defines 
the boundaries of the active regions of the 1C, where 
transistors, capacitors, diffused resistors, and first 
level interconnects will be made. 



The patterned and etched wafer is then implanted 
with additional boron atoms accelerated at high en- 
ergy. The boron will only reach the silicon substrate 
where the nitride and oxide was etched away, pro- 
viding areas doped strongly p-type that will electri- 
cally separate active areas. After implanting, the wa- 
fers are oxidized again and this time a thick oxide is 
grown. The oxide only grows in the etched areas 
due to silicon nitride’s properties as an oxidation bar- 
rier. When the oxide is grown, some of the silicon 
substrate is consumed and this gives a physical as 
well as electrical isolation for adjacent devices as 
can be seen in Figure 3. 



intel. 

Having fulfilled its purpose, the remaining silicon ni- 
tride layer is removed. A light oxide etch follows tak- 
ing with it the underlying first oxide but leaving the 
thick (field) oxide. 

Now that the areas for active transistors have been 
defined and isolated, the transistor types needed 
can be determined. The wafer is again patterned 
and then if special characteristics (such as depletion 
mode operation) are required, it is implanted with 
dopant atoms. The energy and dose at which the 
dopant atoms are implanted determines much of the 
transistor’s characteristics. The type of the dopant 
provides for depletion mode (n-type) or enhance- 
ment mode (p-type) operation. 

The transistor types defined, the gate oxide of the 
active transistors are grown in a high temperature 
furnace. Special care must be taken to prevent con- 
tamination or inclusion of defects in the oxide and to 
ensure uniform consistent thickness. This is impor- 
tant to provide precise, reliable device characteris- 
tics. The gate oxide layer is then masked and holes 
are etched to provide for direct gate to diffusion 
(“buried”) contacts where needed. 

The wafers are now deposited with a layer of gate 
material. This is typically poly crystaline silicon 
(“poly”) which is deposited in a gas phase chemical 
reactor similar to that used for silicon nitride. The 
poly is then doped (usually with phosphorus) to bring 
the sheet resistance down to 10-20 ft/ square. This 
layer is also used for circuit interconnects and if a 
lower resistance is required, a refractory metal/poly- 
silicon composite or refractory metal silicide can be 
used instead. The gate layer is then patterned to 
define the actual transistor gates and interconnect 
paths (Figure 4). 



The wafer is next diffused with n-type dopant (typi- 
cally arsenic or phosphorus) to form the source and 
drain junctions. The transistor gate material acts as 
a barrier to the dopant providing an undiffused chan- 
nel self-aligned to the two junctions. The wafer is 
then oxidized to seal the junctions from contamina- 
tion with a layer of Si02 (Figure 5). 
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Figure 5. Post Oxidation 


A thick layer glass is then deposited over the wafer 
to provide for insulation and sufficiently low capaci- 
tance between the underlying layers and the metal 
interconnect signals. (The lower the capacitance, 
the higher the inherent speed of the device.) The 
glass layer is then patterned with contact holes and 
placed in a high temperature furnace. This furnace 
step smooths the glass surface and rounds the con- 
tact edges to provide uniform metal coverage. Metal 
(usually aluminum or aluminum/silicon) is then de- 
posited on the wafer and the interconnect patterns 
and external bonding pads are defined and etched 
(Figure 6). The wafers then receive a low tempera- 
ture (approximately 500°C) alloy that insures good 
ohmic contact between the aluminum and diffusion 
or poly. 



Figure 6. Complete Circuit (without passivation) 


At this point the circuit is fully operational, however, 
the top metal layer is very soft and easily damaged 
by handling. The device is also susceptible to con- 
tamination or attack from moisture. To prevent this 
the wafers are sealed with a passivation layer of sili- 
con nitride or a silicon and phosphorus oxide com- 
posite. Patterning is done for the last time opening 
up windows only over the bond pads where external 
connections will be made. 

This completes basic fabrication sequence for a sin- 
gle poly layer process. Double poly processes such 
as those used for high density Dynamic RAMs, 
EPROMs, flash memories, and EEPROMs follow the 
same general process flow with the addition of gate, 
poly deposition, doping, and interlayer dielectric pro- 
cess modules required for the additional poly layer 
(Figure 7). These steps are performed right after the 
active areas have been defined (Figure 3) providing 
the capacitor or floating gate storage nodes on 
those devices. 
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Figure 7. Double Poly Structure 

After fabrication is complete, the wafers are sent for 
testing. Each circuit is tested individually under con- 
ditions designed to determine which circuits will op- 
erate properly both at low temperature and at condi- 
tions found in actual operation. Circuits that fail 
these tests are noted to distinguish them from good 
circuits. From here the wafers are sent for assembly 
where they are sawed into individual circuits with a 
paper-thin diamond blade. The noted circuits are 
then separated out and the good circuits are sent on 
for packaging. 



Packages fall into two categories— hermetic and 
non-hermetic. Hermetic packages are Cerdip, where 
two ceramic halves are sealed with a glass fritt, or 
ceramic with soldered metal lids. An example of her- 
metic package assembly is shown in Table 1 . Non- 
hermetic packages are molded plastics. 

The ceramic package has two parts, the base, which 
has the leads and die (or circuit) cavity, and the met- 
al lid. The base is placed on a heater block and a 
metal alloy preform is inserted. The die is placed on 
top of the preform which bonds it to the package. 
Once attached, wires are bonded to the circuit and 
then connected to the leads. Finally the package is 
placed in a dry inert atmosphere and the lid is sol- 
dered on. 


The cerdip package consists of a base, lead frame, 
and lid. The base is placed on a heater block and 
the lead frame placed on top. This sets the lead 
frame in glass attached to the base. The die is then 
attached and bonded to the leads. Finally the lid is 
placed on the package and it is inserted in a seal 
furnace where the glass on the two halves melt to- 
gether making a hermetic package. 

In a plastic package, the key component is the lead 
frame. The die is attached to a pad on the lead 
frame and bonded out to the leads with gold wires. 
The frame then goes to an injection molding ma- 
chine and the package is formed around the lead 
frame. After mold the excess plastic is removed and 
the leads trimmed. 
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After assembly, the individual circuits are retested at 
an elevated operating temperature to assure critical 
operating parameters and separated according to 
speed and power consumption into individual speci- 
fication groups. The finished circuits are marked and 
then readied for shipment. 

The basic process flow described above may make 
VLSI device fabrication sound straightforward, how- 
ever, there are actually hundreds of individual opera- 
tions that must be performed correctly to complete a 
working circuit. It usually takes well over two months 
to complete all these operations and the many tests 
and measurements involved throughout the manu- 
facturing process. Many of these details are respon- 
sible for ensuring the performance, quality, and reli- 
ability you expect from Intel products. The following 
sections will discuss the technology underlying each 
of the major process elements mentioned in the ba- 
sic process flow. 


PHOTOLITHOGRAPHY 

The photo or masking technology is the most impor- 
tant part of the manufacturing flow if for no other 
reason than the number of times it is applied to each 
wafer. The manufacturing process gets more com- 
plex in order to make smaller and higher perform- 
ance circuits. As this happens the number of mask- 
ing steps increases, the features get smaller, and 
the tolerance required becomes tighter. This is 
largely because the minimum size of individual pat- 
tern elements determine the size of the whole cir- 
cuit, effecting its cost and limiting its potential com- 
plexity. Early MOS IC’s used minimum geometries 
(lines or spaces) of 8-10 microns (1 micron = 10 -6 
meter = 1/25,000 inch). The n-channel processes 
of the mid 1970’s brought this down to approximate- 
ly 5 microns, and today minimum geometries of 0.8 
and even 0.6 microns are in production. This dra- 


Table 1. Typical Hermetic Package Assembly 


Flow 

Process/Materials 

Typical Item 

Frequency 

Criteria 



Wafer 

Die saw, wafer break 
Die wash and plate 
Die visual inspection 

Passivation, metal 

100% of die 



— O 

QA gate 


Every lot 

0/76, LTPD = 5% 



Die attach 
(Process monitor) 

Wet out 

4 x /operator/shift 

0/11 LTPD = 20% 



Post die attach visual 


100% of devices 




Wire bond 
(Process monitor) 

Orientation, lead 
dressing, etc. 

4 x /operator/ 
machine/shift 




Post bond inspection 


100% devices 



— O 

QA gate 

All previous items 

every lot 

1/129, LTPD = 3% 



Seal and Mark 
(Process monitor) 

Cap align, glass 
integrity, moisture 

4 x /furnace/shift 

0/15, LTPD = 15% 



Temp cycle 


10 x to mil std. 
083 cond. C 

1/11, LTPD = 20% 



Hermeticity check 
(Process monitor) 

F/G leak 

100% devices 




Lead Trim 
(Process monitor) 

Burrs, etc. (visual) 
Fine leak 

4 x /station/shift 
2 x /station/shift 

0/15, LTPD = 15% 
1/129, LTPD = 3% 



External visual 

Solder voids, cap 
alignment, etc. 

100% devices 



— 0 

QA gate 

All previous items 

All lots 

1/129, LTPD = 3% 



Class test 
(Process monitor) 

Run standards 
(good and reject) 
Calibrate every 
system using 
“autover” program 

Every 48 hrs. 


2 ’ 

> 

Mark and Pack 
Final QA 

(See attached) 
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NOTES: 

1. Units for assembly reliability monitor. 

2. Units for product reliability monitor. 
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matic reduction in feature size was achieved using 
the newer high resolution photo resists and optimiz- 
ing their processing to match improved optical print- 
ing systems. 

A second major factor in determining the size of the 
circuit is the registration or overlay error. This is how 
accurately one pattern can be aligned to a previous 
one. Design rules require that space be left in all 
directions according to the overlay error so that un- 
related patterns do not overlap or interfere with one 
another. As the error space increases the circuit size 
increases dramatically. Only a few years ago stan- 
dard alignment tolerances were ^ ± 2 microns; now 
advanced Intel processes have reduced this dramat- 
ically due mostly to the use of advanced projection 
and step and repeat exposure equipment. 

The wafer that is ready for patterning must go 
through many individual steps before that pattern is 
complete. First the wafer is baked to remove mois- 
ture from its surface and is then treated with chemi- 
cals that ensure good resist adhesion. The thick 
photoresist liquid is then applied and the wafer is 
spun flat to give a uniform coating, critical for high 
resolution. The wafer is baked at a low temperature 
to solidify the resist into gel. It is then exposed with a 
machine that aligns a mask with the new pattern on 
it to a previously defined layer. The photo-resist will 
replicate this pattern on the wafer. 

Negative working resists are polymerized by the light 
and the unexposed resist can be rinsed off with sol- 
vents. Positive working resists use photosensitive 
polymerization inhibitors that allow a chemically re- 
active developer to remove the exposed areas. The 
positive resists require much tighter control of expo- 
sure and development but yield higher resolution 
patterns than negative resistance systems. 

The wafer is now ready to have its pattern etched. 
The etch procedure is specialized for each layer to 
be etched. Wet chemical etchants such as hydro- 
fluoric acid for silicon oxide or phosphoric acid for 
aluminum are often used for this. The need for 
smaller features and tighter control of etched dimen- 
sions is increasing the use of plasma etching in fab- 
rication. Here a reactor is run with a partial vacuum 
into which etchant gases are introduced and an 
electrical field is applied. This yields a reactive plas- 
ma which etches the required layer. 

The wafer is now ready for the next process step. Its 
single journey through the masking process required 
the careful engineering of mechanics, optics, organ- 
ic chemistry, inorganic chemistry, plasma chemistry, 
physics, and electronics. 


DIFFUSION 

The picture of clean room garbed operators tending 
furnace tubes glowing cherry red is the one most 
often associated with 1C fabrication. These furnace 
operations are referred to collectively as diffusion 
because they employ the principle of sold state diffu- 
sion of matter to accomplish their results. In MOS 
processing, there are three main types of diffusion 
operations: predeps, drives, and oxidations. 

Predeposition, or “predep,” is an operation where a 
dopant is introduced into the furnace from a solid, 
liquid, or gaseous source and at the furnace temper- 
ature (usually 900°C-1200°C) a saturated solution is 
formed at the silicon surface. The temperature of the 
furnace, the dopant atom, and rate of introduction 
are all engineered to give a specific dose of the dop- 
ant on the wafer. Once this is completed the wafer is 
given a drive cycle where the dopant left at the sur- 
face by the predep is driven into the wafer by high 
temperatures. These are generally at different tem- 
peratures than the predeps and are designed to give 
the required junction depth and concentration pro- 
file. 

Oxidation, the third category, is used at many steps 
of the process as was shown in the process flow. 
The temperature and oxidizing ambient can range 
from 800°C to 1 200°C and from pure oxygen to mix- 
tures of oxygen and other gases to steam depending 
on the type of oxide required. Gate oxides require 
high dielectric breakdown strength for thin layers 
(between 0.01 and 0.1 micron) and very tight control 
over thickness (typically ±0.005 micron or less than 
±1/5,000,000 inch), while isolation oxides need to 
be quite thick and because of this their dielectric 
breakdown strength per unit thickness is much less 
important. 

The properties of the diffused junctions and oxides 
are key to the performance and reliability of the fin- 
ished device so the diffusion operations must be ex- 
tremely well controlled for accuracy, consistency 
and purity. 


ION IMPLANT 

Intel’s high performance products require such high 
accuracy and repeatability of dopant control that 
even the high degree of control provided by diffusion 
operations is inadequate. However, this limitation 
has been overcome by replacing critical predeps 
with ion implantation. In ion implantation, ionized 
dopant atoms are accelerated by an electric field 
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and implanted directly into the wafer. The accelera- 
tion potential determines the depth to which the 
dopant is implanted. 

The charged ions can be counted electrically during 
implantation giving very tight control over dose. The 
ion implanters used to perform this are a combina- 
tion of high vacuum system, ion source, mass spec- 
trometer, linear accelerator, ultra high resolution cur- 
rent integrator, and ion beam scanner. You can see 
that this important technique requires a host of so- 
phisticated technologies to support it. 


THIN FILMS 

Thin film depositions make up most of the features 
on the completed circuit. They include the silicon ni- 
tride for defining isolation, polysilicon for the gate 
and interconnections, the glass for interlayer dielec- 
tric, metal for interconnection and external connec- 
tions, and passivation layers. Thin film depositions 
are done by two main methods: physical deposition 
and chemical vapor deposition. Physical deposition 
is most common for deposition metal. Physical dep- 
ositions are performed in a vacuum and are accom- 
plished by vaporizing the metal with a high energy 
electron beam and redepositing it on the wafer or by 
sputtering it from a target to the wafer under an elec- 
tric field. 

Chemical vapor deposition can be done at atmo- 
spheric pressure or under a moderate vacuum. This 
type of deposition is performed when chemical gas- 
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es react at the wafer surface and deposit a solid film 
of the reaction product. These reactors, unlike their 
general industrial counterparts, must be controlled 
on a microscale to provide exact chemical and phys- 
ical properties for thin films such as silicon dioxide, 
silicon nitride, and polysilicon. 

The fabrication of modern memory devices is a long, 
complex process where each step must be moni- 
tored, measured and verified. Developing a totally 
new manufacturing process for each new product or 
even product line takes a long time and involves sig- 
nificant risk. Because of this, Intel has developed 
process families, such as HMOS, on which a wide 
variety of devices can be made. These families are 
scalable so that circuits need not be totally rede- 
signed to meet your needs for higher perform- 
ance.O) They are evolutionary so that development 
time of new processes and products can be reduced 
without compromising Intel’s commitment to consist- 
ency, quality, and reliability. 

The manufacture of today’s MOS memory devices 
requires a tremendous variety of technologies and 
manufacturing techniques, many more than could be 
mentioned here. Each requires a team of experts to 
design, optimize, control and maintain it. All these 
people and thousands of others involved in engi- 
neering, design, testing and production stand behind 
Intel’s products. 

COR. Pashley, K. Kokkonen, E. Boleky, R. Jecmen, S. Liu, 
and W. Owen, “H-MOS Scales Traditional Devices to High- 
er Performance Level,” Electronics , August 1 8, 1 977. 
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The ideal memory system optimizes density, nonvolatil- 
ity, fast readability and cost effectiveness. While tradi- 
tional memory technologies may individually exhibit 
one or more of these desired characteristics, no single 
memory technology has achieved all of them without 
major tradeoffs — until the introduction of Intel Flash 
Memory. 

WHAT IS FLASH MEMORY? 

Introduced by Intel in 1988, ETOX flash memory is a 
high-density, truly nonvolatile and high performance 
read-write memory solution also characterized by low 
power consumption and extreme ruggedness and high 
reliability. The cost trend of Intel Flash Memory com- 
ponents continues to decline sharply due to: (1) manu- 
facturing economies inherent in ETOX, Intel’s indus- 
try-standard EPROM-based flash technology, (2) 
increases in memory density, and (3) rapid growth in 
production volume. 

A comparison between Intel Flash Memory and other 
solid-state memory technologies underscores the fact 
that flash offers a design solution with distinct advan- 
tages. These advantages are key to future product dif- 
ferentiation for many applications requiring firmware 
updates or compact mass storage (Figure 1). 


— ROM (read-only memory) is a mature, high densi- 
ty, nonvolatile, reliable and low cost memory tech- 
nology widely used in PC and embedded applica- 
tions. Once it is manufactured however, the 
contents of a ROM can never be altered. Addition- 
ally, initial ROM programming involves a time- 
consuming mask development process that requires 
stable code and is most cost-effective in high vol- 
umes. 

Easy updatability makes flash memory clearly more 
flexible than ROM in most applications. 

— SRAM (static random-access memory) is a high- 
speed, reprogrammable memory technology which 
is limited by its volatility and relatively low density. 
As a volatile memory technology, SRAM requires 
constant power to retain its contents. Built-in bat- 
tery backup is therefore required when the main 
power source is turned off. Since battery failure is 
an inevitable fact of life, SRAM data loss is an ever- 
present danger. Additionally, SRAM requires four 
to six transistors to store one bit of information. 
This becomes a significant limitation in developing 
higher densities— effectively keeping SRAM cost 
relatively high. 


Figure 1. Intel Flash Memory vs Traditional Memory Technologies 
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In contrast, Intel flash memory is inherently nonvola- 
tile, and the single transistor cell design of Intel’s 
ETOX manufacturing process is extremely scalable, al- 
lowing the development of continuously higher densi- 
ties and steady cost improvement over SRAM 
(Figure 2). 



Figure 2 


— EPROM (electrically programmable read-only 
memory) is a mature, high-density, nonvolatile 
technology which provides a degree of updatability 
not found in ROM. An OEM may program 
EPROM as needed to accommodate code changes 
or varying manufacturing unit quantities. Once pro- 
grammed, however, the EPROM may only be 
erased by removing it from the system and then 
exposing the memory component to ultraviolet 
light— an impractical and time-consuming proce- 
dure for many OEMs and a virtually impossible 
task for end-users. 

Unlike EPROM, flash memory is electrically re-writa- 
ble within the host system, making it a much more 
flexible and easier to use alternative. Flash memory of- 
fers OEMs not only high density and nonvolatility, but 
higher functionality and the ability to differentiate their 
systems. 

— EEPROM (electrically erasable programmable 
read-only memory) is nonvolatile and electrically 
byte-erasable. Such byte-alterability is needed in 
certain applications but involves a more complex 
cell structure, and significant trade-offs in terms of 
limited density, lower reliability and higher cost, 
making it unsuitable as a mainstream memory. 

Unlike EEPROM, Intel flash memory technology uti- 
lizes a one-transistor cell, allowing higher densities, 
scalability, lower cost, and higher reliability, while tak- 
ing advantage of in-system, electrical erasability (Fig- 
ure 3). 
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Figure 3 


— DRAM (dynamic random access memory) is a vol- 
atile memory known for its density and low cost. 
Because of its volatility, however, it requires not 
only a constant power supply to retain data, but 
also an archival storage technology, such as disk, to 
back it up. 

Partnered with hard disks for permanent mass storage, 
DRAM technology has provided a low-cost, yet space 
and power-hungry solution for today’s PCs. 

With ETOX process technology, Intel manufactures a 
flash memory cell that is 30% smaller than equivalent 
DRAM cells. Flash memory’s scalability offers a price 
advantage as well, keeping price parity with DRAM, 
and also becoming more attractive as a hard disk re- 
placement in portable systems as densities grow and 
costs decline. 

Intel flash memory combines advantages from each of 
these memory technologies. In embedded memory ap- 
plications, flash memory provides higher-performance 
and more flexibility than ROM and EPROM, while 
providing higher density and better cost effectiveness 
than battery-backed SRAM and EEPROM. Moreover, 
the true nonvolatility and low power consumption 
characteristics of flash memory make it a compelling 
alternative to DRAM in many applications. 


ETOX III TECHNOLOGY 

Unlike other approaches to flash memory, Intel ETOX 
is a proven technology. As its name suggests, ETOX 
(or “EPROM tunnel oxide”) technology evolved from 
EPROM. With 95% process compatibility with 
EPROM, ETOX taps experience gained from a mature 
high-volume manufacturing base pioneered by Intel in 
the 1970s. 

Data retention and lifetime reliability statistics for 
ETOX III flash are equivalent to those of EPROM. 
Representing the third generation of Intel flash memo- 
ry technology, the ETOX III 0.8 jit process provides 
< 100 FITS (failures in time) @ 55°C in a specification 
that delivers 100,000 write cycles per block. This capa- 
bility significantly exceeds the cycling requirements of 
even the most demanding applications. 
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For example, code storage for embedded control pro- 
grams used in standard computer applications is infre- 
quently updated. Twenty-year system lifetimes may re- 
quire fewer than 100 rewrites. Even routinely-changed 
data tables (used in navigational computers and black 
box controllers) only require about 1,000 write cycles 
over a 20-year period. The most demanding flash mem- 
ory application of all, archival data storage in PC appli- 
cations, typically requires about 5,000 write cycles in 20 
years. 

ETOX flash memory’s simple single-transistor cell 
structure makes it smaller than other flash cells, allow- 
ing designers to create highly integrated systems which 
are more reliable and cost-effective than those based on 
more complex and less mature flash technologies. The 
inherent scalability of ETOX III Flash Memory and 
high-volume manufacturing is enabling a correspond- 
ing downtrend in flash cost. 

Flash memory has added a new dimension to nonvola- 
tile memory applications. Embedded systems, such as 
PC BIOS, hard disk drive controllers and cellular tele- 
phone applications take advantage of the easy update 
capability, high density and high performance of Intel 
Flash Memory. Today’s new generation of portable 
computers require the optimum combination of per- 
formance, size, weight, low power and shock resistance. 
Whether implemented in memory cards, solid state 
disks or at the component level, Intel’s Flash Memories 
are also enabling a whole new generation of mobile 
computers. 

IMPLEMENTING INTEL FLASH 
MEMORY 

Today, Intel continues to serve both updatable nonvol- 
atile memory applications as well as the rapidly emerg- 
ing solid-state mass storage applications with flash 
memory solutions tailored to meet the needs of these 
markets. 


Updatable Code Storage 

Code and data storage comprise the updatable nonvola- 
tile memory applications that require high perform- 
ance, high density, and easy update capability. Because 
these applications are not updated as frequently as sol- 
id-state mass storage applications, erase/write cycles 
are not as critical as integration and performance re- 
quirements. This application segment is served effec- 
tively with full chip-erase or Boot Block products. 


* Based on 10 MB card design, 5,000 cycle yields 50,000 MB of stored 
data, which far exceeds most usage environments and file system 
methodologies. 


Intel’s 28F001BX 1 Mbit Boot Block flash component, 
featuring a sectored architecture, has been widely ac- 
cepted in embedded code storage applications, particu- 
larly in PC BIOS and cellular communications. By 
adopting Boot Block for their products, over 20 PC 
manufacturers have gained added flexibility and the 
ability to differentiate in a highly competitive market. 
End users also benefit from the ability to upgrade BIOS 
software quickly and securely. The blocked architec- 
ture allows the OEM to store critical system code se- 
curely in the lockable “boot block’’ of the device that 
can minimally bring up the system and download to 
other locations of the device to initialize the system. 
The hardware boot locking feature guarantees that even 
if the power is disrupted during a BIOS update, the 
system will be able to recover immediately. 

In response to customer requests for speed, density, low 
power, surface-mount options and an industry-standard 
upgrade path for portable computing and telecommuni- 
cations, Intel more recently introduced the 2 Mbit 
28F200BX and 4 Mbit 28F400BX Boot Block prod- 
ucts. 

These products offer 60 ns performance; two surface 
mount packages: 40-lead TSOP (X8 only) and 44-lead 
PSOP; and a proprietary Boot Block architecture simi- 
lar to the 1 Mbit Boot Block device. The Boot Block 
stores the code necessary to initialize the system, while 
parameter blocks can be used to store manufacturing 
product code, setup parameters, and frequently updat- 
ed code such as system diagnostics. The main operating 
code is stored in the main blocks. Both devices are 
available in a xl6/x8 ROM-compatible pin-out in 
44-lead PSOP surface mount packaging. These pinouts 
and packages allow an easy upgrade from 2 Mb to 
4 Mb, since only one address is added to the 4 Mb 
device. 


Solid-State Mass Storage 

This major application segment requires very high den- 
sity memory, automated programming and high-per- 
formance erase/write capability at a very low cost per 
bit. Erasing and writing portions of the code or data is 
much more frequent in solid-state mass storage than in 
updatable firmware applications. 

Intel’s symmetrically blocked 8 Mbit 28F008SA Flash- 
File™ memory is the highest density nonvolatile read/ 
write solution for solid-state mass storage. What’s 
more, it is the first flash memory device optimized for 
solid-state storage of software and data files. 

The 28F008SA is packaged in an advanced 40-lead 
TSOP (thin, small outline package) or 44-lead PSOP 
(plastic SOP) to provide the extremely small form fac- 
tor required for today’s handheld, pen-based and sub- 
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notebook portable computers. The compactness of an 
8 Mbit device in a TSOP package allows for high-densi- 
ty flash arrays to be included both on a system mother- 
board for direct execution of user programs or operat- 
ing systems, as well as memory cards for transportable 
program and file storage. 


Memory Cards 

Intel’s family of flash memory cards provides the most 
reliable and rugged form of removable memory media. 
High density, true nonvolatility, rewrite flexibility, and 
proven cost effectiveness make Intel Series 1 Flash 
Memory Cards the ideal medium for storing and updat- 
ing application code as well as capturing data. 

For file storage applications that require high perform- 
ance, ruggedness, long battery life, small size and light 
weight, Intel’s Series 2 Flash Memory Cards in 
4-Mbyte, 10-Mbyte and 20-Mbyte densities provide the 
best solution. Based on Intel’s 8-Mbit FlashFile memo- 
ry components, the Series 2 card’s block-erase function- 
ality and high density take full advantage of flash filing 
systems like Microsoft*’s Flash File System software to 
provide full disk emulation in the form of removable, 
nonvolatile storage. The cards conform to the 
PCMCIA 2.0/JEIDA 4.1 68-pin standards and are 
compatible with Intel’s Exchangeable Card Architec- 
ture (ExCA™) to ensure system-to-system interopera- 
bililty. 


THE IMPETUS BEHIND THE “SOLID- 
STATE” DISK 

Because the disk-based PC is so prevalent and eminent- 
ly familiar to both designers and end-users, many of 
today’s portable systems still rely on it as their primary 
medium. At the same time, disk drive manufacturers 
have made great strides toward improving the reliabili- 
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ty, size and performance of their systems, as well as the 
disk media themselves. 

Yet the disk drive is an electro-mechanical system with 
inherent limitations. Any mechanical hardware is much 
more vulnerable than solid state semiconductor tech- 
nology to the shock, vibration, and impurities that por- 
table PCs encounter during normal use. Hard disk 
drives can typically withstand up to lOGs of operating 
shock; Intel FlashFile memory, with no moving parts, 
can withstand as much as lOOOGs. Additionally, Intel’s 
Series 2 Memory Cards feature approximately 1.6 mil- 
lion hours mean time between failure (MTBF). Such 
endurance and reliability is essential for many of to- 
day’s truly mobile handheld palmtop and notebook 
sized PCs, particularly within applications requiring ex- 
treme data integrity. 

Power consumption is another major consideration for 
today’s mobile PC designer and user. The drive typical- 
ly requires anywhere from 3 watts to as many as 
8 watts of power to run — which means rapid drain of 
the system’s batteries. Compare this to flash memory in 
a hard disk configuration. It consumes less than one 
two-hundredth the average power of a comparable 
magnetic disk drive based on the typical user model. At 
the chip level, the 8 Mbit FlashFile Memory compo- 
nent has a DEEP POWERDOWN mode that reduces 
power consumption to less than 0.2 jmA. 

Additional shortcomings of disk drives are their size, 
weight and floor costs. Magnetic drives do not scale 
well, that is, it becomes increasingly difficult to im- 
prove or even retain density as platter size shrinks. 
Thus, every reduction in drive size requires complete 
retooling and costly learning. Also, the complex con- 
troller circuitry provides a price floor under which 
magnetic drives cannot drop. Since flash is scalable, at 
some point in the near future, small magnetic drives are 
likely to become more expensive per Mbyte than flash 
cards and are certain to have less capacity. 



Disk/DRAM 
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Direct Processor Access 

Total Time to Access 
(1Kbyte File) 

37.3 ms 

0.077 ms 
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From a performance standpoint, disk-based systems 
still require some form of supplementary memory that 
is directly executable. Typically, DRAM is used for ex- 
ecutable code storage and data manipulation. Data 
from the disk is downloadable into the DRAM cache 
before users can access the information. Then when a 
“save” operation is desired, the data is uploaded from 
DRAM back into the disk. This download/upload pro- 
cess slows down system throughput while the redun- 
dant memory media produce even more system over- 
head in the form of added space, power consumption 
and weight (Figure 4). 

Today’s PCs are typically configured with 
4 Mbytes- 8 Mbytes of DRAM backed up by at least a 
40-Mbyte disk. FlashFile memory fully supports this 
system configuration when used simply as a magnetic 
drive replacement.' Instructions and data are still 
swapped to DRAM, but at a faster rate. Plus execution 
speed can be enhanced if the DRAM is replaced with 
SRAM. 

In the solid-state computer, the “DRAM + magnetic 
hard drive” is replaced by a “flash memory + 
SRAM”. The key to this architecture is the ability to 
eXecute-In-Place (XIP). Program instructions stored in 
flash memory are read directly by the processor. Re- 
sults are written directly to the flash memory. Com- 
pute-intensive operations that require the fastest memo- 
ry access and byte-alterability can use high-speed 
SRAM or pseudo SRAM. Some of the system DRAM 
can be replaced by low-cost flash and a small part of 
the DRAM can be replaced by SRAM. The flash mem- 
ory space is made even more storage efficient through 
the use of compression techniques which may offer up 
to 2:1 compression. 


SOFTWARE DEVELOPMENTS 
POSITION FLASH FOR PORTABLE 
APPLICATIONS 

The majority of today’s portable computers and sup- 
porting software programmers are designed to run us- 
ing Microsoft’s MS-DOS* disk operating system. MS- 
DOS was developed to allow broad-based compatibility 
between systems and software and to optimize the sec- 
toring scheme inherent to disk technology. 

Intel’s Flash Memory, based on a block-erase architec- 
ture, divides the flash memory into segments that are 
loosely analogous to the zones recognized in MS-DOS. 
Thanks to recent software developments, flash memory 
can effectively serve as the main memory within porta- 
ble computers, providing user functions virtually identi- 
cal to, and even improved over, those of disk-based sys- 
tems. 


Specifically, two recent developments allow this 
achievement: DOS in ROM-executable form (DOS was 
formerly designed to be stored on disk and then down- 
loaded to/executed out of RAM); and a file system de- 
signed for flash memory technology that allows the de- 
vices to erase blocks of memory instead of the whole 
chip. 


ROM-executable DOS provides several benefits to both 
system manufacturers and ultimately end users. First, 
since most of the operating system is composed of fixed 
code, the amount of system RAM required to execute 
DOS is reduced from 50K to 15K, thereby conserving 
system space and power. Secondly, DOS can now be 
permanently stored in and executed from a single 
ROM-type of device — flash memory — so systems come 
ready to run. Lastly, users enjoy “instant on” perform- 
ance since the traditional disk-to-DRAM boot function 
and software downloading steps are eliminated. 

For example, by storing application software and oper- 
ating system code in a Resident Flash Array (RFA), 
users enjoy virtually instant-on performance and rapid 
in-place code execution. An RFA also protects against 
software obsolescence because it is in-system updatable. 
Resident software, stored in flash rather than disk, ex- 
tends battery life and increases system reliability. 



Since erasing and writing data to flash memory is a 
distinctly different operation than rewriting informa- 
tion to a disk, new software techniques were necessary 
to allow flash to emulate disk functionality. File man- 
agement software like Microsoft* ’s Flash File System 
(FFS) allows Intel’s Flash Memory components and 
flash cards to emulate the file storage capabilities of 
disk. Microsoft’s TFS transparently handles data swaps 
between flash blocks similar to the way MS-DOS han- 
dles swaps between disk sectors. Under FFS, the user 
may input a MS-DOS or Windows* command without 
regard for whether a flash memory or magnetic disk is 
installed in the system. The FFS also employs wear-lev- 
eling algorithms that prevent any block from being cy- 
cled excessively, thus assuring millions of hours of reli- 
ability. Flash filing systems make the management of 
flash memory devices completely transparent to the 
user. 


CONCLUSION 

Intel Flash Memory presents an entirely new memory 
technology alternative. As a high-density, nonvolatile 
read/write technology, it is exceptionally well-suited to 
serve as a solid-state disk or a cost-effective and highly 
reliable replacement for DRAMs and battery-backed 
static RAMs. Its inherent advantages over these tech- 
nologies make it particularly useful in portable systems 
that require the utmost in low power, compact size, and 
ruggedness while maintaining high performance and 
full functionality. 
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Intel Flash Memory offers: 

• Inherent Nonvolatility: Unlike static RAMs, no 
backup battery is required to ensure data retention. 
In contrast to DRAMs, flash requires no disk to 
provide backup storage of data, programs or files. 

• Cost-Effective High Density: Today, Intel flash 
memories cost about the same as DRAMs and 
about one fourth of SRAMs on a per-bit basis. The 
broad acceptance of flash is driving manufacturing 
volumes up and costs down at an unprecedented 
rate, allowing flash to soon compete on a cost basis 
even with disk drive within the notebook, sub-note- 
book and palmtop markets. 

• Solid-State Performance: Because it is a semicon- 
ductor technology, flash memory consumes much 
less power, is much lighter in weight and is smaller 
and more shock-resistant and reliable than disk 
drives. Mobile computers no longer have to drain 
the battery to run a disk drive motor or accommo- 
date the disk assembly’s added bulk and weight. 
Now users no longer have to be threatened with the 
possibility of losing their data after a disk crash 
when conditions become unusually rough. 

• Direct Execution: Since no disk-to-DRAM down- 
load step, seek or latency times are incurred with 


flash memory, users enjoy significantly higher speed 
program and file access, as well as systems that turn 
on instantly to wherever the user left off. 

• Easy Updatability: Unlike other nonvolatile memo- 
ry technologies — ROM that can never be altered af- 
ter it is manufactured or EPROM that can only be 
erased by removing it from the system and exposing 
it to ultraviolet light — flash can be erased and repro- 
grammed electrically while resident in the host sys- 
tem. 

• Software Compatibility: With Flash File System 
software and ROM-executable versions of the disk 
operating system (DOS), complete software compat- 
ibility between a user’s desktop and portable system 
is ensured. 

• Exchangeable Card Architecture (ExCAtm); 
Through Intel’s ExCA card interface standard, In- 
tel’s flash memory cards meet all specifications of 
PCMCIA 2.0, ensuring interchangeability between a 
host of PCMCIA-compatible systems. 

• Family of Products: Intel Flash Memory products 
are currently available in component densities up to 
8 Mbits, and in 4-Mbyte, 10-Mbyte and 20-Mbyte 
memory cards. Additionally, Intel offers Boot Block 
devices in densities up to 4 Mbits. 
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New/Updated Technical Literature 

By the time you receive this databook, new information 
may be available for Intel’s Flash Memory products. 
This could include advanced information on new devic- 
es or important new applications information or data- 
sheet addendums for those described in this databook. 
Call 1-800-548-4725 (US and Canada) for the newest 
information on Intel Flash Memories. This service is 
available from 7am to 7pm Central Standard Time. 
Contact your local distributor or sales office if outside 
US or Canada. 


Applications Support Hotline 

The Technical Hotline is staffed by applications person- 
nel during normal business hours — Sam to 5pm Pacific 
Standard Time. Toll free number 1-800-628-8686 is 
available for US and Canada; 916-356-7599 is also 
available for those who cannot access the toll free num- 
ber. 

Additionally, assistance can be obtained through your 
local Intel/distributor sales office. You can leave a mes- 
sage during off hours or when applications personnel 
are already handling calls. 


Intel’s Application Bulletin Board 
System (BBS) 

Intel’s Application Support BBS provides the designer, 
developer or OEM using or contemplating the use of 
Intel components, systems or software with the latest 
information on Intel’s product line. 

The Intel Application Support BBS is duplicated at two 
sites worldwide, and can be accessed at 916-356-3600 
(Folsom, California USA) or 44-793-496340 (Swindon, 
England UK). Upon calling your are prompted 
through an automatic registration process. You then 
have immediate access to the downloadable files area. 
For non-urgent requests or technical assistance you 
may leave a message to one of our System Operators 
(SysOps). Online forums among users are not support- 
ed. In North America you may also call our tollfree line 


at 1-800-897-2536. This limited access allows you to 
download the current BBS master file list (generated 
nightly), FaxBACK* catalogs, our Windows-based 
FaxFind keyword search utility and the BBS user’s 
guide. The BBS supports baud rates up to 19.2 Baud; 
settings are 8 data bits, No parity and 1 stop bit. 

♦NOTE; 

Other brands and names are the property of their re- 
spective owners. 

The eight flash memory file areas are: 

• Bulk Erase 

• Boot Block 

• FlashFile™ 

• Flash Card 

• Flash Drive 

• Tools 

• FlashFile™ Layout: 8/16/32 Mbit 

• Boot Block Layout: 2/4 Mbit 

These file areas include the following types of support: 

• Software drivers 

• 3rd-party programming support, tools, adapters and 
vendor information 

• Reader/Writer support for Flash Memory Cards 
and ATA Flash Drives 

• Oread and Workview schematic symbols 

• Timing Designer files 

• FLASHBuilder 16-Mb FlashFile Memory Win- 
dows-based design/help file 

• Information (document) navigator utility 

• Design recommendations 

• Component flexible layout files 

• Presentations 

• Socket information 

• Data sheet addendums 

• Errata notifications 
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FaxBACK System 

Available 24 hours a day. Order documents by phone 
for prompt delivery to your fax machine. 

Dial toll free number 1-800-628-2283 if inside US or 
Canada (or 916-356-3105, which also supports users 
not having tollfree access), and the user-friendly system 
will prompt you along. In Europe, dial 44793-49-6646. 
Have your fax number ready. 

Each document is assigned an order number. All docu- 
ments for a particular product group (e.g., Flash Mem- 
ory, Multimedia, PCI . . . ) are listed in their subject 
catalog. First time users should order the appropriate 
catalog(s) for a complete reference of available informa- 
tion; this is down by following the automated system’s 
voice prompts and selecting catalog order. Document 
orders are made by selecting document order at the 
voice prompt; you are allowed up to five documents per 
call. 

Rely on FaxBACK for the following types of informa- 
tion about flash memory products: 

• Product briefs and literature references 

• Press releases and new product announcements 

• Datasheet addendums 

• Technical support material and references 

• Product evaluation kits 

• 3rd-party programming support, tools, adapters and 
vendor information 


• System/compatibility validation reports 

• Application articles 

• Design recommendations 

• Errata notifications 

Document Highlight: #2204 is the all-inclusive “Flash 
Memory Technical Support Summary”. This document 
summarizes available literature and order numbers, 
FaxBACK and BBS references, evaluation kits and 
support tools/information, programmer and reader/ 
writer support and vendor contact references, program- 
ming adapter information and vendors, prototyping 
and bum-in/test socket vendors and information, 12 V- 
convertor vendors, PCMCIA development tools/com- 
pliance testing/general support contacts, PCMCIA 
card-connector vendors, FFS vendors, disk emulator 
vendors and BIOS vendors. 


FaxFind 

A Windows-based utility to search all FaxBACK docu- 
ments and BBS files via keyword entry. Available on 
the Applications BBS under the Bulletins menu or in 
the FaxBACK area selected via File Locator. Also 
available via the dedicated FaxFind number: 
1-800-897-2536. 
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SPRINT PLUS48 
Intel Support Version 

Universal Device 
Programmer 

General Description 

The PLUS48 is the newest Univer- 
sal Device Programmer in the 
Sprint family. Complete with 48 
universal pin drivers, it sets a new 
standard for low-cost programmers 
in this class. A specially-configured 
version supports all Intel Flash, 
Microcontroller, PLD, EPROM 
and EEPROM devices at a very at- 
tractive price. Controllable lockout 
of standard software libraries allow 
you to purchase the Intel support 
you need today, with the capability 
to switch to full industry support 
later. 

Full custom ASIC pin drivers were 
developed enabling the program- 
ming and testing of new high-speed 
CMOS devices. A compact design 
is achieved because of these analog/ 
digital ASICs, allowing pin drivers 
and Vcc and GND relays to be as 
close to device pins as possible. This 
technology virtually eliminates 
ground bounce, greatly improving 
programming yields. 

As a peripheral attachment, the 
PLUS48 utilizes your PCs RAM, 
CPU and Hard Disk Drive. Key to 
this approach, the PLUS48’s cost is 
extremely competitive while pro- 
viding lots of programming power. 

Additionally, file download times 
of stand-alone programmers is 
eliminated. 



PC Interface is through the standard parallel port. With included software 
installed, the PLUS48 automatically interrogates LPT ports to determine 
where it is attached — then configures itself. Ant LPT port, such as that on a 
Notebook PC, can be used to control the PLUS48 giving you the freedom to 
take your support on the road. 


Specifications 

STANDARD FEATURES 

• INTEL device support. 

• Standard 48-pin DIP/ZIF socket. 

• Larger pin-count and non-DIP devices supported via adapters. 

• Precise digital and analog signals on every pin. 

• PC peripheral — Uses computer’s existing RAM, CPU and HDD to pro- 
vide maximum price performance. 

• Portable — Connects to any standard LPT port. 

• Compact design eliminates yield loss due to ground bounce. 

• An internal crystal-controlled state machine insures accurate waveform 
generation — independent of the PC. 

• Intuitive full screen menus make the PLUS48 simple to learn and easy to 
use. 

• Batch mode operation — All commands can be executed from a batch file. 


November 1994 
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Available Versions 

INTEL SUPPORT VERSION 

• Programs Intel devices only. 

• Reads all manufacturer’s devices. 

UNLIMITED VERSIONS 

• Supports all devices from SPRINT device list. 

PLUS48 is easily upgraded from Intel Support Version 
to Full Support via KEYFAX. 

PC Requirements 

• DOS-based PC, Laptop or Notebook (tested to 486). 

• 512 KB free RAM. 

• 3 MB free space on HDD. 

• CGA, EGA, VGA or LCD. 

• Centronics Parallel port. 

System Operations 

• Read, Blank check, Program and Verify. 

• Sum check, ID test, Illegal bit and Continuity 
check. 

• Address range, Change device, Execute DOS, Input 
file. 

• Edit data, List memory and Write file. 

Translation Formats 

• INTEL 8/16/32-bit 

• 286/386 OMF. 

• Motorola 8/16/32 bit. 

• TEK HEX, ASCII HEX, MOS Tech. 

• JEDEC, POF, Binary. 

Standard Accessories 

• 48-pin DIP/ZIF socket. 

• User’s manual. 

• System Software. 

• Power supply. 

• Line cord. 
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Electrical Requirements/ 

Physical Specifications 

• Operating voltages: 100 to 250 VAC 

• Frequency range: 47 to 63 Hz 

• Power consumption: 25W 

• Operating temperature: 10°C to 40°C 

• Dimensions: 2.56 x 17.9 x 20.5 cm 

• Operational weight: 2.61 kg 


Safety Standards 

• UL, CSA and GS 

The PLUS48 comes with a standard 48-pin DIP/ZIF 
socket. Affordable adapters are available for larger pin- 
count DIP devices or other package types. Please con- 
tact SMS or one of the SMS distributors from the fol- 
lowing distribution list for availability. 


SMS Service Centers 

. • USA 

SMS North America Inc. 
P.O.Box 3159 
Redmond, WA 98073-3159 
Phone: (206) 883-8847 
FAX: (206) 883-8601 

• Japan 
Micron Inc. 

4-26-16, Koenji-Minami 
Suginami Tokyo 166 
Phone: +81 3 3796 1860 
FAX: +81 3 3796 1866 

• Europe 

SMS GmbH 
Im Grund 15 
88239 Wangen, Germany 
Phone: +49 7522 9728 0 
FAX: +49 7522 9728 50 
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International 
Distributors for SMS 
SPRINT products: 

Austria 

Memo ELECTRONICS 
Muehlberg str. 22 
A- 1140 Vienna (Wien) 

Phone: +(43) 1 975 626 
FAX: +(43) 1 975 627 

Belgium 

Sonetech BELGIUM 
de Limburg Stirumlaan 243, Bus 3 
B-1780 Wemmel 
Phone: +(32) 2 460 07 07 
FAX: +(32) 2 460 12 00 

Denmark 

sd Elektronik & Data 
Rejnstrupvej 11 
DK - 4640 Faskse 
Phone: +(45) 56 71 41 51 
FAX: +(45) 56 71 41 51 

Finland 

Computer 2000 Finland OY 

P.O. Box 44 

Pyyntitie 3 

02231 Espoo 

Phone: +(358) 0887 331 

FAX: +(358) 0887 33 343 

France 

Emulations 
Chemin de Gizy 
Parc Burospace A13 
F-91572 Bievres Cedex 
Phone: +(33) 1-69.41.28.01 
FAX: +(33) 1-60.19.29.50 

Newtek 

8 rue de l’Esterel-SILIC 583 
F-94663 Rungis Cedex 
Phone: +(33) 1-46.87.22.00 
FAX: +(33) 1-46.87.80.49 

Germany 

Logic Design 
Riepacker str. 65 
D-31 691 Helpsen 
Phone: +(49) 5721 9714 0 
FAX: +(49) 5721 9714 97 


MSC Vertriebs GmbH 
Industrie str. 16 
D-76297 Stutensee 
Phone: +(49) 7249 910 175 
FAX: +(49) 7249 910 221 

SE Spezial Electronic 
Kreuzbreite 15 
D-31675 Buckeburg 
Phone: +(49) 5722 203 0 
FAX: +(49) 5722 203 120 

Synatron 

Bretonischer Ring 13 
D-85630 Grasbrunn 
Phone: +(49) 89 460 20 71 
FAX: +(49) 89 460 56 61 
Trias 

Zur Eibe 1 1 
D-47802 Krefeld 
Phone: +(49) 2151 47 67 01 
FAX: +(49) 2151 47 47 15 

Great Britain 

Concentrated Programming Ltd. 
Unit 3A The Makings 
Station Rd., Sawbridgeworth 
Herts, CM21 9JX 
Phone: +(44) 279 600 313 
FAX: +(44) 279 600 322 

Pronto Electronic Systems Ltd. 
City Gate House 
399-425 Eastern Ave., Gants Hill 
Illford, Essex IG2 6LR 
Phone +(44) 81 554 5700 
FAX: +(44) 81 518 3222 

Hong Kong 

Int’l Technology Enterprise Co. 

5 Long Yuet St. 6th Floor 
F2, Kowloon 
Phone: +(852) 3622309 
FAX: +(852) 3620886 

Israel 

Talviton Electronics Ltd. 

9, Biltmor str., P.O. Box 21104 
Tel Aviv 61216 
Phone: +(972) 3 54 42 430 
FAX: +(972) 3 54 42 085 
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Italy 
De Mico 

Viale Vittorio Veneto, 8 
20060 Cassina De’Pecchi-Milano 
Phone: +(39) 2 95 343 600 
FAX: +(39) 2 95 219 12 

Silverstar 

Viale Fulvio Testi, 280 
20126 Milano 
Phone: +(39) 2-66 12 51 
FAX: +(39) 2-66101359 

Japan 

Micron Inc. 

4-26-16, Koenji-Minami 
Suginami, Tokyo 166 
Phone: +(81) 3 3317 9911 
FAX: +(81) 3 3317 9917 

Korea 

Logicom Corporation 
1634-9 Bongchum-Dong 
Kwanak-Ku, Seoul 
Korea 151-061 
Phone: +(82) 2 888 2858 
FAX: +(82) 2 888 7040 

Netherland 

Sonetech Netherland bv 
Gulberg 33 
NL-5674 TE Nuenen 
Phone: +(31) 40 83 80 09 
FAX: +(31) 40 83 92 71 

Norway 

Kjell G. Knutsen A.S. 

P.O. Box 113 

N-4520 SOR-AUDNEDAL 
Phone: +(47) 38 25 62 05 
FAX: +(47) 38 25 68 18 

Poland 

Cadel sp.z.o.o. 

UL, Tamka 38 
00355 Warszawa 
Phone: +(48) 2 227 50 61 
FAX: +(48) 2 635 52 62 
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Singapore 

WesTech Electronics Pte Ltd. 
12, Lorong Dakar Batu, #05-07 
Kolam Ayer Industrial Park 
Singapure 1334 
Phone: +(65) 743 6355 
FAX: +(65) 746 1396 

Spain 

ADM Electronica SA 
Tomas Breton, 50 3i 2 
E-28045 Madrid 
Phone: +(34) 1 530 41 21 
FAX: +(34) 1 530 01 64 
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Suisse 

Redacom AG 
Gurzelenstrasse 6 
CH-2502 Biel/Bienne 
Phone: +(41) 32 410 111 
FAX: +(41) 32 41 49 49 


Sweden 

Gordia Elektronik 
Box 12 40 
S-221 05 LUND 
Phone: +(46) 46 120211 
FAX: +(46)46 138 156 
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Taiwan 

Prospect Technology Corp. 

5F, No. 348, Sec. 7 Cheng Teh Rd. 
Taipei, Taiwan ROC 
Phone: +(886) 2 820 5353 
FAX: +(886)2 820 5731 

. USA 

SMS North America Inc. 

P.O. Box 3159 
Redmond, WA 98073-3159 
Phone: +(206) 883-8447 
FAX: +(206) 883-8601 
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Multi-APRO Programmer 

Intel Support Version 

General Description 

The new System General Multi- 
APRO is a revolutionary concept in 
device programmers. Based on 48 
Universal pin driver design, it can 
support virtually any programma- 
ble device. The Intel Support Ver- 
sion of Multi-APRO programs all 
Intel Flash, Microcontroller, FLEX- 
logic, EPLD and E(E)PROM de- 
vices at significant discount off our 
standard version. Additionally, all 
other manufacturer’s devices can be 
read into buffer memory. 

This unit comes with full stand- 
alone control, but can be PC driven 
for added flexibility. Expansion is 
possible in two ways: 

1. Full Universal (programs all 
manufacturer’s devices) by 
swapping signature keys, or 

2. Production (gang) programmer 
by adding modules. 

Different package types are sup- 
ported via our own proprietary 
adapters or DIP converters. With 
adapter method, the device sits as 
close to the pin drivers as possible. 
This virtually eliminates any noise- 
related problems due to ground 
bounce. When adapters are unavail- 
able, quality third-party converters 
will be specified by System General. 



Multi-APRO comes standard with 1 megabyte of user RAM, upgradable to 
16 megabytes. The device driver and related file can be downloaded via 
parallel or RS232 (up to 1 15.2K baud) or read in from a master, then stored 
in RAM. Programming therefore is done stand-alone which improves 
throughput time and yield because clock control issues are not present. 
When expanded to a gang programmer, Multi-APRO is the most efficient 
production tool on the market. Since each socket is independent, program- 
ming proceeds continuously from one device to the next, minimizing inser- 
tion overhead. 

Support for Intel devices is provided via normal distribution media (Intel 
Flash Memory Card) or BBS (Downloaded to Flash). New devices are sup- 
ported prior to their introduction, handled via secure methods on a custom- 
er-by-customer basis. 

In addition to the best device support available, upgrades are free for the life 
of the programmer via our 24-hour BBS line. 


Specifications 

• Supports full range of INTEL programmable devices. 

• Standard 48 -pin DIP/ZIF socket. 

• Optional adapters or converters available for different package configu- 
rations. 

• Universally pin-driven. 

• On-board RAM means programming is done directly to chip, providing 
highest yield and throughput. 

• Easy to use PC-assisted SW included. 

• Full Batch-mode capabilities. 


November 1994 

Order Number: 297541-001 
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Translation Formats 

• Intel-HEX (32, 24, 16) ' 

• Tektronix-HEX 

• Motorola S (3,2,1) 

• Signetics-HEX 

• Extended Tekhex 

• HP 64000 Absolute 

• ASCII-HEXQ 

• ASCII-HEX(%) 

• ASCII-HEX(“) 

• ASCII-HEXQ 

• ASCII-HEX SMS 

• ASCII-OCTQ 

• ASCII-OCT(%) 

• ASCII-OCTO 

• ASCII-OCT SMS 

• B10F 

• BHLF 

• BPNF 

• JEDEC 

• Binary (no format, no header) 


Available Versions 

INTEL SUPPORT VERSION 
Features: 

• Programs all Intel devices. 

• Reads any master device. 

• Expandable to full Universal version via field-in- 
stallable signature key. 

• Expandable to production model. 

FULL UNIVERSAL VERSION 
Features: 

• Supports virtually all programmable device technol- 
ogies. 

• Expandable to production model. 

GANG/PRODUCTION VERSION 
Features: 

• Up to eight programming modules. 

• Each independent from the others — allows continu- 
ous programming for highest throughput. 

• No future constraints! 

PC Requirements 

• DOS-based PC, Laptop or Notebook. 

• 512KB free RAM. 

• CGA, EGA, VGA, SVGA or LCD. 

• Remote control and data transfer via PC parallel 
port. 

• Remote control and data transfer via RS232, Baud- 
rate Max 115.2K bps. 

System Operations 

• Read, insertion check, illegal bit check, erase, blank 
check, program, continuity check and verify. 

• Auto-SenseTM, id test. 

• Even/Odd programming. 

• Special on-screen editor. 

• Sum check, Pass/Fail counter. 

• EPROM Auto-Identify. 

• Address range modification. 

• Current sense, boot-block secure. 

• Functional Test, Margin Verify. 

• PLD JEDEC fuse screen editor. 

• Upload/Download functions. 

• Context-sensitive help screen. 

• Stand-alone and remote control. 

• Connects to IBM PC, compatible or non-IBM PC 
via RS232. 


Standard Accessories 

• 48-pin DIP/ZIF socket adapter (Intel Support Ver- 
sion) 

• System software (IBM PC or compatible) 

• Power Supply 

• All neccessary cabling 

• User’s manual 

Adapter Options 

• PLCC 20, 28, 32, 44, 52, 68 or 84 pins 

• QFP100 

Electrical Requirements/Physical 
Specifications 

• Operation Voltages: 90 to 250 VAC 

• Frequency range: 47 to 63 Hz 

• Power consumption: 30W max 

• Operation Temperature: 0° to 45°C 

• Dimensions: 

Controller — 350mm x 200mm 
Module — 350mm x 155mm 

• Safety Standards: UL, CSA, VDE 

• EMI: FCC class B, VDE 0871 B 
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INTERNATIONAL CONTACTS 
FOR SYSTEM GENERAL 

us 

System General Corp. 

1603-A South Main St. 

Milpitas, CA 95035 
TEL: (408) 263-6667 
FAX: (408) 262-9220 
SALES: (800) 967-4776 

Japan 

Nippon System General 
TEL: 81-3-34411510 

Korea 

Wooyoung Tech. Co., Ltd. 

TEL: 82-2-3697099 

Dasan Technology 
TEL: 82-2-5018276 

Hong Kong 

Twin-Star Trading Company, Ltd. 

TEL: 852-3469085 

Singapore 

WesTech Electronics Pte., Ltd. 

TEL: 65-7436355 

EPE Computronics Pte:, Ltd. 

TEL: 65-7468182 


Taiwan 

System General Corp. 

3F, No. 1, Alley 8, Lane 45 
Bao Shing Rd., Shin Dian 
Taipei, Taiwan R.O.C. 

TEL: 886-2-917-3005 
FAX: 886-2-911-1283 

Switzerland 

Novitas Elektronik AG 
TEL: 41-1-9450300 

Belgium 

Eurodis Inelco NV/SA 
TEL: 32-2-2442924 

France 

Micropross 
TEL: 33-20479040 

Norway 

Tormatic A/S 
TEL: 47-34-25011 

Australia 

Macro Dynamics Pty., Ltd. 

TEL: 61-3-7202399 

South Africa 

Specitec Pty., Ltd. 

TEL: 27-11-7891743 

CONTACT YOUR LOCAL DISTRIBUTOR FOR 
PRICING AND AVAILABILITY. 
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Flash Memory Card and Flash Drive Evaluation Kit 
Product Brief 


Product ■ Complete kit for adding a 
Highlights PCMCIA socket to an AT-based 
® ® system 

■ The Flash Drive Kit (iATAKIT) 
includes a 5MB Flash Drive 

■ The Flash Card Kit 
(S2S2PLUSKIT) includes both 
a 4MB Series 2+ and a 2MB 
Series 2 Flash Card 

■ Includes ISA-based PCMCIA 
Reader/Writer that fits into 
an empty floppy disk slot on 
your system 

■ Created for x86 DOS- or 
Windows*-based systems 

■ Includes source code for 
non-DOS system development 

■ Includes SystemSoft’s* 
CardSoft* suite of software 

■ Contains industry-standard 
PCMCIA software, including 
SystemSoft Flash File System 
(FFS) software 

■ Contains a 68-pin PCMCIA- 
ATA to 40/44-pin IDE 
adapter for easy conversion 
(iATAKIT only) 

■ Excellent for evaluating 
Flash Card or Flash Drive 
performance with multiple 
software configurations 



Product Description 

The Flash Drive (iATAKIT) and the Flash Card (S2S2PLUSK1T) evaluation kits 
are designed to make DOS-based AT systems Intel Flash Card or Flash Drive-ready 
— quickly and simply. Each kit provides everything necessary to add a PCMCIA 
socket to a desktop system. 

The Flash Drive and Flash Card kits are ideally suited for designers creating PDA- 
like products; designers of mobile, handheld and sub-notebook products; designers 
who want to evaluate Flash Card and/or Flash Drive products for embedded 
applications; and ISVs who write software for Flash Card or Flash Drive products. 

To shorten time to market, both kits contain all necessary tools in a single box. 

Thus eliminating the time-consuming task of seeking and obtaining separate 
components. 

Each kit includes SystemSoft’s CardSoft suite utilizing industry-standard PCMCIA 
software — as well as SystemSoft’s Flash File System (FFS) software. Addition- 
ally, each kit includes low-level driver and MTD source code, enabling modification 
for your specific requirements or product differentiation. For easy conversion of 
PCMCIA-ATA to IDE pinouts a 68-pin to 40/44-pin adapter is included. 


intel. 


Features 

Benefits 

— All-in-one kit 

— Contains everything needed to develop Intel 
Flash Card or Flash Drive-ready systems 

— Includes low-level driver and MTD source code 

— Enables code modification for specific requirements 

— SystemSoft CardSoft 

— Industry-standard PCMCIA software suite 

— Rash Rle System (FFS) software 

— Industry-standard file system from SystemSoft 

— 68-pin ATA to 40/44-pin IDE adapter 

— Easily converts PCMCIA-ATA pinout to IDE 


The Intel logo is a registered trademark of Intel Corporation. 

Other brands and names are the property of their respective owners. 

Printed in USA/0694/40K/ASI/LK 
© 1994 Intel Corporation 


Order Number: 297506-001 
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SMALL OUTLINE PACKAGE GUIDE OVERVIEW 


Intent This overview provides a quick reference for the Small Outline Package Guide, Intel literature 

order number 296514. 

Contents The table below details, in outline form, the type of information that can be found in the guide. 

How to Order Phone: (800) 548-4725 in US and Canada 

Outside US/Canada, contact local Intel or distributor sales office 

or write to: 

Intel Corporation 
Literature Sales 
P.O. Box 7641 
Mt. Prospect, IL 60056-7641 


Chapter 

Contents 

Package 

Description 

• Small-Form-Factor/ Fine-Pitch Introduction 

• TSOP, SSOP and PSOP Key Features 

• Device/Package Offerings 

SOP Layout 
Features and 
Applications 

• Space-Saving Features 

• Device Pinouts 

• SOP Applications 

SOP Physical 
Dimensions 

• Package Drawings and Specifications 

• PCB Land-Pad Layout Diagrams 

• Component Volume and Weight 

SOP Package 
Characteristics 

• Electrical Characteristics 

• Thermal Data 

SOP Manufacturing 

• Assembly Process Flow 

• Package Materials 

• Cross-Section Diagrams 

• Electrical and Solderability Test 

• Mechanical Inspection 

SOP Reliability 
Stresses 

• Temperature Cycling via Convection 

• Thermal Shock, Liquid-to-Liquid Stress 

• Steam, Accelerated Moisture Penetration Stress 

• 85°C/85% Relative Humidity, Alternate Pins Biased ( + 5V and GND) 

• High-Temperature Dynamic Life Test 

• Solder-Joint Reliability 

• Surface Mount Process Considerations 

• Use Condition Considerations 

• Solder-Joint Life Predictions Curves 

SOP Handling 

• SOP Shipping Formats 

• Tray Diagrams and Dimensions 

• Tray Recycling 

• Tape and Reel Carrier Diagrams and Dimensions 

• Tube Diagrams and Dimensions 

• Moisture Considerations and Data 

— Plastic Package Aggressive Preconditioning Flow 

— Reliability Data 

— Moisture Absorption 

— Moisture Desorption 
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Chapter 

Contents 

SOP SMT Assembly 
Considerations 

• Storage and Handling 

• Screen Printing 
— Solder Paste 
— Solder Volume 
— Solder Mask 
— Stencil 

— Vision System 
— Squeegee 

• Placement Equipment 

• Cleaning 

• IR Furnace 

• PCB Design Considerations 

• Lead Placement Examples: 
— Good Placement 

— Misaligned 
— Lifting 

SOP Ordering 
Information 

• Production /Package Identification 

References and 

Additional 

Information 

• Other Reference Material 

SOP 3rd-Party 

Equipment 

Suppliers 

- 

• SOP Suction Wand Suppliers 

• SOP Programming Adapter Suppliers 

• SOP Programming Vendors 

• SOP Socket Suppliers 

— Prototyping Sockets 

— Burn-ln/Test Sockets 

• SOP Handler Equipment Suppliers 

• SOP Manufacturing Equipment Suppliers 

• SOP Custom Board Manufacturing and Interposer Mounting 

— 

SOP Standards 
Bodies 

• EIA/JEDEC 

• ANSI 

• IPC 

• EIAJ 
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Intel FLASHBuilder Software 
Product Brief 


Product ■ Supports 16 -Mbit 28 F 016 SA 
Highlights 

■ Text highlights for quick access 
to information about device 
functional blocks 

■ On-line documentation 

■ Toolbar for fast access to 
information resources 

■ FLASHText window for tips 
on using FLASHBuilder 
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Product Description 

FLASHBuilder is a Windows'-based software tool developed to facilitate the 
understanding of and designing with Intel Flash Memory components. Its user 
interface provides a graphical representation of device functional blocks within the 
flash memory architecture. 

FLASHBuilder also features dialog boxes in the toolbar for quick access to 
information about 28P016SA operations, commands, algorithms and registers. For 
example, the command dialog box displays on a single screen the 28F016SA 
command set and corresponding hexadecimal values, bus-cycle counts for each 
command, and status register output indicating a successful operation. 

Currently supporting the 16-Mbit 28P016SA FlashFile memory, FLASHBuilder 
contains the associated user’s manual, application notes and datasheet specifications 
in an easy-to-use, on-line Hypertext format for point-and-click access. Documenta- 
tion embedded in the software includes: 

— 28F016SA User’s Manual 

— 28F01 6S A Application Notes: 

— AP-357 “Power Supply Solutions for Flash Memory” 

— AP-359 “28F008SA Hardware Interfacing” 

— AP-375 “Upgrade Considerations from the 28F008SA to the 28F016SA” 

— AP-377“28F016SA Software Drivers” 

— AP-378 “System Optimization Using the Enhanced Features of the 
28F016SA” 

— 28F016SA timing and waveform specifications 

— 28F016SA Qs and As — Frequently asked questions and answers regarding 
28F016SA FlashFile memory 

— Flash Memory Overview — A high level description of flash technology and 
product applications. 
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Future updates to FLASHBuilder will provide support for multiple devices and chip 
architectures. To speed decision making and reduce user resource requirements, 
options allowing minimal or partial install will be added. With minimal install 
selected, a subset of available information can be installed, allowing the designer to 
quickly decide which device best suits the application need. Partial install minimizes 
disk consumption by installing only the necessary Files for the selected device(s). 


Features 

BeneGts 

— Graphical user interface 

— Easy-to-use point and click access 

— On-line documentation 

— Quick reference to technical specifications and 
product applications notes 

— Integrated toolbar dialog boxes 

— Intuitive resource for operations, registers, commands, 
algorithms, documentation, help 

— Enhancement path 

— Variable install options will meet application needs 
(minimal/partial installations) 


System Requirements — Version 1.0a 

— Intel386™ microprocessor or higher 

— 2-MB RAM 

— 4-MB free hard disk space 

— VGA display (SVGA recommended) 

— Vh" floppy diskdrive 

— Windows 3.1 or above 

To order FLASHBuilder or additional literature, call 1 (800) 548-4725. 
FLASHBuilder order number: 297508. 

For technical assistance and/or the name of your local distributor call 
1 (800) 628-8686. 

FLASHBuilder is also available through Intel’s Bulletin Board Service (BBS): 
in North/South America and Asia Pacific dial (916) 356-3600; in Europe dial 
+44(0)793-496340 


*Other brands and names are the trademarks of their respective owners. 

Printed in USA/ 1094/ 10K/ASI/TC/MCD. 

© 1994 Intel Corporation 


Order Number: 297536-001 
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1.0 INTRODUCTION 

Intel flash memory is rapidly being incorporated into a 
wide range of applications, adding enhanced capability 
to existing “traditional” memory markets, and creating 
new markets that exploit its benefits. Sometimes the 
design platforms may not possess the low powered 12V 
supply for writing flash memory. The system design 
engineer then needs to identify a power conversion so- 
lution with features and capabilities matching the needs 
of the application. For example, portable equipment re- 
quires a power supply converter that minimizes size 
and weight, maximizes efficiency to extend battery life, 
and can be switched into a standby mode to conserve 
power. 

The following pages present some state of the art DC- 
DC converter solutions. These new solutions are small- 
er and more efficient than those typically seen in the 
past. Each of these solutions optimizes a subset of all 
possible power converter features. The choice of an op- 
timal solution for a given application will be a tradeoff 
between several attributes. The solutions shown should 
meet the conversion needs of the majority of applica- 
tions involving flash memory. Specifically, the solutions 
that follow encompass the following five categories: 

• 5V to 12V conversion 

• 3 V (2 alkaline/NiCd cells) to 12V conversion 

• 3V (2 Alkaline/NiCd cells) to 5V conversion 

• Downconverting to 12V from a higher voltage 

• Converting 12V unregulated to 12V regulated 

More than one solution is presented within each of 
these categories. These different solutions have distinct 
optimal features/advantages. The optimal attributes of 
each solution are outlined. In addition, the appendix 
contains a survey of all solutions presented here, and 
provides a basis for comparing their features. The read- 
er should reference it to choose an optimal solution for 
his/her application. 

NOTE: 

Solutions were selected from products offered by over 
thirty DC-DC converter vendors. Since this industry 
develops many new solutions each year, Intel recom- 
mends that designers contact vendors for latest prod- 
ucts. Intel will continue to work with the industry to 
develop optimum solutions for power conversion. Intel 
Corporation assumes no responsibility for circuitry 
other than circuitry embodied in Intel products. No 
other circuit patent licenses are implied. 


inlel. 

2.0 INTEL FLASH MEMORY POWER 
REQUIREMENTS 

Intel flash memory is powered by two sources; a 5V 
Vcc line and a 12V Vpp line. V<x is the primary pow- 
er source and the only power source needed to read the 
memory. Vpp is required when writing or erasing the 
memory. 

Vcc Characteristics 

Vcc supplies power to the flash device during all oper- 
ational modes. Maximum Vcc current is demanded by 
the device during the read operation. The data sheets 
for specific Intel flash memory devices should be con- 
sulted to determine the maximum read current (Ice) 
for the device. If multiple components are read simulta- 
neously, the Vcc current requirement increases propor- 
tionately. Vcc tolerance must be maintained to within 
specification limits at all times for proper functioning of 
the device. 


Vpp Characteristics 

The supplemental Vpp source provides the higher volt- 
ages needed to carry out the erase, erase verify, pro- 
gram, and program verify operations. Maximum Vpp 
current is typically demanded during the program and 
erase modes. The data sheets for specific Intel Flash 
Memory devices should be consulted to determine the 
Vpp voltage and maximum Vpp write/erase current 
(Ipp) for the device. If multiple components are pro- 
grammed/erased simultaneously, the current require- 
ment increases proportionately. Vpp must be main- 
tained to within specification limits at all times during 
device program, and erase. The tolerance specification 
on Vpp must be strictly maintained. Over-voltage can 
damage the device, and under-voltage can decrease 
specified device reliability. Although the Vpp supply 
must meet these worst case specifications, power usage 
will typically be much lower. The lower typical values 
seen in the data sheets should be used in calculating 
typical battery life. 
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2.1 Supplies for Battery Powered 
Applications 

In applications where batteries are the primary source 
of power, the power supplies providing Vcc and Vpp 
need to be selected very carefully. Optimized operating 
efficiency of these supplies is important to extend bat- 
tery life. Another attractive feature is the capability of 
these supplies to be switched into a very low power 
shutdown mode. It is important to minimize this shut- 
down current consumption as well since flash memory 
Vpp generators will often be in this state for extended 
periods of time. Moreover, since these supplies are used 
in equipment that is physically small and space-con- 
strained, size and height of the supply need to be mini- 
mized. 

Where two alkaline/NiCd batteries are used as the pri- 
mary source of power, the primary voltage varies de- 
pending on the type and the state of discharge of the 
batteries. For example, alkaline batteries start life off at 
1.5 V, but may still retain a significant amount of energy 
when the voltage falls to 1.0V with use, and will work 
all the way down to 0.8V. On the other hand, NiCd 
cells maintain a near constant voltage of 1.25V 
throughout most of their discharge cycle, and work 
down to 1.0V. A solution that derives Vcc or Vpp from 
2 AA batteries must hence be capable of doing so from 
an input voltage that lies in the range of 1.6V to 3.0V. 

It is best to directly convert the primary battery voltage 
into the various voltages needed throughout the system. 
A step conversion (e.g. a 3V to 5V converter for Vco 
followed by a 5 V to 12V converter for Vpp) is not rec- 
ommended, since the inefficiency involved in each con- 
version step combines into one large inefficiency for the 
sum 3V to 12V conversion. Section 4 presents appropri- 
ate 3V battery to 12V converter solutions. Most of the 
solutions presented in this application note, while spe- 
cifically designed for battery powered applications, are 
also viewed as ideal for other applications that incorpo- 
rate flash memory. 


2.2 Choice of a DC-DC Converter 

The solution to finding the right power supply for flash 
memory lies in picking the right DC-DC converter for 
the job. Three broad categories of DC-DC converters 
available in the market today can be applied towards 
this purpose. These are the low power hybrid DC-DC 
converter module (or modular solution), the low power 
discrete switching regulator IC solution, and the low 
power discrete charge-pump solution. 


The Modular Solution 


The modular solution generally consists of a push-pull 
(Royer type) oscillator built around an isolation trans- 
former, and in some cases followed by a linear regula- 
tor; all of which is encapsulated within a module. This 
hybrid module includes all components that are re- 
quired by the DC-DC converter, and so no additional 
design effort is needed. The input and output voltages 
are fixed, and the input and output are almost always 
isolated via the isolation transformer. The main advan- 
tage of these solutions is that no design effort and/or 
external components are involved. They simply plug 
into a socket on a PC board. Disadvantages include 
lower efficiency (generally 60%), larger size/height (in 
most cases), and higher cost (generally 3x to lOx the 
cost of discrete solutions). 

It would seem that the integration inherent in these 
solutions contributes towards system reliability, howev- 
er the type and quality of the discrete components used 
internal to these hybrid devices is open to question. The 
isolation offered between the input and output is viewed 
as overkill for flash applications, since the total power 
required is typically less than 1W. Note also that the 
isolation transformer is often the main reason for the 
lower efficiencies. 



The Discrete Switching Regulator 
Solution 

The discrete switching regulator IC solution consists of 
a DC-DC converter IC (containing a switching regula- 
tor controller and an output power switch), along with 
a few discrete external components (inductor, diode, 
capacitors, resistors, etc.). The layout of the power sup- 
ply system in this case is mostly left up to the user. 
However, application notes and data sheets explain the 
design process, and provide recommended circuits for 
commonly used solutions. The design can be tailored to 
deliver different output voltages and current levels de- 
pending on the characteristics of the input voltage and. 
the external components. 

Some vendors offer fixed output voltage versions, fur- 
ther simplifying the design process. The newer genera- 
tion of high frequency low power switching regulator 
ICs are specifically targeted at battery powered opera- 
tion, and most can be switched into a low quiescent 
current shutdown mode to extend battery life. These 
have typical efficiencies in the 75% to 90% range. Fur- 
thermore, the higher switching frequencies of these new 
parts (typically 100 KHz to 200 KHz) allow the use of 
smaller external components, which are available in 
surface mount varieties. As a consequence, these newer 
solutions are overall much smaller than what was typi- 
cally seen just a year ago. 
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The Discrete Charge-Pump Solution 

The discrete charge-pump solution is similar to the dis- 
crete switching regulator IC solution in that it also con- 
sists of a DC-DC converter IC and a few discrete 
external components (capacitors). The charge-pump, 
however, operates in a significantly different fashion 
(see Appendix E), and as a result does not require in- 
ductors and diodes as a discrete switching regulator so- 
lution does, which means that a charge-pump solution 
is generally smaller and cheaper. On the down side, 
charge-pump solutions generally have lower efficiencies 
and lower output current capabilities than discrete 
switching regulator solutions. 

Attributes of a DC-DC Converter 

Several attributes of a power supply converter must be 
evaluated and prioritized when choosing the best solu- 
tion for a given application. These attributes include: 

• Input Voltage Range 

• Output Voltage and Tolerance 

• Output Current Capability 

• Efficiency of Conversion 

• Printed Circuit Area 

• Height 

• Total Cost 

• Shutdown Capability 

• Quiescent Current Consumed in Shutdown Mode 

• Rise Time from Shutdown 

• Surface Mountability 


2.3 Summary 

The reader is referred to Appendix B, which provides a 
survey of all the solutions that are presented in this 
application note, in order to compare their attributes. 

This application note primarily presents state of the art 
discrete switching regulator IC solutions (and one 
charge-pump solution) which have been carefully de- 
signed for operation with flash memory. Included along 
with schematics are component values and sources/ 
contacts for obtaining components. Actual layouts have 
also been included where possible. These are provided 
in Appendix F. 

NOTE: 

External components recommended in the designs 
should be used. These components (inductors, capaci- 
tors, resistors) were chosen based on recommendations 
by the converter IC vendors and provide the necessary 
quality for a clean design. Alternate “equivalent” 
parts should be chosen with care as their resistive and 
inductive elements can affect the operation of the solu- 
tion. Please contact the respective converter IC com- 
panies for assistance if you select an alternate value/ 
source for passive components. 

3.0 Vpp SOLUTIONS: CONVERTING 
UP FROM 5V 

Most computer systems have available a 5V Vqc line 
that is used for the majority of system power. Frequent- 
ly, this 5V supply is used to generate 12V for flash 
memory. This section presents some of the new state of 
the art solutions that can achieve this function. These 
are all discrete switching regulators that optimize dif- 
ferent attributes, mentioned along with the main fea- 
tures section of each example. Refer to Appendix B for 
a more detailed comparison of the attributes of these 
solutions. 
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3.1 Maxim Integrated Products— MAX734: Vpp @120 mA 



Figure 3-1. Maxim MAX734 5V to 12V Converter 


Optimal Attributes 

• High Efficiency 

• Low Shutdown Current 

• Small Size: 0.3 sq. in. Total Board Area 
(Single Sided) 

• All Surface Mount 

Main Features 

• Input Voltage Range: 4V to 7V 

• Output Voltage: 12V ± 5% 

• Output Current Capability: 

Up to 120 mA @ V IN = 5V 

• Typical Efficiency: 83% @ Iload = 120 mA, 

Vin = 5V 

• 170 KHz Switching Frequency 

• Shutdown Feature on Chip 

• Low Quiescent Current at Shutdown: 70 jmA typical 

• Low Operating Quiescent Current: 1.3 mA typical 

• Rise Time from Shutdown: 1.5 ms typical 

• Soft-start Capability 


The MAX734 is a 12V-output step-up converter which 
uses 6 small external surface mount components to im- 
plement a small 5V to 12V converter solution. It is 
available in a small 8-pin surface mount package. The 
MAX734 design as shown is capable of providing up 
to 120 mA of Vpp current at an efficiency of 83%. The 
supply can be switched into a shutdown mode where 
the output voltage falls to approximately Vin ~ 
100 mV and the quiescent input current falls to below 
70 pA. The rise time from shutdown mode is typically 
1.5 ms. The MAX734 also has a Soft-start feature 
which allows the designer to limit surge currents at 
start-up by adding a capacitor between the MAX734’s 
SS pin and ground. The high switching frequency of the 
MAX734 allows the use of very small external capaci- 
tors and contributes to the small size of the supply cir- 
cuit. Series inductance in the filter capacitor and diode 
switching transients may cause high-frequency noise 
which appears as sharp voltage spikes in the output. 
Such spikes can be eliminated by practicing good PC- 
board layout or by using the optional filter circuit 
shown in the design. Applications assistance and a sur- 
face mount evaluation board are available from Maxim. 


I 


2-27 




AP-357 


iny 


Table 3-1. Parts List for the MAX734 5V to 12V Converter 


Ref 

Part # 

Value/Type 

Source 

Cost* 

U1 

MAX734CSA 

SMPS 1C 

Maxim 

(408) 737-7600 

$1.83 

Cl, C5 

267M1 602-336-MR-720 

33 julF/ 16V 
Tantalum 

Matsuo 

(714) 969-2491 

$0.48 

C2 

GRM40Z5U1 04M050AD 

0.1 jxF 

Murata Erie 
(404) 436-1300 

$0.05 

C3 (opt) 

GRM40Z5U1 03M050AD 

0.01 /aF 

Murata Erie 
(404) 436-1300 

$0.03 

C4 

GRM40Z5U1 02M050AD 

0.001 (J.F 

Murata Erie 
(404)436-1300 

$0.03 


GRM40Z5U104M050AD 

0.1 jutF 

Murata Erie 
(404) 436-1300 

$0.05 

D1 

EC15QS02L 

1 N581 7 Diode 

Nihon 

(805) 867-2555 

$0.30 

LI 

CD43-180 

18 jnH 

Sumida 

(708)956-0666 

$0.55 

R1, R2 (opt) 

9C08052A1 R00JLR 

in, 5% 

Philips 

(817) 325-7871 

$0.03 

Total Cost 

$3.35 


* Cost estimates based on published 10K unit pricing at the time this application note was written. 


3.2 Maxim Integrated Products— MAX761: Vpp @ 150 mA 



Figure 3-2. Maxim MAX761 5V to 12V Converter 
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Optimal Attributes 

• High Efficiency 

• Lowest Shutdown Current 

• Low Quiescent Supply Current 

• All Surface Mount 

Main Features 

• Input Voltage Range: 4.75V to 12V 

• Output Voltage: 12V ±4% 

• Output Current Capability: 

Up to 150 mA @ V IN = 5V 

• Typical Efficiency: 86% @ Iload = 150 mA, 
Vin = 5V 

• 300 KHz Switching Frequency 

• Shutdown Feature on Chip 

• Low Quiescent Current at Shutdown: 5 jxA max 

• Low Operating Quiescent Current: 250 fx A typical 

• Rise Time from Shutdown: 1 ms typical 


The MAX761 is a 12V-output step-up converter which 
uses pulse-frequency-modulated (PFM) control to offer 
high efficiency over a wide range of loads. It is available 
in a small 8-pin surface mount package and uses only 6 
small external surface mount components to provide a 
12V ±5% supply. The MAX761 design as shown is 
capable of providing up to 150 mA of Vpp current at an 
efficiency of 86%. The supply can be switched into a 
shutdown mode where the output voltage falls to ap- 
proximately Vin anc * the quiescent supply current falls 
to below 5 ix A. The rise time from shutdown mode is 
typically 1 ms. The high switching frequency of the 
MAX761 allows the use of very small external capaci- 
tors and contributes to the small size of the supply cir- 
cuit. Series inductance in the filter capacitor and diode 
switching transients may cause high-frequency noise 
which appears as sharp voltage spikes in the output. 
Such spikes can be eliminated by practicing good PC- 
board layout or by using the optional filter circuit 
shown in the design. Applications assistance and a sur- 
face mount evaluation board are available from Maxim. 



Table 3-2. Parts List for the MAX761 5V to 12V Converter 


Ref 

Part # 

Value/Type 

Source 

Cost* 

U1 

MAX761CSA 

SMPS 1C 

Maxim 

(408) 737-7600 

$2.02 

C1.C2 

267M1 602-226-MR-720 

22 ju,F/16V 
Tantalum 

Matsuo 

(714) 969-2491 

$0.48 

C3, C5 

GRM40Z5U104M050AD 

0.1 /xF 

Murata Erie 
(404) 436-1300 

$0.05 

C4 (opt) 

GRM40Z5U1 04M050AD 

0.1 ju.F 

Murata Erie 
(404) 436-1300 

$0.05 

D1 

EC10QS02L 

1N5817 Diode 

Nihon 

(805) 867-2555 

$0.22 

LI 

CD43-180MC 

18 /xH 

Sumida 

(708) 956-0666 

$0.53 

R1 , R2 (opt) 

9C08052A1 R00JLR 

in, 5% 

Philips 

(817) 325-7871 

$0.03 

Total Cost 

$3.38 


* Cost estimates based on published 10K unit pricing at the time this application note was written. 
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3.3 Maxim Integrated Products— MAX662: Vpp @ 30 mA 



Figure 3-3. Maxim MAX662 5V to 12V Converter 


Optimal Attributes 

• Lowest Cost 

• Low Shutdown Current 

• Low Quiescent Supply Current 

• Fast Rise Time from Shutdown 

• No Inductors Necessary 

• Small Size: 0.2 sq. in. Total Board Area 
(Single Sided) 

• All Surface Mount 

Main Features 

• Input Voltage Range: 4.75V to 5.5V 

• Output Voltage: 12V ±5% 

• Output Current Capability: 

Up to 30 mA @ Vin = 5V 

• Typical Efficiency: 74% @ Iload = 30 mA, 
Vin = 5V 

• 400 KHz Switching Frequency 

• Shutdown Feature on Chip 


• Low Quiescent Current at Shutdown: 70 fiA typical 

• Low Operating Quiescent Current: 320 juA typical 

• Rise Time from Shutdown: 600 jus typical 

The MAX662 is a 12V-output boost converter. It uses 
internal charge pumps and 5 small external surface 
mount capacitors to generate Vpp, with no need for 
inductors. It is available in a small 8-pin narrow surface 
mount package. The MAX662 design as shown is capa- 
ble of providing up to 30 mA of Vpp current at an 
efficiency of 74%. The supply can be switched into a 
shutdown mode where the output voltage falls to Vjn 
and the quiescent supply current falls to below 70 fiA. 
The rise time from shutdown mode is typically 600 /jls. 
The high switching frequency of the MAX662 allows 
the use of very small external capacitors and contrib- 
utes to the small size of the supply circuit. Series induc- 
tance in the filter capacitor and diode switching tran- 
sients may cause high-frequency noise which appears as 
sharp voltage spikes in the output. Such spikes can be 
eliminated by practicing good PC-board layout or by 
using the optional filter circuit shown in the design. 
Applications assistance and a surface mount evaluation 
board are available from Maxim. 
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Table 3-3. Parts List for the MAX662 5V to 12V Converter 


Ref 

Part # 

Value/Type 

Source 

Cost* 

U1 

MAX662CSA 

SMPS 1C 

Maxim 

(408) 737-7600 

$1.69 

C1,C2 

GRM40Y5V224Z025AD 

0.22 juF 

Murata Erie 
(404) 436-1300 

$0.15 

C3 

GRM40Z5U1 04M050AD 

0.1 jllF 

Murata Erie 
(404) 436-1300 

$0.05 

C4, C5 

267M1 602-475-MR-533 

4.7 jllF/ 16V 
Tantalum 

Matsuo 

(714) 969-2491 

$0.21 

C6 (opt) 

GRM40Z5U1 04M050AD 

0.1 ju,F 

Murata Erie 
(404) 436-1300 

$0.05 

R1,R2 (opt) 

9C08052A1 R00JLR 

in, 5% 

Philips 

(817) 325-7871 

$0.03 

Total Cost 

$2.18 


* Cost estimates based on published 10K unit pricing at the time this application note was written. 


3.4 Linear Technology LT1 109-12: Vpp @ 60 mA 
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Figure 3.4 Linear Technology LT1 109-12 5V to 12V Converter 
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Optimal Attributes 

• Low Quiescent Supply Current 

• Small Size 

• All Surface Mount 

Main Features 

• Input Voltage Range: 4.5V to 5.5V 

• Output Voltage: 12V ±5% 

• Output Current Capability: 

Up to 60 mA, @ Vin = 5V 

• Typical Efficiency: 84% @ Iload ~ 60 mA, 

Vin = 5V 

• 120 KHz Switching Frequency 

• Shutdown Feature on Chip 

• Low Quiescent Current at Shutdown: 320 p,A 
typical 


• Low Operating Quiescent Current: 320 jjlA typical 

• Rise Time from Shutdown: 800 /x s typical 

The LT1 109-12 is a fixed 12V-output part which is well 
suited to flash memory applications. It is available in a 
small 8-pin surface mount package and uses only 4 
small external components to implement a very small 
size 5V to 12V converter solution. The LT 1109-12 de- 
sign as shown is capable of providing up to 60 mA of 
Vpp current at an efficiency of 84%. The supply can be 
switched into a shutdown mode where the output volt- 
age falls to approximately Vjn- 550 mV. Quiescent 
supply current at shutdown remains at approximately 
320 jllA. The rise time from shutdown mode is typically 
800 jus. Series inductance in the filter capacitor and 
diode switching transients may cause high-frequency 
noise which appears as sharp voltage spikes in the out- 
put. Such spikes can be eliminated by practicing good 
PC-board layout or by using the optional filter circuit 
shown in the design. Applications assistance is available 
from Linear Technology Corporation. 


Table 3-4. Parts List for the LT1 109-12 5V to 12V Converter 


Ref 

Part# 

Value/Type 

Source 

Cost* 

U1 

LT1109CS8-12 

SMPS 1C 

Linear Tech 
(408) 432-1900 

$2.16 

Cl 

267M1 002-226-MR-720 

22 juF/10V 
Tantalum 

Matsuo 

(714) 969-2491 

$0.16 

C2 

267M2502-1 06-MR-720 

10 juF/25V 
Tantalum 

Matsuo 

(714) 969-2491 

$0.24 

C3 (opt) 

GRM40Z5U 1 04M050AD 

0.1 juF 

Murata Erie 
(404) 436-1300 

$0.05 

D1 

MBRS120T3 


Motorola 

(800)521-6274 

$0.37 

LI 

CD54-330LC 

X 

CO 

Sumida 

(708) 956-0666 

$0.55 

R1, R2 (opt) 

9C08052A1 R00JLR 

in, 5% 

Philips 

(817) 325-7871 

$0.03 

Total Cost 

$3.56 


* Cost estimates based on published 10K unit pricing at the time this application note was written. 
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Figure 3-5. Linear Technology LT1301 5V to 12V Converter 


Optimal Attributes 

• High Efficiency 

• High Output Current Capability 

• Low Shutdown Current 

• Low Quiescent Supply Current 

• Small Size 

Main Features 

• Input Voltage Range: 3V to 10V 

• Output Voltage: 12V ±5% 

• Output Current Capability: 

Over 200 mA @ Vjn = 5V 

• Typical Efficiency: 88% @ Iload = 200 mA, 
Vin=5V 

• 155 KHz Switching Frequency 

• Shutdown Feature on Chip 

• Low Quiescent Current at Shutdown: 15 /a A max 

• Low Operating Quiescent Current: 120 juA typical 

• Rise Time from Shutdown: 1.2 ms typical 


The LT1301 is a micropower step-up DC-DC convert- 
er. It is available in a small 8-pin surface mount pack- 
age and uses only 4 small external surface mount com- 
ponents. The LT1301 design as shown is capable of 
providing over 200 mA of Vpp current at an efficiency 
of 88%. The supply can be switched into a shutdown 
mode where the output voltage falls to approximately 
Vin — 550 mV and the quiescent supply current falls 
to below 15 juA. The LT1301 also has an input which 
selects between a 5V and 12V output, for flexibility in 
migration to Smart Voltage flash memory. The high 
switching frequency of the MAX761 allows the use of 
very small external capacitors and contributes to the 
small size of the supply circuit. Series inductance in the 
filter capacitor and diode switching transients may 
cause high-frequency noise which appears as sharp 
voltage spikes in the output. Such spikes can be elimi- 
nated by practicing good PC-board layout or by using 
the optional filter circuit shown in the design. Applica- 
tions assistance is available from Linear Technology 
Corporation. 
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Table 3-5. Parts List for the LT1301 5V to 12V Converter 


Ref 

Part# 

Value/Type 

Source 

Cost* 

U1 

LT1301CS8 

SMPS 1C 

Linear Tech 
(408)432-1900 

$2.40 

Cl 

267M1 002-1 07-MR-720 

100 fxF/10V 
Tantalum 

Matsuo 

(714) 969-2491 

$0.35 

C2 

267M1 602-476-MR-720 

4 ]ulF/ 16V 
Tantalum 

Matsuo 

(714)969-2491 

$0.35 

C3 (opt) 

GRM40Z5U1 04M050AD 

0.1 juiF 

Murata Erie 
(404)436-1300 

$0.05 

D1 

EC10QS02L 

1N5817 Diode 

Nihon 

(805) 867-2555 

$0.22 

LI 

CD75-220KC 

22 fxH 

Sumida 

(708) 956-0666 

$0.63 

R1, R2 (opt) 

9C08052A1 R00JLR 

in, 5% 

Philips 

(817) 325-7871 

$0.03 

Total Cost 

$4.03 


* Cost estimates based on published 10K unit pricing at the time this application note was written. 


3.6 Motorola MC34063A: V PP @ 120 mA 



Figure 3-6. Motorola MC34063A 5V to 12V Converter 
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The MC34063A solution presented uses 1 1 small sized 
external components to implement a low cost surface 
mount 5V to 12V converter solution. Three external 
components (U2, R4, R5) are used to shut down supply 
to the part when Vpp is not needed. These could be 
eliminated to further lower the cost if power consump- 
tion is not important. The quiescent current in shut- 
down state is 25 juA. The output voltage in shutdown is 
approximately Vin- 550 mV. Series inductance in the 
filter capacitor and diode switching transients may 
cause high-frequency noise which appears as sharp 
voltage spikes in the output. Such spikes can be elimi- 
nated by practicing good PC-board layout or by using 
the optional filter circuit shown in the design. Applica- 
tions assistance is available from Motorola. 


Table 3-6. Parts List for the MC34063A 5V to 12V Converter 


Ref 

Part # 

Value/Type 

Source 

Cost* 

U1 

MC34063A 

SMPS 1C 

Motorola 
(800) 521-6274 

$0.85 

U2 

MMBT4403LT1 

PNP Transistor 

Motorola 
(800) 521-6274 

$0.10 

Cl 

267M 1 002-336-M R-720 

33 ju,F/10V 
Tantalum 

Matsuo 

(714) 969-2491 

$0.24 

C2 

267M1 602-336-MR-720 

33 jllF/ 16V 
Tantalum 

Matsuo 

(714) 969-2491 

$0.24 

C3 

GRM40X7R330M050AD 

330 pF 

Murata Erie 
(404) 436-1300 



GRM40Z5U1 04M050AD 

0.1 /xF 

Murata Erie 
(404) 436-1300 


D1 

MBRS120T3 

Schottky Diode 

Motorola 
(800) 521-6274 

$0.37 

LI 

CD54-470LC 

47 jitH 

Sumida 

(708) 956-0666 

$0.55 

R1 

9C08052A91 00JLR 

91 n, 5% 

Philips 

(817) 325-7871 

$0.02 

R2 

9B08053A1 723FCB 

172 KH, 1% 

Philips 

(817) 325-7871 

$0.03 

R3 

9B08053A2002FCB 

20 Kft, 1 % 

Philips 

(817) 325-7871 

$0.03 

R4 

9C08052A3001 J LR 

3 K n, 5% 

Philips 

(817) 325-7871 

$0.02 

R5 

9C08052A1 002 JLR 

10 Kft, 5% 

Philips 

(817)325-7871 

$0.02 

R6, R7 (opt) 

9C08052A1 R00JLR 

in, 5% 

Philips 

(817) 325-7871 

$0.03 

Total Cost 

$2.63 


* Cost estimates based on published 10K unit pricing at the time this application note was written. 


Optimal Attributes 

• Low Cost 

• Low Shutdown Current 

• All Surface Mount 

Main Features 

• Input Voltage Range: 4.5V to 5.5V 

• Output Voltage: 12V ±5% 

• Output Current Capability: 

Up to 120 mA @ V IN = 5V 

• Typical Efficiency: 80% @ Iload = l 20 mA, 

Vin = 5V 

• 100 KHz Switching Frequency 

• Shutdown Feature using External Components 

• Low Quiescent Current at Shutdown: 25 juA typical 

• Rise Time from Shutdown: 2 ms typical 
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4.0 V PP SOLUTIONS: CONVERTING 
UP FROM 2 NiCd/ALKALINE 
CELLS 

Palmtop computers that use 2 alkaline/NiCd batteries 
require that the system work even when the battery 


voltage is down near 1.8V. Currently there exist two 
good solutions that achieve a 12V output with inputs as 
low as 1.8V, and yet supply at least 30 mA of current. 
These are the LT1301 from Linear Technology Corpo- 
ration, and the MAX761 from Maxim Integrated Prod- 
ucts. 


4.1 Maxim Integrated Products — MAX761: Vpp @ 75 mA 


SHUTDOWN 


V m (3V-12V) 



Vpp @ 75 mA 


292092-5 


Figure 4-1. Maxim MAX761 3V to 12V Converter 


Optimal Attributes 

• High Efficiency 

• Lowest Shutdown Current 

• Low Quiescent Supply Current 

• All Surface Mount 

Main Features 

• Input Voltage Range: 1.7V to 12V 

• Output Voltage: 12V ±5% 

• Output Current Capability: 

Up to 75 mA @ V IN = 3.3V 

• Typical Efficiency: 79% @ Iload = 75 mA, 

V IN = 3.3V 

• 300 KHz Switching Frequency 

• Shutdown Feature on Chip 

• Low Quiescent Current at Shutdown: 5 pA max 

• Low Operating Quiescent Current: 500 pA typical 

• Rise Time from Shutdown: 1 ms typical 


The MAX761 is a 12V-output step-up converter which 
uses pulse-frequency-modulated (PFM) control to offer 
high efficiency over a wide range of loads. It is available 
in a small 8-pin surface mount package and uses only 6 
small external surface mount components to provide a 
12V ±5% supply. This design is identical to the 5V to 
12V converter design shown in Section 3.2, but with 
different characteristics when operating with a 3.3V in- 
put. The MAX761 design as shown is capable of pro- 
viding up to 75 mA of Vpp current at an efficiency of 
79% with a Vj^ of 3.3V. The supply can be switched 
into a shutdown mode where the output voltage falls to 
approximately Vjn and the quiescent supply current 
falls to below 5 pA. The rise time from shutdown mode 
is typically 1 ms. The high switching frequency of the 
MAX761 allows the use of very small external capaci- 
tors and contributes to the small size of the supply cir- 
cuit. Series inductance in the filter capacitor and diode 
switching transients may cause high-frequency noise 
which appears as sharp voltage spikes in the output. 
Such spikes can be eliminated by practicing good PC- 
board layout or by using the optional filter circuit 
shown in the design. Applications assistance and a sur- 
face mount evaluation board are available from Maxim. 
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Table 4-1. Parts List for the MAX761 3.3V to 12C Converter 


Value/Type Sourc 


SMPS 1C Maxim 


Ref 

Part# 

U1 

MAX761CSA 

Cl, C2 

267M1 602-226-MR-720 

C3, C5 

GRM40Z5U1 04M050AD 

C4 (opt) 

GRM40Z5U104M050AD 

D1 

EC10QS02L 

LI 

CD43-180MC 

R1 , R2 (opt) 

9C08052A1 R00JLR 



Total Cost 


* Cost estimates based on published 10K unit pricing at the time this application note was written. 


4.2 Linear Technology LT1301: Vpp @ 120 mA 



Figure 4-2. Linear Technology LT1301 3V to 12V Converter 
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Optimal Attributes 

• High Efficiency 

• High Output Current Capability 

• Low Shutdown Current 

• Low Quiescent Supply Current 

• Small Size 

Main Features 

• Input Voltage Range: 1.8V to 10V 

• Output Voltage: 12V ± 5% 

• Output Current Capability: 

Up to 120 mA @ V IN = 3.3V 

• Typical Efficiency: 86% @ Iload = 120 mA, 
V IN = 3.3V 

• 155 KHz Switching Frequency 

• Shutdown Feature on Chip 

• Low Quiescent Current at Shutdown: 15 jjlA max 

• Low Operating Quiescent Current: 120 juA typical 

• Rise Time from Shutdown: 1.2 ms typical 


The LT1301 is a micropower step-up DC-DC convert- 
er. It is available in a small 8-pin surface mount pack- 
age and uses only 4 small external surface mount com- 
ponents. This design is identical to the 5 V to 12V con- 
verter design shown in Section 3.5, but with different 
characteristics when operating with a 3.3V input. The 
LT1301 design as shown is capable of providing 
120 mA of Vpp current at an efficiency of 86%. The 
supply can be switched into a shutdown mode where 
the output voltage falls to approximately Vjn — 
550 mV and the quiescent supply current falls to below 
15 juA. The LT1301 also has an input which selects 
between a 5V and 12V output, for flexibility in migra- 
tion to a Smart Voltage flash memory. The high switch- 
ing frequency of the MAX761 allows the use of very 
small external capacitors and contributes to the small 
size of the supply circuit. Series inductance in the filter 
capacitor and diode switching transients may cause 
high-frequency noise which appears as sharp voltage 
spikes in the output. Such spikes can be eliminated by 
practicing good PC-board layout or by using the op- 
tional filter circuit shown in the design. Applications 
assistance is available from Linear Technology Corpo- 
ration. 


Table 4-2. Parts List for the LT1301 3.3V to 12V Converter 


Ref 

Part# 

Vaiue/Type 

Source 

Cost* 

U1 

LT1301CS8 

SMPS 1C 

Linear Tech 
(408) 432-1900 

$2.40 

Cl 

267M1 002-1 07-MR-720 

100 ju.F/1 0V 
Tantalum 

Matsuo 

(714)969-2491 

$0.35 

C2 

267M1 602-476-MR-720 

47 jnF/16V 
. Tantalum 

Matsuo 

(714) 969-2491 

$0.35 

C3 (opt) 

GRM40Z5U1 04M050AD 

0.1 fiF 

Murata Erie 
(404) 436-1300 

$0.05 

D1 

EC10QS02L 

1N58 17 Diode 

Nihon 

(805) 867-2555 

$0.22 

LI 

CD75-220KC 

22 ]ulH 

Sumida 

(708) 956-0666 

$0.63 

R1,R2 (opt) 

9C08052A1 R00JLR 

in, 5% 

Philips 

(817) 325-7871 

$0.03 

Total Cost 

$4.03 


* Cost estimates based on published 10K unit pricing at the time this application note was written. 


i 


2-38 


































AP-357 



5.0 V C c SOLUTIONS: CONVERTING 
UP FROM TWO NiCd/ALKALINE 
CELLS 


Palmtop and hand-held computers that use two AA 
size NiCd or alkaline batteries need a converter solu- 


tion to provide the Vcc supply for the system as well as 
flash memory. Two good solutions are offered currently 
for this purpose, the MAX756 from Maxim Integrated 
Products and the LT1301 from Linear Technology 
Corporation. 


5.1 Maxim Integrated Products — MAX756: Vcc @ 400 mA 


V, N (0.9V-5V) 



292092-8 

Figure 5-1. Maxim MAX756 3V to 5V Converter 
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Optimal Attributes 

• High Output Current Capability 

• Low Quiescent Supply Current 

• Low Shutdown Current 

• High Efficiency 

Main Features 

• Input Voltage Range: 0.9V to 5V 

• Output Voltage: 5 V ± 4% 

• Output Current Capability: 

Up to 400 mA @ Vi N = 3V 

• Typical Efficiency: 

87% @ I LO ad = 200 mA, V IN - 3.3V 

• 0.5 MHz Switching Frequency 

• Shutdown Feature on Chip 


Table 5-1. Parts List for the MAX756 3V to 5V Converter 


Ref 

Part # 

Value/Type 

Source 

Cost* 

U1 

MAX756 

SMPS 1C 

Maxim 

(408) 737-7600 


Cl 

267M1 002-1 07-MR-720 

100 p,F/10V 
Tantalum 

Matsuo 

(714) 969-2491 


C2 

267M1 602-476-MR-720 

47 julF/ 16V 
Tantalum 

Matsuo 

(714) 969-2491 

$0.35 

C3 

GRM40Z5U1 04M050AD 

0.1 juF 

Murata Erie 
(404) 436-1300 


C4 (opt) 

GRM40Z5U1 04M050AD 

0.1 fxF 

Murata Erie 
(404) 436-1300 

1 

D1 

EC10QS02L 

1N5817 Diode 

Nihon 

(805) 867-2555 

$0.22 

LI 

CD54-220KC 

22 fxH 

Sumida 

(708) 956-0666 

$0.55 

R1,R2 (opt) 

9C08052A1 R00JLR 

in, 5% 

Philips 

(817) 325-7871 

$0.03 

Total Cost 

$3.57 


* Cost estimates based on published 1 0K unit pricing at the time this application note was written. 


• Low Quiescent Current at Shutdown: 20 jjlA max 

• Low Operating Quiescent Current: 140 jllA typical 

• Rise Time from Shutdown: 2 ms typical 

The MAX756 is a high-current solution for obtaining 
Vcc from a pair of NiCd/alkaline cells. The supply can 
be switched into a shutdown mode where the output 
voltage falls to approximately Vjn and the quiescent 
supply current falls to below 20 juA. The high switch- 
ing frequency of the MAX756 allows the use of very 
small external capacitors and inductors and contributes 
to the small size of the supply circuit. Series inductance 
in the filter capacitor and diode switching transients 
may cause high-frequency noise which appears as sharp 
voltage spikes in the output. Such spikes can be elimi- 
nated by practicing good PC-board layout or by using 
the optional filter circuit shown in the design. Applica- 
tions assistance and an evaluation kit are available from 
Maxim. 


































Figure 5-2. Linear Technology LT1301 3V to 5V Converter 


Optimal Attributes 

• Low Shutdown Current 

• Low Quiescent Supply Current 

• Small Size 

Main Features 

• Input Voltage Range: 1.8 V to 5V 

• Output Voltage: 5V ±5% 


• Output Current Capability: 

Up to 120 mA @ V IN = 3.3V 

• Typical Efficiency: 86% @ Iload = 120 mA, 
V IN = 3.3V 

• 155 KHz Switching Frequency 

• Shutdown Feature on Chip 

• Low Quiescent Current at Shutdown: 15 julA max 

• Low Operating Quiescent Current: 120 juA typical 

• Rise Time from Shutdown: 1.2 ms typical 


The LT1301 3V-to-5V converter design is the same as 
the LT1301 12V converter designs shown in sections 
3.4 and 4.2, with the output selected as 5V instead of 
12V using the select pin. 
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Table 5-2. Parts List for the LT1301 3.3V to 5V Converter 


Ref 

Part # 

Value/Type 

Source 

Cost 41 

U1 

LT1301CS8 

SMPS 1C 

Linear Tech 
(408) 432-1900 

$2.40 

Cl 

267M1 002-1 07-MR-720 

100 jmF/10V 
Tantalum 

Matsuo 

(714)969-2491 

$0.35 

C2 

267M1602-476-MR-720 


Matsuo 

(714) 969-2491 

$0.35 

C3 (opt) 

GRM40Z5U1 04M050AD 

0.1 fjtF 

Murata Erie 
(404) 436-1300 

$0.05 

D1 

EC10QS02L 

1N5817 Diode 

Nihon 

(805) 867-2555 

$0.22 

LI 

CD75-220KC 

22 juH 

Sumida 

(708) 956-0666 

$0.63 

R1,R2 (opt) 

9C08052A1 R00JLR 

in, 5% 

Philips 

(817) 325-7871 


Total Cost 

$4.03 


* Cost estimates based on published 10K unit pricing at the time this application note was written 


6.0 DOWN-CONVERTING TO 12V 

The ability to down-convert to 12V from a higher voltage is often needed (as in the telecommunications environ- 
ment). This section presents some good solutions for obtaining Vpp from a higher voltage. 


6.1 Maxim Integrated Products MAX667 


SHUTDOWN 



292092-10 


Figure 6-1. Maxim MAX667 12V Linear Voltage Regulator 
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Main Features 

• Input Voltage Range: 12.1V to 16.5V 

• Output Voltage: 12V ±5% 

• Output Current Capability: Up to 120 mA 

• Typical Efficiency: 70% 

• Shutdown Mode On Chip 

• Low Quiescent Current at Shutdown: 0.2 juA 
Typical 

• Rise Time from Shutdown: Less than 0. 1 ms Typical 


Table 6-1. Parts List for the MAX667 12V Step Down Converter 


Ref 

Part # 

Value/Type 

Source 

Cost* 

U1 

MAX667CSA 

SMPS IC- 
S08 Package 

Maxim 

(408) 737-7600 


Cl 

267M1 602-476-MR-720 

7 jutF/1 6V 
Tantalum 

Matsuo 

(714) 969-2491 


R1 

9C08053 A4023 J LR 

402 Kft, 1 % 

Philips 

(817) 325-7871 

$0.03 

R2 

9C08053A4752JLR 

47.5 Kft,1 % 

Philips 

$0.03 

Total Cost 

$2.39 


*Cost estimates based on published 10K unit pricing at the time this application note was written. 


Optimal Attributes 

• Small Size 

• Ultra Low Shutdown Current 

• All Surface Mount 

• Very Low Dropout 
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6.2 Linear Technology Corporation LT1111-12 


V |N (16V-30V) 



292092-11 


Figure 6-2. Linear Technology LT1 111-12 Step Down Switcher 


Optimal Attributes Main Features 

• Input Voltage Range: 16V to 30V 

• Output Voltage: 12V ±5% 

• Output Current Capability: Up to 120 mA 

• Typical Efficiency: 80% 


Table 6-2. Parts List for the LT1 1 1 1-12 12V Step Down Converter 


Ref 

Part # 

Value/Type 

Source 

Cost* 


LT1111-12 

SMPS IC- 
S08 Package 

Linear Tech 
(408) 432-1900 

$2.20 

Cl 

267M3502-225-MR-720 

2.2 ju,F/35V 
Tantalum 

Matsuo 

(714) 969-2491 

$0.28 

C2 

267M1 602-476-MR-720 

47 jnF/16V 
Tantalum 

Matsuo 

(714) 969-2491 

$0.35 

R1 

9C08052A1 500JLR 

150fl, 5% 

Philips 

(817) 325-7871 

$0.02 

LI 

CDR1 05-470 

47 fiH 

Sumida 

(708) 956-0666 

$0.38 

D1,D2 

MBRS140T3 

Schottky Diode 

Motorola 

(800)521-6274 

$0.74 

Total Cost 

$3.97 


*Cost estimates based on published 10K unit pricing at the time this application note was written. 


• High Efficiency 

• All Surface Mount 
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6.3 National Semiconductor LM2940CT-12 



Figure 6-3. National LM2940CT-12 12V Linear Regulator 


Optimal Attributes 

• Lowest Cost 

Main Features 

• Input Voltage Range: 13V to 26V 

• Output Voltage: 12V ±3% 

• Output Current Capability: 1A 


The LM2940CT-12 is a low drop-out linear regulator 
from National Semiconductor. This is a good low cost 
fixed 12V output solution. The part is offered in a stan- 
dard TO-220 plastic package. The input capacitor is 
required only if the regulator is located far away from 
the input power supply filter, and the output capacitor 
must be at least 22 /xF in order to maintain stability. 


Table 6-3. Parts List for the LM2940CT-12 Step Down Converter 


Ref 

Part # 

U1 

LM2940CT-12 

Cl 

GRM43-2Z5U474M050AD 

C2 

267M1 602-226-MR-720 


Value/Type 


Voltage Reg TO-220 


Source 


National 
(408) 721-5000 


22 fxF/16V 
Tantalum 


Total Cost 


*Cost estimates based on published 10K unit pricing at the time this application note was written. 



2-45 




















AP-357 


intel 


7.0 OBTAINING Vpp FROM 12V 
UNREGULATED 

In systems like the desktop computer, a 12V supply 
exists but may not be regulated to ± 5 %. If this voltage 
is used as the Vpp source for flash memory, it may well 
degrade the write/erase performance of the memory, or 
adversely affect its reliability. Fortunately, in most of 
the situations where a 12V unregulated (or not regulat- 
ed to within 5 %) supply exists, a 5V supply also exists 
in the system (the desktop computer is a good exam- 
ple). It is recommended in such cases that the existing 
5V supply be used to obtain the 12V ± 5 % rail. This 
approach is more economical, more efficient, and pro- 
vides space savings over a buck-boost topology that 
takes unregulated 12V and regulates it to ±5%. 

In the rare case where a 5 V supply is not present, mod- 
ular solutions exist that will regulate the unregulated 
12V supply to ±5%. However, these are bulky and 
expensive. Moreover, many of them require that a mini- 
mum load be maintained in order to stay in regulation. 
One such solution in presented in Appendix A. 


8.0 SUMMARY 

For battery powered applications, the author views the 
discrete switching regulator IC solution or charge 
pump solution as a better choice than the modular solu- 
tion. The lower cost, higher efficiency, and smaller 
size/height associated with discrete solutions justify the 
small additional design effort required to incorporate 
them in flash memory applications. In applications 
where the primary source of power is a wall power 
outlet, or in applications where the flash memory will 
be written to infrequently, efficiency and quiescent cur- 
rent take on secondary importance. In such cases, it 
may be acceptable to use a 12V regulated (to within 
±5%) tap from the system supply. Alternatively, the 
ability to easily design-in modular solutions may out- 
weigh the disadvantages of lower efficiency and in- 
creased cost. For those users wishing to incorporate 
modular solutions, Appendix A provides some of the 
lower cost solutions from this industry segment. 
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APPENDIX A 
MODULAR SOLUTIONS 


Modular solutions may work well in non-battery pow- 
ered situations where the efficiency of the power supply 
converter is not critical. These are also advantageous in 
that they usually do not need any external components 
and there is no converter design involved. However, the 
type and quality of the discrete components used in 
these hybrid solutions is open to question. This is not 
true in the case of the discrete converter designs pre- 
sented in the earlier sections, where the quality of the 
components used are under the control of the system 
design engineer. Hence, even though modular solutions 
offer the convenience of a single package and ease of 
testability, the quality/reliability of comparably priced 
modular solutions may be questionable. 

Some modular solutions suited to flash memory appli- 
cations are presented below, with a brief description of 
each. Sources for obtaining these are listed in Appendix 
B. 


International Power/Newport 
Components NMF0512S 

The NMF0512S is a 5V to 12V hybrid power module 
that has an output current capability of 80 mA. Output 
tolerance is ±5%. It is equipped with a shutdown pin 
which can be used to switch Vpp off. However, power 
dissipated in the shutdown mode is relatively high 
(about 100 mW). The part is small in size and measures 
0.76 in. (19.5 mm) x 0.4 in. (9.8 mm) x 0.4 in. (9.8 mm), 
and costs about $7.90 in 10K quantities (at the time 
this application note was written). Typical efficiency of 
conversion is 62%. 


Xentek NPSC-0512S 

The Xentek NPSC-0512S is a 1W power module that 
converts 5V to Vpp and will source up to 80 mA of 
continuous current. However, it uses two external filter 
capacitors — one at the input and one at the output. The 
input filter capacitor is 47 juF/lOV, and the output fil- 
ter capacitor is 100 p,F/16V. Size of the solution (con- 
verter alone) is 0.87 in. (22 mm) x 0.39 in. (10 mm) x 
0.79 in. (20 mm). The NPSC-0512S does not have a 
shutdown mode. The part costs around $5.00 in 10K 
quantities (at the time this application note was writ- 
ten). Typical efficiency of conversion is 60%. 


Shindengen America Inc. HDF-0512D 

The HDF-0512D module from Shindengen will convert 
unregulated 12V to 12V ±5%. This part is a dual out- 
put part (± 12V), but only the + 12V line is used. The 
conversion efficiency is high (75% typical), and the 
part will provide a regulated Vpp voltage from input 
voltages as low as 8V, and as high as 16.5V. A mini- 
mum load of 5 mA needs to be maintained to guarantee 
regulation. Size of the solution is 1.75 in. (44 mm) x 
0.43 in. (11 mm) x 0.8 in. (20 mm). Cost is approxi- 
mately $10.00 in quantities of 10K (at the time this 
application note was written). 


Valor PM6064 

The PM6064 is a 5V to 12V module that will source up 
to 60 mA of current. Output tolerance is ±5%. It has 
an enable pin which allows Vpp to be switched off. The 
supply current when Vpp is disabled is less than 20 jjlA. 
The part’s dimensions are 0.78 in. (19.8mm) x 0.58 in. 
(14.7mm) x 0.35 in. (8.9mm). The part costs $3.00 in 
10K quantities. Typical efficiency of conversion is high, 
relative to other modular solutions, at 74%. 
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REF 

# 

VENDOR 

NAME 

PART# 

INPUT V 
(Volts) 

OUTPUT V 
(Volts) 

OUTPUT C 
(mA) 

EFFIC 

(%) 

EXT COMP 
(Note 1) 

100% 

SMD? 

COST 
(Note 2) 

PC AREA 
(Note 3) 

HEIGHT 

(In.) 

SHDN? 

ISHDN 
(Note 4) 

RTIme 
(Note 5) 

Temp 

3.1 

Maxim 

MAX734 

4V-7V 

12V, 5% 

120 mA 

83% 

6;D,L,4C 

YES 

$3.35 

0.3 

0.18 

YES 

70 jaA 

1.5 ms 

0°C, 70°C 

3.2 

Maxim 

MAX761 

4.75 V- 12V 

12V, 4% 

150 mA 

86% 

6;D,L,4C 

YES 

$3.38 

0.3 

0.12 

YES 

5 fiA 

1 ms 

0°C, 70°C 

3.3 

Maxim 

MAX662 

4.75V-5.5V 

12V, 5% 

30 mA 

74% 

5;5C 

YES 

$2.18 

0.2 

0.07 

YES 

70 fiA 

0.6 ms 

0°C, 70°C 

3.4 

Linear Tech 

LT1 109-12 

5V, 10% 

12V, 5% 

60 mA 

84% 

4;D,L,2C 

YES 

$3.56 

0.38 

0.18 

YES 

320 fiA 

0.8 ms 

0°C, 70°C 

3.5 

Linear Tech 

LT1301 

3V-10V 

12V, 5% 

200 mA 

88% 

4;D,L,2C 

YES 

$4.03 

0.38 

0.14 

YES 

15 fiA 

1.2 ms 

0°C, 70°C 

3.6 

Motorola 

MC34063A 

5V, 10% 

12V, 5% 

120 mA 

75% 

11;D;L;T;3C;5R 

YES 

$2.63 

0.49 

0.18 

YES 

25 ixA 

2 ms 

0°C, 70°C 

4.1 

Maxim 

MAX761 

1.7V-12V 

12V, 5% 

75 mA 

79% 

6;D,L,4C 

YES 

$3.38 

0.3 

0.12 

YES 

5 fiA 

1 ms 

0°C, 70°C 

4.2 

Linear Tech 

LT1301 

3V-10V 

12V, 5% 

120 mA 

86% 

4;D,L,2C 

YES 

$4.03 

0.38 

0.14 

YES 

15 fiA 

1.2 ms 

0°C, 70°C 

5.1 

Maxim 

MAX756 

0.9V-5V 

5V, 4% 

400 mA 

87% 

5;D,L,3C 

YES 

$3.57 

0.4 

0.2 

YES 

20 jliA 

2 ms 

0°C, 70°C 

5.2 

Linear Tech 

LT1301 

1.8V-5V 

5V, 5% 

120 mA 

86% 

4;D,L,2C 

YES 

$4.03 

0.38 

0.14 

YES 

15j*A 

1.2 ms 

0°C, 70°C 

6.1 

Maxim 

MAX667 

1 2.1 V-1 6.5V 

12V, 5% 

250 mA 

70% 

3;2R,1C 

YES 

$2.39 

0.25 

0.15 

YES 

0.2 fiA 

0.1 ms 

0°C, 70°C 

6.2 

Linear Tech 

LT11 11-12 

16V-30V 

12V, 5% 

120mA 

80% 

6;2D,L,2C,R 

YES 

$3.97 

0.78 

0.2 

NO 

N/A 

N/A 

0°C, 70°C 

6.3 

National 

LM2940CT-12 

13V-26V 

12V, 3% 

1 Amp 

12V/V| N 

2;2C 

NO 

$1.26 

0.5 

0.18 

NO 

N/A 

N/A 

0°C, 70°C 

A.1 

International 

Power 

NMF0512S 

5V, 10% 

12V, 5% 

80 mA 

62% 

0 

NO 

$7.90 

0.3 

0.40 

YES 

20 mA 

10 ju.S 

0°C, 70°C 

A.2 

Shindengen 

HDF1212D 

8V-16.5V 

12V, 5% 

120 mA 

77% 

0 

NO 

$10.00 

0.76 

0.80 

NO 

N/A 

N/A 

— 40°C, 70°C 

A.3 

Xentek 

NPSC-0512S 

5V, 10% 

12V, 5% 

80 mA 

60% 

2;2C 

NO 

$5.50 

0.34 

0.79 

NO 

N/A 

N/A 

— 10°C, 70°C 

A.4 

Valor 

PM6064 

5V, 10% 

12V, 5% 

60 mA 

74% 

0 

NO 

$3.00 

0.9 

0.35 

YES 

20 juA 


-10°C, 70°C 


NOTES: 

1. # External components. D: Diode, L: Inductor, C: Capacitor, R: Resistor, T: Transistor 

2. Cost. Cost estimates assume 10K quantities 

3. PC Area. PC Area is conservatively estimated as 2.0X (area of all components). Where actual layouts are presented, the lower value is given. 
Note that this estimate is for a single sided board, and area can be reduced considerably if both sides of the board are utilized. 

4. 1 Shdn. Current consumed by supply at shutdown. Output settles to Vcc at shutdown, so some additional flash Vpp leakage/standby will exist. 
5. R Time. Rise time from shutdown state. Erase/Writes should not be attempted till Vpp level has risen to valid level after shutdown is disabled. 


APPENDIX B 

SURVEY OF SOLUTIONS PRESENTED 
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APPENDIX C 

SOURCES/CONTACTS FOR RECOMMENDED 
DC-DC CONVERTERS 


Linear Technology Corporation 

Recommended Products: 

— LT1 109-12 (DC-DC Converter IC) 

— LT1111-12 (DC-DC Converter IC) 

— LT1301 (DC-DC Converter IC) 

In U.S.A.: 

1630 McCarthy Blvd. 

Milpitas, CA 95035-7487 
Tel: (408) 432-1900 
Fax: (408) 432-0507 

In Europe (U.K.): 

111 Windmill Road 
Sunbury 

Middlesex TW16 7EF 
U.K. 

Tel (44)(932) 765688 
Fax (44)(932) 781936 

In Asia (Japan): 

4F Ichihashi Bldg 

1-8-4 Kudankita Chiyoda-ku 

Tokyo 102 Japan 

Tel (81) (03) 3237-7891 

Fax (81) (03) 3237-8010 


Maxim Integrated Products 

Recommended Products: 

— MAX662 (DC-DC Converter IC) 

— MAX667 (DC-DC Converter IC) 

— MAX734 (DC-DC Converter IC) 

— MAX756 (DC-DC Converter IC) 

— MAX761 (DC-DC Converter IC) 

In U.S.A.: 

120 San Gabriel Drive 
Sunnyvale, CA 94086 
Tel (408) 737-7600 
Fax (408) 737-7194 

In Europe (U.K.): 

Maxim Integrated Products (UK), Ltd. 
Tel: (44) (734) 845255 


i 


In Asia (Japan): 

Maxim Japan Co., Ltd. 
Tel: 81 (03) 3232-6141 


Motorola Semiconductor Inc. 

Recommended Product: 

— MC34063AD (DC-DC Converter IC) 

In U.S.A.: 

616 West 24th Street 
Tempe, AZ 85282 
Tel: (800) 521-6274 

In Europe (U.K.): 

Tel: (44) (296) 395-252 - 

In Asia (Japan): 

Tel: (81) (3) 440-3311 


National Semiconductor 

Recommended Product: 

— LM2940CT-12 (Voltage Regulator IC) 

In the U.S.: 

2900 Semiconductor Drive 
P.O. Box 58090 
Santa Clara, CA 95052 
Tel: (408) 721-5000 

In Europe: 

National Semiconductor (UK) Ltd. 

The Maple, Kembrey Park 
Swindon, Wiltshire SN26UT 
U.K. 

Tel: (07-93) 614141 
Fax: (07-93) 697522 

In Asia: 

National Semiconductor Japan Ltd. 

Sanseido Bldg. 5F 

4-15 Nishi Shinjuku 

Shinjuku-ku 

Tokyo 160 Japan 

Tel: (81) (3) 299-7001 

Fax: (81) (3) 299-7000 
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Newport Components/ 
International Power 

Recommended Product: 

— NMF0512S (5V-12V Converter Module) 


In U.S.A.: 

International Power Sources 
200 Butterfield Drive 
Ashland, MA 01721 
Tel: (508) 881-7434 
Fax: (508) 879-8669 


In Asia: 

2-1,2-Chome Ohtemachi 

Chiyoda-ku 

Tokyo 100 

Japan 

Tel: (81) (3) 279-4431 
Fax: (81) (3) 279-6478 

Valor Electronics, Inc. 

Recommended Product: 

— PM6064 


In Europe: 

Newport Components 
4 Tanners Drive 
Blakelands North 
Milton Keynes MK14 5NA 
Tel: (0908) 615232 
Fax: (0908) 617545 


Shindengen Electric Co. Ltd. 

Recommended Product: 

— HDF0512D (12V unreg. to 12V reg. converter 
module) 

In the U.S.: 

2649 Townsgate Road #200 
Westlake Village, CA 91361 
Tel: (800) 634-3654 
Fax: (805) 373-3710 

In Europe: 

Shindengen Magnaquest U.K. Ltd. 

Unit 13, River Road, 

Barking Business Park, 

33 River Road, Barking, 

Essex 1G11 ODA 
Tel: (44) (81) 591-8703 
Fax: (44) (81) 591-8792 


In U.S.A.: 

9715 Business Park Avenue 
San Diego, CA 92131-1642 
Tel: (619) 537-2500 
Fax: (619) 537-2525 

In Europe: 

Valor Electronics GmbH 
Steinstra/?e 68 
81667 Munchen 
Germany 

Tel: (49) (89) 480-2823 
Fax: (49) (89) 484-743 

In Asia: 

Valor Electronics, Ltd. 

Room 510, 5th Floor 

1 Komhill Road, Komhill Metro Tower 

Quarry Bay, Hong Kong 

Tel: (852) 513-8210 

Fax: (852) 513-8214 


Xentek Inc. 

Recommended Product: 

— NPSC0512S (5V-12V Converter Module) 

In U.S.A.: 

760 Shadowridge Drive 
Vista, CA 92083 
Tel: (619) 727-0940 
Fax: (619) 727-8926 
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In Europe (Germany): 

Xentek, Inc. 

c/o Taiyo Yuden GMBH. 
Obermaierstrasse 10, 

D-8500 Numberg 10 
Federal Republic of Germany 
Tel: (49) (911) 350-8400 
Fax: (49) (911) 350-8460 

In Asia (Japan): 

Xentek, Inc, 

c/o Taiyo Yuden., Ltd. 

6-16-20, Ueno, Taito-ku 

Tokyo 110 

Japan 

Tel: (81) (3) 3837-6547 
Fax: (81) (3) 3835-4752 
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APPENDIX D 

CONTACTS FOR DISCRETE COMPONENTS 


Matsuo Electric Co., Ltd. 

Matsuo’s 267 series surface mount tantalum chip ca- 
pacitors are recommended by Maxim and Linear Tech- 
nology for input and output filter capacitors on their 
DC-DC converters. Part #s are included on the parts 
list that accompanies most solutions. If alternate 
“equivalents” are required, choose high reliability, low 
ESR (Equivalent Series Resistance) and low ESL 
(Equivalent Series Inductance) type tantalums, which 
help in keeping output ripple and switching noise to a 
minimum. 

In U.S.A.: 

2134 Main St., Ste. 200 
Huntington Beach , CA 92648 
Tel: (714) 969-2491 
Fax: (714) 960-6492 

In Europe: 

Steucon - Center II Mergenthalleralle 77 
D-6236 Eschben/Ts. 

Federal Republic of Germany 
Tel: 6196-470-361 
Fax: 6196-470-360 

In Asia: 

Oak Esaka Bldg. 

10-28 Hiroshiba-Cho 

Suita-shi 

Osaka 564 

Tel: (06) 337-6450 

Fax: (06) 337-6456 


Sumida Electric Co. Ltd. 

Sumida CD series surface mount inductors are recom- 
mended by Maxim, Linear Technology for their minia- 
ture size and relatively low cost. These are well suited 
to low power DC-DC converter applications. Contact 
Sumida Electric directly for procuring these. The part 
#s are included in the parts list that accompanies most 
solutions. In applications where noise (EMI) is a con- 
cern, shielded varieties are also offered by Sumida. 


In U.S.A.: 

637 East Golf Road 
Suite 209 

Arlington Heights, IL 60005 
Tel: (708) 956-0666 
Fax: (708) 956-0702 

In Asia: 

4-8 Kanamachi 2-chome, 
Katsushika-ku, 

Tokyo 125 
Japan 

Tel: (81) (03) 3607-5111 
Fax: (81) (03) 3607-5428 


Coiltronix Inc. 

Coiltronix is recommended as a good alternate source 
for surface mount inductors. The CTX series offered by 
Coiltronix is well suited to DC-DC converter applica- 
tions. These are shielded, and have a toroidal core. 
However, they are bigger in size and currently much 
more expensive (7X to 8X) than the Sumida varieties 
recommended in the solutions herein. The equivalent 
part numbers are: 

Sumida CD54-470 — * Coiltronix CTX50-1 
Sumida CD54-180 — > Coiltronix CTX20-1 
Sumida CD54-220 — ► Coiltronix CTX20-1 
Sumida CD75-470 — ► Coiltronix CTX50-2 
Sumida CDR 105-470 — > Coiltronix CTX50-2 

In U.S.A.: 

Coiltronix Inc. 

984 S.W. 13th Court 
Pompano Beach, FL 33069 
Tel: (305) 781-8900 
Fax: (305) 782-4163 

In U.K.: 

Microelectronics Technology Ltd. 

Great Haseley Trading Estate 
Great Haseley 
Oxfordshire OX9 7PF 
U.K. 

Tel: (08) 44 278781 
Fax: (08) 44 278746 
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In Asia: 

Serial System Mktg. 

Poh Leng Bldg., #02-01 
21 Moonstone Lane 
Singapore 1232 
Tel: 2938830 
Fax: 2912673 


Coilcraft 

Coilcraft is also recommended as a good alternate 
source for surface mount inductors. The N2724-A 
shielded series is well suited to DC-DC converter appli- 
cations. These are bigger and currently more expensive 
(2x to 3x) than the Sumida inductors recommended in 
the solutions. Contact Coilcraft directly for any appli- 
cations assistance or for procurement of these parts. 
The equivalent part numbers are: 

Sumida CD54-470 — ► Coilcraft N2724-A 47 jmH 
Sumida CD54-180 — ► Coilcraft N2724-A 18 jaH 
Sumida CDR105-470 — ► Coilcraft N2724-A 47 ju,H 

In the US: 

1 102 Silver Lake Road 
Cary , IL 60013 
Tel: (708) 639-6400 
Fax: (708) 639-1469 

In Europe: 

21 Napier Place 
Wardpark North 
Cumbernauld 
Scotland G68 0LL 
Tel: 0236 730595 
Fax: 0236 730627 

In Asia: 

Block 101, Boon Keng Road 
#06-13/20 

Kallang Basin Industrial Estate 
Singapore 1233 
Tel: 2966933 
Fax: 2964463 


Philips Components 

Philips Components is recommended as a good source 
for surface mount (SMD) resistors (standard 9C series, 
and 9B (MELF) series). Part #s are included in the 
parts list that accompanies most of the solutions in the 
application note. Many alternate sources exist. 


In the US: 

2001 W. Blue Heron Blvd. 
P.O. Box 10330 
Riviera Beach, FL 33404 
Tel: (407) 881-3200 
Fax: (407) 881-3304 

In Europe: 

Philips Components Ltd. 
Mullard House 
Torrington Place 
London WC1E 7HD 
Tel: (44) 71 580 6633 
Fax: (44) 71 636 0394 

In Asia: 

Philips K.K. 

Philips Bldg. 13-37 
Kohnan 2-chome 
Minato-Ku Tokyo 108 
Tel: (81) 3 740-5028 
Fax: (81) 3 740-5035 


2 


Siliconix-Logic Level PFETs 

Siliconix offers low-“on” resistance logic level PFETs 
(Si9400, and Si9405) that can be used for switching a 
DC-DC converter into a shutdown state by using these 
switches on the high side of the input to the converter 
(see Appendix E). 

In the US: 

2201 Laurelwood Road 
P.O. Box 54951 
Santa Clara, CA 95056-995 1 
Tel: (408) 988-8000 
Fax: (408) 727-5414 

In Europe: 

Weir House 

Overbridge Square, Hambridge Lane 
Newbury, Berks RG14 5UX 
Tel: (0635) 30905 
Fax: (0635) 34805 

In Asia: 

Room 709, Chinachem Golden Plaza 

77 Mody Road 

TST East Kowloon 

Tel: (852) 724-3377 

Fax: (852) 311-7909 
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APPENDIX E 

OTHER DESIGN CONSIDERATIONS 


Vpp Valid Handshake Logic 

It is often desirable to have, along with the Vpp solu- 
tion, a handshake signal (using extra hardware) that is 
asserted as long as the voltage level on Vpp is valid. 
The following schematic illustrates a good way of 
achieving this. This handshake signal could be used to 
determine when it is suitable to perform writes/erases 
on the flash device. The circuit shown uses a precision 
zener voltage reference and a comparator, along with 
bias resistors, to monitor the voltage level on Vpp. The 
point at which the comparator trips must be set after 
careful consideration of the variation in the reference 
voltage and the tolerances on the bias resistors. The 
worst case conditions on these variations must guaran- 
tee that the handshake signal is asserted when Vpp is at 
its worst case lower-end level (11.4V). Care must be 
taken to use the exact same components as specified in 
order to maintain the tight tolerance on the trip level of 
the output signal. 

Obtaining Shutdown Using Logic Level 
PFETs 

Low “on” resistance logic level PFETs can be used on 
the high side of the input to the DC-DC converters to 
obtain shutdown. One such part is the Si9405 from Sili- 
conix Inc. The device is part of the “little foot” series, 
and is available in an S08 (8-pin surface mount) pack- 
age. The Si9405 is a logic level PFET with an “on re- 


sistance” of 0.2ft (at a gate drive of 4.5V). It is impor- 
tant to have as low an “on” resistance as possible, since 
the peak currents and start-up currents into the supply 
are high. Care must be taken to ensure that the DC-DC 
conversion process is not affected after accounting for 
the drop in input voltage across the PFET. 


Working of the Discrete Step Up 
Switching Regulator 

This section presents a brief overview of the operation 
of discrete step up switching regulators, and presents 
issues that the user needs to be concerned with while 
designing these solutions into the system. 

The four most basic elements of a discrete switching 
regulator power supply are: 

1. The SMPS IC (which includes the switch control 
element and logic, along with the power switch it- 
self), 

2. An inductor for storage and transfer of energy be- 
tween the input and output, 

3. A switching diode to direct the inductor energy to 
“catch”, or channel, the inductor energy to the out- 
put, and 

4. An output filter capacitor. 



Figure E-1. Vpp Valid Handshake Circuit 
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In the boost configuration where the output voltage is 
greater than the input voltage, the basic switching pow- 
er supply configuration is as shown in Figure E.2: 



Switching Regulator 

The power switch SW can be turned on and off; the 
control for it is derived from a feedback mechanism 
that senses the output voltage. While the switch is 
turned on, the inductor stores energy as the current 
flows through it from the input supply. The peak cur- 
rent through the inductor II can be approximated as 
(Vin/L * toN); where tQN is the on time of the switch. 
During this time, the energy is supplied by the input 
voltage, Vl = Vjn- The output is isolated from the 
inductor via the reverse-biased diode, and the load cur- 
rent is supplied by the output filter capacitor. When the 
switch turns off, the energy stored in the inductor ap- 
pears as a rapidly increasing voltage across the induc- 
tor. As soon as this voltage reaches a value equal to the 
output voltage plus the voltage drop across the diode, 
the diode switches on and current starts to flow 
through the diode. This diode current supplies the load 
current while also at the same time charging up the 
output filter capacitor to the output voltage. 

The switch is controlled by sensing the output voltage 
via a feedback mechanism — usually a pair of resistors. 
This sense voltage is gated via a comparator whose out- 
put acts as a control signal to an oscillator. The oscilla- 
tor output controls the switch. 

The power into the inductor Pl can be approximated 
as: 

P L = 0.5 * L * Irk 2 * f 0 SC 

and the power into the load Pload (out °f the induc- 
tor) can be approximated as 

Pload = (Vqut + v D - v iN ) * i 0 ut 


The peak currents through the inductor is usually sev- 
eral times higher than the load current, is mostly of the 
value of the load current and builds up during time 
tQN- On most of the solutions presented here, peak op- 
erating currents lie in the range of 500 mA to 1.2A. 
Though this may seem high, most of this in-rush of 
energy is transferred to the output, and little is lost to 
heat due to the efficient energy storage characteristic of 
inductors. Note that since the peak currents are high, 
the input voltage source must be capable of provid- 
ing this current, and the current capability of the 
input source must not be calculated simply as 
(Vqut * IoUt)A v IN * Eff). A large bypass capacitor 
at the input pin of the converter is hence also necessary 
on all designs. 


Some of the solutions presented in this application note 
are of the fixed duty cycle or fixed on time type (e.g. 
LT1 109-12, MC34063A), whereas some of them vary 
the duty cycle depending on the load current (e.g. 
MAX734). These latter ones provide higher efficien- 
cies. 



Inductor Selection 

The choice of an inductor is crucial to the design of the 
power supply system. To begin with, the inductor value 
must be low enough to supply the peak currents needed 
when the input voltage Vjn, as well as the on time t on , 
are at their worst case low value. On the other hand, 
the inductor value must be high enough so that the 
peak currents at the worst case high values do not ex- 
ceed the maximum peak currents that can be handled 
by the switch. Furthermore, once the value has been 
picked, the physical inductor that is chosen for the job 
must be able to handle these peak currents, and must 
not saturate. This is done by picking an inductor whose 
DC current rating is more than the worst case peak 
current that will be required by the operation of the 
device. The other characteristic to consider is the resist- 
ance of the inductor. In order to keep losses to a mini- 
mum, it is essential that the resistance of the coil is a 
minimum. Thus, it is important to use the inductors 
specified in the parts list that accompanies the solu- 
tions. These have been carefully chosen after reviewing 
the requirements. Alternate inductors may be used, as 
long as they are “equivalent”. 


EMI Concerns 

Since the switching regulators presented in this applica- 
tion note switch at frequencies between 100 KHz and 
500 KHz, there exists a potential for EMI. In cases 
where EMI may be a problem, shielded inductors can 
be used. This will reduce EMI significantly. Shielded 
versions of the inductors specified are readily available. 
Contact the vendor directly for these. 
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Output Switching Noise 

Output switching noise has several sources. The most 
significant one is the IR drop through the ESR (Equiv- 
alent Series Resistance) of the output filter capacitor. 
This is caused by switching current pulses from the 
inductor. There is also noise in the form of switching 
spikes riding on the DC output. This is due to the out- 
put filter capacitor’s ESL (Equivalent Series Induc- 
tance), current spikes in the ground trace and rectifier 
tum-on transients. 

It is important to use low ESR and low ESL output and 
input filter capacitors. Proper layout is also essential in 
order to avoid spikes in the output. The safest solution 
is to use a filter circuit at the output. LC filters are not 
recommended, because of the transient nature of the 
load currents on flash devices. An RC filter is recom- 
mended on most solutions as an option. Two lfl resis- 
tors are used in parallel to avoid causing a significant 
drop across the resistance. This method is inexpensive 
and assures that the spikes riding on the output wave- 
form are contained to within the 5 % tolerance require- 
ment on Vpp. 

In addition, care must be taken to keep the leads from 
the output of the solution to all flash devices as short as 
possible. Use of a 0.1 /xF capacitor at the Vpp pin of 
each flash device is highly recommended. 


Working of the Discrete Charge-Pump 
DC-DC Converter 

This section provides a brief overview of the operation 
of discrete charge-pump DC-DC converters. 


The three most basic elements of a discrete charge- 
pump DC-DC converter are: 

1. The charge-pump IC (which includes the internal 
charge-pumps as well as output regulation logic), 

2. External capacitors to store energy from the input, 
and 

3. An output filter capacitor. 

The basic charge-pump power supply configuration is 
as shown in Figure E.3 (a). 

The SI and S2 switches can be opened and closed; the 
control is derived from a feedback mechanism that sen- 
ses the output voltage. When the SI switches are open, 
the S2 switches are closed, and vice versa. When the SI 
switches are closed (Figure E.3 (b)), capacitors Cl and 
C2 are charged to Vjn. When the S2 switches are 
closed (Figure E.3 (c)), capacitors Cl and C2 are con- 
nected in series between Vin and Vqut- This triples 
the input voltage, with the feedback scheme in the 
charge-pump IC adjusting the output voltage to 12V. 
During one cycle, energy is transferred from the input 
to the external charge-pump capacitors. (SI switches 
closed), and then from the charge-pump capacitors to 
the output filter capacitor and the load (S2 switches 
closed). 

The SI and S2 switches are controlled by sensing the 
output voltage via a feedback mechanism. This sense 
voltage is gated via a comparator whose output acts as 
a control signal to an oscillator. The oscillator output 
controls the S2 switches, and the inverted oscillator 
output controls the SI switches. 
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APPENDIX F 

PC LAYOUTS FOR SOME RECOMMENDED SOLUTIONS 


Maxim integrated Products MAX662 

The double-sided layout presented below (Figure F-l) 
has been designed for the MAX662 5V-12V converter 
solution (Section 3.3). It has been designed for the parts 
specified in the parts list that accompanies the solution. 
Contact Maxim for any additional layout assistance. 

Maxim Integrated Products MAX734 

The double-sided layout presented below (Figure F-2) 
has been designed for MAX734 5V-12V converter solu- 
tion (Section 3.1). It has been designed for the parts 
specified in the parts list that accompanies the solution. 
Contact Maxim for any additional layout assistance. 


Maxim Integrated Products MAX761 

The double-sided layout presented below (Figure F-3) 
has been designed for the MAX761 3.3V/5V-12V con- 
verter solution (Sections 3.2 and 4.1). It has been de- 
signed for the parts specified in the parts list that ac- 
companies the solution. Contact Maxim for any addi- 
tional layout assistance. 


Linear Technology Corporation 
LT1 109-12 

The single-sided layout presented below (Figure F-4) 
can be used to implement the LT1 109-12 5V-12V con- 
verter solution (Section 3.4). The layout has been de- 
signed for the parts that are specified in the parts list 
that accompanies the solution. Contact Linear Tech- 
nology for any additional layout assistance. 
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Figure F-2 
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(IX Scale Top Side Component 
Placement Diagram) 



(IX Scale Top Side 
Trace View) 
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001 
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002 

Added MAX734, MAX761, MAX662, MAX756, LT1301, PM6064. Deleted MAX732, LT1110, 
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1.0 INTRODUCTION 

Flash memory’s combination of nonvolatility and easy 
in-system updateability are key attributes driving its 
adoption into today’s system designs. However, this 
flexibility also brings with it the responsibility (for 
hardware and software engineers) to ensure that writes 
to flash memory occur only when intended. This is espe- 
cially important for those who are accustomed to de- 
signing with various ROM (nonvolatile but non-up- 
dateable) and RAM (updateable but volatile) memo- 
ries. 

This application note discusses techniques for proac- 
tively designing systems to prevent unintentional writes 
to flash memory. These design techniques are by no 
means complex or costly, but their implementation is 
crucial to ensuring reliable operation through system 
lifetime. For more information on the devices and spec- 
ifications discussed in this document, please consult 
specific flash memory datasheets. 


2.0 WHY IS WRITE PROTECTION 
IMPORTANT? 

Let’s begin by identifying the key characteristics of two 
generic memory technologies: ROM (Read-Only-Mem- 
ory) and RAM (Random-Access-Memory). Flash 
memory combines many of the capabilities of both in 
one solution. Therefore, it is often being utilized to re- 
place ROM and/or RAM in new designs. At a mini- 
mum, flash memory’s status as a relatively new tech- 
nology means that many engineers are moving to it 
from the familiarity of a ROM/RAM knowledge base. 

RAM is fully alterable on a bit-by-bit basis, and the 
mechanism for writing to it is established and well un- 
derstood. RAM is in-system updateable, yet it is vola- 
tile. This means that when a RAM memory loses pow- 
er, it also loses its data. RAM is guaranteed not to 
contain valid information on powerup. 

ROM offers the advantage of nonvolatility, i.e. when 
power is removed from the device, the information 
stored inside is retained. However, ROM is not in-sys- 
tem updateable. Once the information is initially put 
into the device, it is permanent and unchangeable. To 
replace the information, you have to physically re- 
move/replace the device itself. 

Traditional system memory architectures often includ- 
ed both ROM (nonvolatile but non-updateable) and 
RAM (volatile but in-system updateable). The new 
model for system design retains some RAM for tempo- 
rary data storage, but replaces the rest of RAM and 
ROM with flash memory. Being both nonvolatile and 
in-system updateable, flash memory encompasses the 


strengths of both RAM and ROM, offering new system 
architecture possibilities. However, whereas in the past 
RAM was guaranteed to be invalid on system powerup 
and ROM was guaranteed to be unalterable, the same 
cannot be said for flash memory. 

Any alteration of flash memory contents (whether 
planned or unintended) is permanent regardless of sys- 
tem power transitions, until the data is again modified. 
As we’ll see later, command writes to flash memory can 
also put it in modes where it outputs something other 
than array data, a non-permanent but still undesirable 
condition when not intended. This means that the sys- 
tem hardware and software must ensure that flash 
memory is written only when specifically desired, to 
ensure a predictable system environment. The following 
sections will discuss how this can be accomplished. 


3.0 SYSTEM WRITES WITH BULK- 
ERASE FLASH MEMORIES 

First-generation bulk erase flash memories from Intel 
Corporation are shown in Figure 1. These devices auto- 
matically power up in a “Read Array” mode in which 
they output array data when read. Transitions to alter- 
nate modes occur by writing commands to the flash 
memory. 


Device 

Density 

28F256A 

32 Kbytes (x8) 

28F512 

64 Kbytes (x8) 

28F010 

128 Kbytes (x8) 

28F020 

256 Kbytes (x8) 


Figure 1. Intel Corporation 
Bulk-Erase Flash Memories 


Bulk-erase flash memories include several forms of 
“protection” to guard against unintended writes. 
Writes with Vpp (the program/erase voltage) at VppL 
(0V to 6.5V) are disregarded by the flash memory. Sim- 
ilarly, write attempts with Vcc at or below Vlko 
( 2.5V on most devices) are ignored. Finally, these de- 
vices require multi-byte command sequences to initiate 
internal program or erase algorithms. Note, however, 
that while the erase command sequence (shown in Fig- 
ure 2) requires both the proper Erase Setup and Erase 
Confirm commands, the program sequence (Figure 3) 
relies only on the valid Program Setup command. The 
second command in the latter sequence can have any 
value, and is interpreted as data to be programmed. 
This means that if the flash memory receives an unin- 
tended Program Setup command, the very next write to 
the device (intended or not) will be interpreted as pro- 
gram data and initiate an internal program event (if 
Vpp is above Vppl). 
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Figure 2. Flash Memory Erase 
Command Sequence (Simplified) 

Beyond the program and erase sequences, the Read In- 
telligent Identifier Codes command will, when written 
to the flash memory, put it in a mode where it outputs 
device signature IDs instead of array information when 
read. 



Figure 3. Flash Memory Programming 
Command Sequence (Simplified) 


4.0 SYSTEM WRITES WITH BOOT 
BLOCK AND FlashFileTM 
MEMORIES 

Second-generation block-erase Boot Block and Flash- 
File memories from Intel Corporation are shown in 
Figure 4. They function similarly to the bulk-erase de- 
vices described earlier, with a few key enhancements. 
As before, these devices automatically power up in 
“Read Array” mode, and transition to alternate modes 
via command writes. 


BOOT BLOCK ARCHITECTURE 


Device 

Density 

28F001BX 

128 Kbytes (x8) 

28F200BX 

256 Kbytes (xl 6) 

28F002BX 

256 Kbytes (x8) 

28F400BX 

512 Kbytes (xl 6) 

28F004BX 

512 Kbytes (x8) 

FlashFileTM ARCHITECTURE 

Device 

Density 

28F008SA 

1 Mbyte (x8) 


Figure 4. Intel Corporation 
Block-Erase Flash Memories 


For full access to the flash memory Status Register, as 
well as for enhanced interface to internal device identi- 
fiers, these block-erase flash memories will accept com- 
mands written to them regardless of Vpp voltage, as 
long as Vcc is above Vlko Program and erase algo- 
rithms initiated by command sequences will terminate 
with Status Register error indication and unaltered ar- 
ray data, if Vpp is at Vppl- However, regardless of Vpp 
level, the device will still transition to a “Read Status 
Register” mode after program/erase command se- 
quences are written. In this case, it will output data that 
the system, if the write was unintended, will not expect. 
The same multi-byte command sequences (shown in 
Figures 2 and 3) are used as in bulk-erase flash memo- 
ries. 

Boot Block and FlashFile memories provide commands 
(in addition to the program and erase sequences) which 
transition the memory to alternate modes, outputting 
data other than array information for subsequent reads. 
In this respect, they are similar to bulk-erase flash 
memory discussed earlier. These commands are Intelli- 
gent Identifier and Read Status Register. 

Block-erase devices include a hardware input called 
RP# (or Reset/Powerdown). Among its many uses, 
this pin acts as a “master on/off switch” to completely 
disable the flash memory and lock all other control in- 
puts. RP# is extremely effective at blocking unintend- 
ed writes during system power transitions. This tech- 
nique will be covered in detail, in a few paragraphs. 


5.0 PREVENTING UNINTENDED 
WRITES DURING NORMAL 
SYSTEM OPERATION 

Preventing unintended writes to flash memory during 
normal system operation is a routine part of debugging 
a new design, and a common concern for any “writea- 
ble” device on the processor interface. Any combina- 
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tion of active chip select (CE#) and active write enable 
(WE#) has the potential of being decoded by the flash 
memory as a valid write attempt. One common culprit 
in these situations is the chip select decoder logic (PAL, 
etc.) between the processor and external devices. As 
addresses propogate through this logic at the beginning 
of an access cycle, or in the undefined address state 
between accesses, spurious chip selects of indeterminate 
duration can be generated. System hardware should en- 
sure that at these times, WE# to flash memory stays at 
a logic “1” and doesn’t transition low. 


Some concern has also been expressed in the past about 
unintended writes in certain “open” systems such as 
the personal computer. In these environments, the type 
and function of software run on the machine is beyond 
the control of the computer manufacturer, who must 
accordingly design his/her hardware. For example, a 
third-party software utility may write to flash memory 
assuming DRAM at that location. More malicious, of 
course, is the case of the computer virus. Fortunately, 
in cases like this, hardware design to prevent unintend- 
ed writes is fairly simple. 


WR# (FROM SYSTEM) 
GPIO 


1 > 


WE# (TO FLASH 
MEMORY) 


292123-3 


Figure 5. WE# Gating 


Figure 5 shows one means of clarifying the WE# sig- 
nal. When flash memory is used for BIOS storage, for 
example, the manufacturer’s update utility is the only 
software that should be writing to the device. By tog- 
gling the general purpose I/O line (whose default state 
is, of course, “disabled”), the update utility can control 
whether writes from the system are blocked or allowed 
to pass to the flash memory. This type of WE# clarify- 
ing function is integrated in the Intel386™SL and In- 
tel486™ SL Microprocessor Supersets. ASICs integrat- 
ing motherboard functions should also be designed to 
include such logic. 

One other method for preventing flash memory altera- 
tion is by controlling (or “switching”) the Vpp voltage, 
turning it on to Vppn only when desired for system 
update. Many 12V converters and power supplies inte- 
grate this on/off function as shown in Figure 6, or it 
can be provided by an external FET. This approach 
will be used again in the next section on write protec- 
tion during system power transitions. Note, however, 
that although it prevents actual flash memory data al- 
teration, Vpp control is insufficient to keep block-erase 
flash memories from transitioning to alternate data out- 
put modes by unintended writes. 
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Figure 6. Vpp 12V Converter with 
Integrated Switch (Example) 


In a traditional “closed” system, the software directing 
the hardware is totally under control of the system 
manufacturer. No additional effort should be needed 
(after the initial prototype hardware and software de- 
bugging) to protect the flash memory from unintended 
writes during normal system operation. Write control 
during system powerup and powerdown also requires 
attention, however; a topic covered next. 


6.0 PREVENTING UNINTENDED 
WRITES DURING SYSTEM 
RESET AND POWERUP/ 
POWERDOWN 

System powerup and/or powerdown offer the greatest 
potential for unintended writes in flash memory-based 
system designs. As mentioned earlier, similar potential 
also exists for other “nonvolatile/rewriteable” memory 
technologies, such as EEPROM and battery-backed 
SRAM. Several reasons for this are listed below. 

• When a system begins to power up, all logic outputs 
are at 0V. This is also the “enable” condition for 
flash memory CE# and WE# inputs. 

• Logic devices have specified, documented and guar- 
anteed operation only at a specific supply voltage 
range (typically 5V ± 10% or 3.3V ±0.3V). Opera- 
tion beyond this voltage range is not guaranteed and 
may not be consistent. Specifically, device output 
behaviour is typically undefined. 

• Similarly, logic operation is sometimes undefined 
and erratic when devices are being reset. For exam- 
ple, MCS-186 embedded processors, when reset, tri- 
state their WR# (write enable) outputs, which will 
then typically drift toward 0V (or “enabled”, to 
TTL inputs). 
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Figure 7. Basic Processor/Flash Memory Interface 


• If both the Vcc and Vpp power supplies are 
switched “on” at the same time, one or the other is 
likely to ramp to a “valid” level first, depending on 
the relative capacitive loading at the supply outputs. 
Similarly, one supply will often ramp below its valid 
voltage range before the other, on system poweroff. 
This situation is acceptable, as long as the WE# 
and/or CE# signals to the flash memory are con- 
trolled. 


Again referencing Figure 7, the behaviour of processor/ 
logic CE#, WE# and address/data outputs are typi- 
cally undefined once Vcc drops below 4.5V. If the 
power supply Vpp output is more capacitively loaded 
than Vco Vpp can remain above VppL as Vcc decays 
toward OV. This has the potential to initiate program/ 
erase operations in response to unintended flash memo- 
ry writes. 



Figure 7 shows a very basic example processor/memo- 
ry interface. When the system power is switched on, the 
processor (or logic) WE# output and logic CE# out- 
put are both at GND. Depending on the processor and 
logic, these outputs may not reliably stabilize until Vcc 
ramps to 4.5V. In most cases, CPU and logic outputs 
will smoothly follow the supply voltage up to operating 
levels. Any oscillations on these outputs, however, can 
be decoded as a valid write by the flash memory, which 
begins to “wake up” below 4.5V Vcc- Similarly, ad- 
dress and data processor outputs are typically unde- 
fined below operating voltage ranges. Given a x8 inter- 
face between processor and flash memory (therefore, 
with 256 possible combinations of data inputs), there is 
a finite chance that a valid command byte will be ran- 
domly generated and written to the flash memory. 

If the Vpp power supply output is less capacitively 
loaded than Vcc* Vpp can ramp above VppL before 
Vcc reaches 4.5V. This can cause unintended flash 
memory program and erase if the correct command 
data values are “spuriously” written to the device. 


6.1 Designing for Flash Memory 
System Power Sequencing 
Protection 

Intel has taken several steps with respect to its flash 
memory designs to significantly minimize the possibili- 
ty of an unwanted write during system powerup or 
powerdown. By synergizing system designs to these 
flash memory features, you can easily eliminate the po- 
tential for unwanted flash memory mode switching 
and/or data alteration. 

Flash memories from Intel are guaranteed not to pro- 
gram or erase with Vpp below 6.5V. First generation 
bulk-erase devices additionally block all write attempts 
with Vpp below 6.5V. The implication here is clear; if 
possible, don’t switch on Vpp until after the system 
Vcc is stable (on powerup), and switch off Vpp before 
the system is powered down. The Vpp supply itself can 
be switched on/off, or an inline FET switch can be 
installed between the power supply output and flash 
memory input and controlled via an I/O line from the 
processor or discrete logic. Figure 6 gives an example of 
circuitry for the former case. 
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Figure 8. Supply Voltage/Device Output 
Relationship During Powerup 


Intel flash memory also provides Vcc-driven “lockout 
protection” from unwanted writes. With Vcc below 
Vlko> write attempts to the flash memory are ig- 
nored. Vlko varies between 2.5V and 2.0V depending 
on the specific flash memory, and its value is targeted 
to take advantage of the fact that in most cases device 
outputs closely follow Vcc inputs (both up and down). 
Referencing Figure 8, when Vcc exceeds Vlko device 
outputs will in most cases also be at approximately 
Vlko» and consequently at a TTL “1” level (or dis- 
abled). The flash memory “protects itself’ up to Vlko> 
and the system designer must above that point ensure 
that flash memory control inputs are stable. Similarly, 
the flash memory is again protected once Vcc drops 
below Vlko on system powerdown. 

The RP# input (formerly known as PWD#), available 
on Intel Boot Block and FlashFile memories, acts as a 
“master on/off switch” for the device. With RP# at 
Vil, the flash memory is put in a very low power mode 
called Deep Powerdown, and is essentially turned 
“off*. In this state, all write attempts to the flash mem- 
ory are disregarded. RP# can be driven by the 
POWERGOOD output of the system power supply (if 
this output exists) or from an external analog “power 
supply monitoring” device like the Maxim MAX705 or 
Motorola MC34064, providing absolute flash memory 
protection. Figure 9 gives an example system design 


intel. 

using the Maxim component. Voltage monitoring cir- 
cuits like those mentioned above have adjustable trip 
points and tight tolerances, and can be set to the lower 
value of the system logic normal operating voltage. 
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Figure 9. Reset Control during 
System Powerup and Powerdown 


7.0 SUMMARY 

Unintended writes to flash memory can, at a minimum, 
cause it to output data that the system does not expect, 
forcing system reset or power sequencing to restore 
normal operation. Depending on the specific data writ- 
ten to the device, and the Vpp voltage at the time of the 
write, actual “permanent” alteration of flash memory 
contents can result from unintended program or erase. 
However, Intel flash memory, in combination with 
proper system interfacing techniques, easily eliminates 
the potential for either of these scenarios. 

Closely analyze the powerup/down and reset behaviour 
of the system CPU and any interface logic that inter- 
acts with the flash memory. In the vast majority of 
cases, no problems will be found. If potential for un- 
wanted writes does exist, however, nonvolatile/rewrite- 
able memory protection can easily be included if incor- 
porated early in the design, by following the hints de- 
scribed in this application note. 
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Recently, several laser printer and printer peripheral 
companies have introduced products that incorporate 
flash memory. Their advertisements validate the unique 
capabilities and benefits that flash memory features 
provide. OEM interest, and predictions by market ana- 
lysts like BIS Strategic Decisions, point to increasing 
future flash memory usage as laser printer manufactur- 
ers continue to differentiate their product lines to meet 
user needs. This application brief discusses the uses and 
benefits of flash memory in laser printer designs. Specif- 
ically, flash memory usage for system code storage, and 
for font and “font-like” data storage, will be highlight- 
ed. 


1.0 INTRODUCTION 

Within the computer industry, the laser printer market 
is one of the most rapidly growing business sectors. The 
graph of Figure 1 shows growth rate of various market 


segments since 1988, as well as predicted growth 
through 1996. Laser printer proliferations are expand- 
ing to capture the needs of more and more user groups. 
Simultaneously, more and more computer users are 
turning to laser printers versus traditional “impact 
printer” alternatives, as features proliferate, capabilities 
expand, offices become more automated, and unit 
prices fall. This combination grows the total number of 
laser printer market segments, as well as the size of 
each segment. 

When a large and steadily increasing supply of poten- 
tial laser printer users exists, the “invisible hands” of 
economics unequivocally dictate that a large number of 
suppliers will appear to service this demand. What does 
this all mean to you, the laser printer manufacturer/de- 
signer? In a word, competition! How can any one com- 
pany expand (or at a minimum maintain) their market 
share over the efforts of all others? 



Figure 1. Laser Printer U.S. Market Growth 1988-1996 
(BIS Strategic Decisions, 1992) 
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One way to do this is by providing equivalent product 
features as all other suppliers, at a lower unit price. 
This is referred to as pricing-driven demand. Unfortu- 
nately, as in the example of the "‘clone” market in to- 
day’s PC industry, pricing-driven demand does not of- 
ten translate to long-term financial health for your 
company. 

The other method of establishing a leadership image 
(and the preferable means) is by stimulating differentia- 
tion-based demand through key product features that 
uniquely answer market needs. The advantages to this 
approach are many: 

• Product differentiation makes good business market 
share sense. Uniquely meeting customer needs 
through product features establishes a short-term 
leadership image and the potential for a long-term 
protectable market position. 

• Value-based pricing also makes good business prof- 
itability sense. If product features are chosen care- 
fully, the resultant customer demand allows the sup- 
plier to price comfortably above per-unit cost, guar- 
anteeing profitability and long term business health! 

Flash memory is a key technology whose capabilities 
trendsetting OEMs are exploiting to differentiate their 
current and future laser printer designs. It enables clear 
benefits in system expandability, flexibility, perform- 
ance and ease-of-use; benefits that translate directly to 
customer satisfaction and long-term loyalty. Flash 
memory combines the attributes of nonvolatility (like 
ROM or EPROM) and in-system updateability (like 
RAM or a hard disk drive), while simultaneously pro- 
viding high density and compatible read performance 
to DRAM. This unique combination of features allows 
flash memory to not only replace more “traditional” 
laser printer memory approaches, but also to enhance 
systems beyond the limitations of these “conservative” 
memory solutions. The remainder of this application 
brief will review the major memory subsystems in to- 
day’s laser printer designs, and how flash memory ca- 
pabilities can be applied in each case. 

2.0 MEMORY USAGE IN LASER 
PRINTERS 

A high-level laser printer block diagram is shown in 
Figure 2. Memory uses in laser printers can be grouped 
in the following three areas: 

• System and PDL (printer description language) em- 
ulation code storage 

• Font (and font-like data type) storage 

• Temporary bitmap image storage and manipulation 

Memory is used differently in each case: therefore opti- 
mum memory features are similarly specialized, even 
within a common memory technology. Semiconductor 


vendors, for example, have optimized various types of 
DRAMs for the applications in which they’ll be used. 
Similarly, Intel has optimized unique product “fami- 
lies” within its flash memory line to match the require- 
ments of applications like those found in laser printers. 
These product “families” will be referred to in the dis- 
cussions below. 


2.1 System Code Memory 

The system code memory stores the software that is 
executed by the embedded processor to run and control 
the laser printer. This includes code to interface the 
processor with the input/output, coprocessor, print 
drum and motor subsystems. System code memory also 
includes a large amount of software devoted to emulat- 
ing various printer description languages. The most 
commonly known PDLs are PostScript* (pioneered by 
Adobe and currently at version 2.0) and PCL* (Printer 
Control Language, pioneered by Hewlett Packard and 
currently at version 5). Beyond these two “industry 
standards”, dozens of additional proprietary “lan- 
guages” have been developed by various hardware and 
software vendors. 

Depending on the complexity and capabilities of the 
laser printer and the number of supported emulations, 
system code size varies. It ranges from as little as 
256 Kbytes for an entry-level personal printer to several 
Mbytes for powerful high-end network laser printers. 
The traditional memory technology used to store sys- 
tem code is high density ROM (for nonvolatility) shad- 
owed to DRAM on system powerup (for fast read ac- 
cess time). 

Flash memory, when used for system code storage, 
combines the nonvolatility and high density of ROM 
with the fast read performance of DRAM, making the 
ROM/DRAM redundancy unnecessary. Additionally, 
the in-system upgradeability of flash memory makes la- 
ser printers flexible and updateable both in the manu- 
facturing line at your factory, and once the system is in 
the hands of the end customer. Although the per-device 
cost of flash memory is higher than that of ROM, flash 
memory’s upgradeability can result in a lower system 
cost through a laser printer’s operating lifetime. 

Flash memory eliminates costly inventory of ROMs, 
ROMs that must be scrapped if an enhanced software 
version is released or a software “bug” is discovered. 
Using flash memory, one hardware design can service 
multiple markets via simple “end-of-line” program- 
ming as the system leaves the factory. Additionally, di- 
agnostic code can be programmed on the assembly line 
for full system debug, and replaced with the final soft- 
ware version later in the manufacturing flow. 
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Figure 2. Flash Memory, A Key Element in Leading Edge Laser Printers 
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Today, upgradeability once a system reaches the cus- 
tomer’s hands is achieved via proprietary, costly add-in 
ROM cards. These emulation modules connect to the 
host system through low-performance interface buses. 
Updating the local code memory in the printer requires 
a technician visit, is very costly to the customer, and is 
therefore rarely done. The result can be a less-than-op- 
timized system with subpar performance, and a dissat- 
isfied customer that will not consider your company for 
his/her next printer purchase! 

Flash memory’s in-system reprogramming makes sys- 
tem code upgrade as simple as running an “UPDATE” 
utility on the host computer, and can be done by the 
customer at his/her PC using a diskette sent by the 
printer manufacturer, or a file downloaded from a 
OEM computer bulletin board service. Configuring the 
printer with the exact emulations needed is equally 
straightforward. Customer service is perhaps the su- 
preme differentiator in multiple-source markets. As 
companies focus more and more on the customer and 
the service aspects of their business, they will turn to 
flash memory as a means of readily and economically 
achieving their goals. 

Intel’s Boot Block flash memory product line has been 
specifically defined to meet the specific requirements of 
high-density embedded code storage and execution. 
These devices are also available in ROM-compatible 
pinouts. This allows printer OEMs to achieve quick 
time-to-market with rev. 0 software (updateable once 
initial systems are in customer hands) and later convert 
their designs to ROM if desired, once final production 
code is stable. For further information on these prod- 
ucts, reference the Additional Information section at 
the conclusion of this application brief. 


2.2 Font Storage 

Today’s laser printers ship from the factory with a 
number of “resident” fonts stored in nonvolatile ROM. 
The density of this memory varies with the end market 
for the printer. A “Roman” set of resident typefaces 
requires anywhere from 1 Mbyte -2 Mbytes of storage. 
Japanese “Kanjii” fonts, on the other hand, require up- 
wards of 5 Mbytes per typeface. A minimum-config- 
ured laser printer for the Japanese market therefore 
needs 10 Mbytes -20 Mbytes of resident font memory. 
Additional permanent font storage is often available 
through ROM font cartridges, similar to the “emula- 
tion” fonts mentioned earlier. Finally, software such as 
Adobe Type Manager* and Microsoft* TrueType* 
downloads font information to the printer, storing it in 
volatile DRAM. This latter temporary font data is lost 
when the printer is turned off or reset. Resets can oc- 
cur, for example, each time the printer output jams, or 
when the paper supply is depleted. 


intel- 

Computer users are more and more outgrowing the ca- 
pabilities of the resident ROM fonts stored in their la- 
ser printers, or available through the ROM expansion 
font cartridges. ATM and TrueType are enabling these 
users to customize their documents by varying not only 
font size and attributes, but also the font typefaces 
themselves. Many corporations have developed custom 
fonts for use by their employees for a consistent docu- 
mentation “look and feel”. These unique typefaces are 
not a part of the resident standard typeface set. Finally, 
not only fonts, but also graphic bitmaps (corporate lo- 
gos, bitmapped signatures, etc.) and page layout tem- 
plates are being integrated into desktop-published doc- 
uments. All of this non-resident information must be 
repeatedly downloaded from the host computer to the 
printer DRAM after each printer poweroff or reset. 
Since this download is accomplished via the serial or 
parallel connection, print performance is dramatically 
and negatively impacted, especially noticeable in a net- 
worked printer arrangement. 

Flash memory, with its unique set of attributes, com- 
bines the best qualities of today’s font and template 
storage solutions while incorporating none of their 
weaknesses. Like DRAM, it is in-system updateable 
and has comparable per-device cost at higher densities. 
Like ROM, it is nonvolatile. Like both of these technol- 
ogies, it is a very dense storage medium, available in 
sizes up to 1 Mbyte per component, and 20 Mbytes per 
card, at the time this application note was written. 
Where extremely high density memory is needed, as in 
the case of Kanjii font storage, flash memory compo- 
nents have an over 200,000x first read access advantage 
and an over 14x data transfer performance advantage 
over hard disk drives. The performance of a printer 
computing subsystem is significantly hindered by the 
slow access time of a HDD. Flash memory, with its 
sub- 100 ns read speed, is the superior solution. 

A resident high-density array of flash memory is cou- 
pled directly to the CPU local bus for highest perform- 
ance. It allows the customer to exactly configure the 
printer font, bitmap graphic and page template infor- 
mation for his/her specific applications. This data is 
downloaded to the printer once, and from that point on 
is always available for use, even after the printer is 
turned off or reset. If expanded printer usage (as in a 
network environment) requires additional resident 
“font” storage in the future, easy density upgrade is 
enabled by designing in a PCMCIA memory-I/O card 
socket, again interfacing directly to the embedded proc- 
essor bus. Plugging in a flash memory card means no 
printer disassembly is required! 
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Intel’s FlashFile T M flash memory component and Se- 
ries 2 flash memory card lines combine the high density 
and high performance required for resident “font” stor- 
age. For further information on these products, refer- 
ence the Additional Information section at the conclu- 
sion of this application brief. 


2.3 Image Storage and Manipulation 

The temporary graphic memory subsystem stores the 
image to be printed as it is “constructed” by the proces- 
sor from data provided by the host computer. Optimum 
characteristics of this memory include full “real-time” 
bit-level alteration, infinite rewrite capability and fast 
read/write performance. Nonvolatility is not required 
in this area of the memory subsystem. Therefore, 
DRAM will continue to be the memory of choice for 
temporary image storage. 


3.0 SUMMARY 

This application brief has discussed the various memo- 
ry subsystems in today’s laser printers, and their oper- 
ating characteristics. Flash memory is an exciting new 
approach that offers the very real potential to signifi- 
cantly improve your next-generation laser printer de- 
signs. Its capabilities are superior to traditional solu- 
tions in the system code and font memory areas, and 
enable laser printers that are more expandable, more 
flexible, higher performance and easier to use than ever 
before. The end result is a satisfied customer, a custom- 
er that will choose your product over a competitor’s, 
and a customer that will remain loyal to your company 
far into the future. 


ADDITIONAL INFORMATION 

For additional information on the Intel flash memory products mentioned in this article, please reference the 
following documents, available through your local Intel sales representative. 


Boot Block Components Order Number 

28F001 BX Datasheet 290406 

28F200BX/ 28F002BX Datasheet 290448 

28F400BX/ 28F004BX Datasheet 290451 

ER-26 “The Intel 28F001 BX-T and 28F001 BX-B Flash Memories” 294010 

ER-29 “The Intel 2/4 Mbit Boot Block Flash Memory Family” 294013 

FlashFile Components Order Number 

28F008SA Datasheet 290429 

AP-359 “28F008SA Hardware Interfacing” 292094 

AP-360 “28F008SA Software Drivers” 292095 

AP-364 “28F008SA Automation and Algorithms” 292099 

ER-27 “The Intel 28F008SA Flash Memory” 29401 1 


FlashFile Series 2 Cards Order Number 

Series 2 Flash Memory Card Datasheet 290434 

AP-361 “Implementing the Integrated Registers of the Series 2 Flash Memory Card” 292096 

General Flash Information Order Number 

AP-357 “Power Supply Solutions for Flash Memory” 292092 

ER-20 “ETOX II Flash Memory Technology” 294005 

ER-28 “ETOX III Flash Memory Technology” 294012 


‘Microsoft and TrueType are trademarks of Microsoft Corporation. Adobe Type Manager and PostScript are 
trademarks of Adobe Systems Incorporated. PCL is a trademark of Hewlett Packard Corporation. ETOX and 
FlashFile are trademarks of Intel Corporation. 
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1.0 INTRODUCTION 

Intel Flash memory devices with two power supply 
sources, a 5V Vcc and 12V Vpp, offer flexibility. For 
example, in a flash array, one simple off-chip circuit 
can be used by the entire array to supply the Vpp volt- 
age to any flash chip. Vcc is the primary power source, 
and the only power source needed to read the memory. 
Vpp is required when writing or erasing the memory. 

This technical paper describes a state-of-the-art 5V to 
12V power conversion solution, which uses no induc- 
tors, fits in 0.1" sq. area and yet costs less than $2.00, 
in volume quantities. 

A detailed description of the solution is presented in the 
next section. Section 3.0 deals with the components 
used, their type, value, price and vendors to contact. 
References are provided in the Additional Information 
section. 


2.0 DETAILED DESCRIPTION 

The power solution uses one MAXIM’S MAX662A 
with four small, surface-mount capacitors to generate 
regulated Vpp with no need for inductors (Figure 1). 
MAX662A is available in a small, 8-pin narrow surface 
mount package. The entire design fits in 0. 1 " sq. area, 
as shown in the layouts of Figures 2 and 3. 

Optimal Attributes 

• Very Low Cost 

• Small Size: 0.1" sq. (67.9 mm 2 ) Total Board Area 
(Single Sided) 

• Low Shutdown Current 

• Fast Rise Time from Shutdown 

• No Inductor Necessary 

• All-Surface Mount 

Main Features 

• Input Voltage Range: 4.75V to 5.5V 

• Output Voltage: 12V ± 5% 

• Output Current Capability up to 30 mA at Vjn = 
5V 

• Typical Efficiency: 74% at Load = 30 mA 

• 500 KHz Switching Frequency 

• Shutdown Feature on Chip 


2.1 Maxim Integrated Products — 
MAX662A: V PP at 30 mA 

The MAX662A provides a regulated 12V output volt- 
age at 30 mA from a 5V ± 5% power supply. It uses 
internal charge pumps and external capacitors to gener- 
ate 12V, eliminating inductors. Regulation is provided 
by pulse-skipping scheme that monitors the output 
voltage level and turns on the charge pumps when the 
output voltage begins to droop. The solution boasts a 
typical efficiency of 74% with Vcc = 5 V and Iout = 
30 mA. 

For protection from accidental erasure of flash memo- 
ry, a shutdown pin is provided. In shutdown mode, the 
charge-pump switching action is halted and Vjn is con- 
nected to Vqut through a lk internal resistor. 


2.2 Charge-Pump Capacitors, 

Cl and C2 

Since the values of Cl and C2 are critical, 0.22 jaF 
ceramic capacitors are used. Small surface-mount ca- 
pacitors C2012Y5V1E224Z from TDK are used to 
achieve smallest board area size. 


2.3 Input and Output Capacitors, 

C4 and C5 

The type of input bypass (C4) and output filter capaci- 
tor (C5) affect performance. TDK C3216Y5V1C225Z 
and C20 12Y5V1C105Z, 2.2 jllF and 1 jiF low ESR ce- 
ramic capacitors are used. The low ESR of these units 
eliminates the need for decoupling between Vjn and 
V OUT 


2.4 Layout Considerations 

To ensure stability and decrease noise, careful attention 
is paid to keeping the connections short. Since only one 
side of the board is used, this 12V solution can be 
placed right beneath the flash chip in a two-sided board 
designs, thereby saving space and reducing pin to pin 
track length. 

To keep the inductance in the circuit to a minimum, 
thick track lines are employed (0.025" wide). Some 
critical dimensions are given below: 

Total Length: 0.345" (8.763 mm) 

Total Width: 0.305" (7.747 mm) 

Track Width: 0.025" (0.635 mm) 

Track-Track Spacing: 0.01" (0.254 mm) 
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Figure 1. Maxim MAX662A 5V to 12V Converter Circuit 



Figure 2. 5x Scale Top Side Component Figure 3. 5x Scale Top Side Trace View 

Placement View 
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3.0 PARTS LIST 

Table 1. Parts List for the MAX662A 5V to 12V Converter 


Reference 

Part Number 

Value/Type 

Source 

CostO) 

U1 



Maxim 

(408) 737-7600 

$1.69 




TDK 

(408) 437-9585 

$0.06 

C4 

C3216Y5V1C225Z 

2.2 p.F Ceramic 

TDK 

(408) 437-9585 


C5 

C2012Y5V1C105Z 

1 .0 juF Ceramic 

TDK 

(408) 437-9585 

$0.07 

Total Cost 

$1.97 


NOTE: 

1. Cost estimates based on published 10K unit-pricing at the time this technical paper was written. 


4.0 SUMMARY 

This technical paper summarizes low-cost 5V to 12V 
power solution, which uses no inductors and fits in 0.1" 
sq. area. The solution is based on recommendations 
provided by the supplier vendors, and has been verified 
at the Intel Corporation laboratory. 


5.0 ADDITIONAL INFORMATION 

5.1 References 


Order Number 

Document 

292092 

AP-357, “Power Supply Solutions for Flash Memory” 

292153 

AB-59, “Multi-Site Layout Planning with Intel’s Flash FileTM Components Including ROM 
Compatability” 
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Intel 28F016XS Embedded Flash RAM 
Product Brief 


Product ■ Ideal for embedded applications: 


Highlights 


Datacom 

Office automation 

Telecom 

Computing 


Games 


■ Supports burst-mode processors: 

i960* and Intel486™ 
CPU-based systems 

■ Superior power, integration and 
price to DRAM + ROM or code 
DRAM + HDD: 

Ideal for battery-powered 
portable applications in 
high-speed embedded designs 

■ Synchronous flash RAM 



■ Supports 33-MHz zero-wait state 

■ Very high read performance: 

2XDRAM 

■ SmartVoItage feature supports 
both 5V and 12V device writes 
and 5V or 3 JV device reads 

■ Nonvolatile and updatable 

■ In-system updatability for faster 
time to market 

■ Requires less board space than 
redundant multi-chip code 
solutions 

■ First flash memory-based device 
with synchronous pipelined read 
interface 


Product Description 

The Intel 28F016XS embedded flash RAM is a 16Mb synchronous memory 
component that blends very high read performance with the nonvolatility, 
updatability and low power of flash memory. It provides higher integration, 3.3V 
capability and up to twice the performance of DRAM, without price premiums or 
additional board space requirements. As a result, the 28F016XS embedded flash 
RAM is ideal for burst-mode processors, such as the i960® and Intel486™ 
microprocessors, as well as for embedded applications where redundant code 
DRAM + ROM or code DRAM + HDD were used for code execution/storage 
memory. 

Because the Intel 28F016XS embedded flash RAM is a nonvolatile, code storage 
and execution solution, there is no need for refresh, redundant memory or HDD 
“spin-up” latency when returning from deep power-down mode. It also enables 
instant-on system design. Using minimal glue logic, the Intel 28F016XS embed- 
ded flash RAM can easily interface directly to burst-mode processors, supporting 
33-MHz zero-wait state, 5V read performance code storage. The embedded flash 
RAM device is internally partitioned into 16 software-lockable, 128KB blocks. 

The Intel 28F016XS embedded flash RAM is particularly well suited for such data 
communication needs as routers, hubs and ATM switches; for office automation 
components, including printers, scanners and copiers; for telecommunications 
central office switches, local exchange switches, premise switches and cell base 
stations; for such computing purposes as POS terminals, diskless workstations and 
mobile communications; and for games applications for arcade, set-top and high- 
end home use. 
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Intel 28F016XD Embedded Flash RAM 
Product Brief 


Product ■ Innovative embedded flash 


Highlights 


RAM device: 

DRAM-like system interface 
Nonvolatile, updatable and 
low power 


■ Better price and performance 
than DRAM + ROM and 
DRAM <f HDD: 

Offers higher integration and 
3.3V capability 

Requires lower power and less 
board space 

■ Ideal for embedded applications: 

Datacom 

Office automation 
Telecom 
Computing 
Games 

■ Simple DRAM-like interface: 

Allows use of standard 
DRAM controllers 
Optimizes time to market 
Sits directly on a cachable 
bus 

■ Ideal for portable 
applications 

■ Easy interface to systems using 
embedded processors: 

For i960*KX, I960CS, i960JX 
and Intel386™EX CPU-based 
systems 

■ Internally partitioned into 32 
software-lockable, 32KB blocks 

■ SmartVoltage feature: 

Supports both 5V and 12V 
device writes and 5V or 33V 
device reads 

■ First flash memory device with 
DRAM-like interface 



Product Description 

The Intel 28F016XD embedded flash RAM is an innovative 16Mb memory 
component that combines a DRAM-like system interface with the nonvolatility, 
updatability and lower power of flash memory. The 28F016XD embedded flash 
RAM is an ideal solution for embedded applications where redundant code DRAM 
+ ROM or code DRAM + HDD were used for code execution/storage memory. 

Its simple DRAM-like interface allows use of standard DRAM controllers, 
optimizing time to market. In addition, the Intel 28F016XD embedded flash RAM 
is in-system updatable, reducing the risk of early manufacturing as compared to 
DRAM + ROM and DRAM + OTP EPROM options. The Intel 28F016XD 
embedded flash RAM can easily interface to systems using such embedded 
processors as the i960*KX, i960X, i960JX and the Intel386™EX CPU-based 
systems. Several vendors offer 28F016XD embedded flash RAM SIMM modules, 
making it easier to upgrade code DRAM designs to embedded flash RAM. 

The Intel 28F016XD embedded flash RAM is internally partitioned into 32 
software-lockable, 32-KB blocks. Like Intel’s 28F016SV SmartVoltage device, 
the 28F016XD embedded flash RAM supports both 5V and 12V device writes as 
well as 5V or 3.3V device reads. Because the Intel 28F016XS embedded flash 
RAM is a nonvolatile, code storage and execution solution, there is no need for 
refresh, redundant memory or HDD “spin-up” latency when returning from deep 
power-down mode. It also enables instant-on system design. 

The Intel 28F016XD embedded flash RAM, which is the first flash memory device 
with a DRAM-like interface, is particularly well suited for data communications, 
office automation, telecommunications, computing and games. 

* Other brands and names are the trademarks of their respective owners. 

Printed in USA/1094/17.5K/ASFTOMCD 
© 1994 Intel Corporation 

Order Number 297547-001 
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28F016XS 

16-MBIT (1-MBIT x 16, 2-MBIT x 8) 
SYNCHRONOUS FLASH MEMORY 

■ Backward Compatible with 
28F016SA/SV, 28F008SA Command-Set 

■ Revolutionary Architecture 
— Synchronous Pipelined Reads 
— Multiple Command Execution 
— Write During Erase 
— Page Buffer Write 

■ 2 jaA Typical Deep Power-Down 

■ 1 mA Typical Active Ice Current in 
Static Mode 

m 1 Million Erase Cycles per Block 

m State-of-the-Art 0.6 jam ETOXtm iv 
F lash Technology 

Intel’s 28F016XS 16-Mbit Flash memory is a revolutionary architecture which is the ideal choice for designing 
truly revolutionary high-performance products. Combining very high read performance with the intrinsic non- 
volatility of flash memory, the 28F016XS eliminates the traditional redundant memory paradigm of shadowing 
code from a slow nonvolatile storage source to a faster execution memory, such as DRAM, for improved 
system performance. The innovative capabilities of the 28F016XS enable the design of direct-execute code 
and mass storage data/file flash memory systems. 

The 28F016XS is the highest performance high density nonvolatile read/write flash memory solution available 
today. Its synchronous pipelined read interface, flexible Vcc and Vpp voltages, extended cycling, fast write and 
read performance, symmetrically blocked architecture, and selective block locking provide a highly flexible 
memory component suitable for resident flash component arrays on the system board or SIMMs. The synchro- 
nous pipelined interface and x8/x16 architecture of the 28F016XS allow easy interface with minimal glue logic 
to a wide range of processors/ buses, providing effective 0-wait-state read performance up to 33 MHz. The 
28F016XS’s dual read voltage allows the same component to operate at either 3.3V or 5.0V Vcc- Program- 
ming voltage at 5V Vpp minimizes external circuitry in minimal-chip, space critical designs, while the 12V Vpp 
option maximizes write/erase performance. Its high read performance combined with flexible block locking 
enable both storage and execution of operating systems/application software and fast access to large data 
tables. The 28F016XS is manufactured on Intel’s 0.6 jam ETOXtm iv process technology. 


■ Effective 0-Wait-State Performance up 
to 33 MHz 

■ SmartVoltage Technology 

— User-Selectable 3.3V or 5V Vcc 
-User-Selectable 5V or 12V Vpp 

■ 30.8 MB/sec Burst Write Transfer Rate 

■ 0.48 MB/sec Sustainable Write Transfer 
Rate 

■ Configurable x8 or x16 Operation 

■ 16 Separately-Erasable/Lockable 
128-KByte Blocks 

■ 56-Lead TSOP Type I Package 




November 1994 
Order Number: 290532-001 
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1.0 INTRODUCTION 

The documentation of the Intel 28F016XS Flash 
memory device includes this datasheet, a detailed 
user’s manual, a number of application notes and 
design tools, all of which are referenced at the end 
of this datasheet. 

The datasheet is intended to give an overview of the 
chip feature-set and of the operating AC/ DC specifi- 
cations. The 16-Mbit Flash Product Family User’s 
Manual provides complete descriptions of the user 
modes, system interface examples and detailed de- 
scriptions of all principles of operation. It also con- 
tains the full list of software algorithm flowcharts, 
and a brief section on compatibility with the Intel 
28F008SA. 


1.1 Product Overview 

The 28F016XS is a high-performance, 16-Mbit 
(16,777,216-bit) block erasable nonvolatile random 
access memory organized as either 1-MWord x 16 
or 2-MByte x 8, subdivided into even and odd banks. 
Address Ai makes the bank selection. The 
28F016XS includes sixteen 128-KByte (131,072 
byte) blocks or sixteen 64-KWord (65,536 word) 
blocks. Chip memory maps for x8 and x16 modes 
are shown in Figures 3 and 4. 

The implementation of a new architecture, with 
many enhanced features, will improve the device op- 
erating characteristics and result in greater product 
reliability and ease-of-use as compared to other 
flash memories. Significant features of the 
28F016XS as compared to previous asynchronous 
flash memories include: 

• Synchronous Pipelined Read Interface 

• Significantly Improved Read and Write Perform- 
ance 

• SmartVoltage Technology 

— User-Selectable 5.0V or 12.0 Vpp 

• Internal 3.3V/5.0V Vcc Detection Circuitry 

• Block Write/Erase Protection 

The 28F016XS’s synchronous pipelined interface 
dramatically raises read performance far beyond 
previously attainable levels. Addresses are synchro- 
nously latched and data is read from a 28F016XS 
bank every 30 ns. This capability translates to 0- 
wait-state reads at clock rates up to 33 MHz at 5V 
Vcc. after an initial address pipeline fill delay and 
assuming even and odd banks within the flash mem- 


ory are alternately accessed. Data 'is latched and 
driven valid 20 ns (tcHQv) after a rising CLK edge. 
The 28F016XS is capable of operating up to 66 MHz 
(5V Vcc). and the programmable SFI Configuration 
enables system design flexibility optimizing the 
28F016XS to a specific system clock frequency. See 
Section 4.9, SFI Configuration Table, for specific SFI 
Configurations for given operating frequencies. 

The SFI Configuration optimizes the 28F016XS for a 
wide range of system operating frequencies. The de- 
fault SFI Configuration is 4, which allows system 
boot from the 28F016XS at any frequency up to 66 
MHz at 5V Vcc- After initiating an access, data is 
latched and will begin driving on the data outputs 
after a CLK count corresponding to the SFI Configu- 
ration has elapsed. The 28F016XS will hold data val- 
id until CE# or OE# is deactivated or a CLK count 
corresponding to the SFI Configuration for a subse- 
quent access has elapsed. 

The CLK and ADV# inputs, new to the 28F016XS in 
comparison to previous flash memories, control ad- 
dress latching and device synchronization during 
read operations. CLK input controls the device laten- 
cies, times out the SFI Configuration and synchro- 
nizes data outputs. ADV# indicates the presence of 
a valid address on the 28F016XS address inputs. 
During read operations, addresses are latched and 
accesses are initiated on a rising CLK edge in con- 
junction with ADV# low. Both CLK and ADV# are 
ignored by the 28F016XS during write operations. 

The 28F016XS incorporates SmartVoltage technolo- 
gy, providing Vqc operation at both 3.3V and 5.0V 
and program and erase capability at Vpp = 1 2.0V or 
5.0V. Operating at Vcc = 3.3V, the 28F016XS con- 
sumes less than one half the power consumption at 
5.0V Vcc. while 5.0V Vcc provides highest read per- 
formance capability. Vpp operation at 5.0V elimi- 
nates the need for a separate 1 2.0V converter, while 
the Vpp = 1 2.0V option maximizes write/erase per- 
formance. In addition to the flexible program and 
erase voltages, the dedicated Vpp gives complete 
code protection with Vpp ^ Vpplk. 

Internal 3.3V or 5.0V Vcc detection automatically 
configures the device internally for optimized 3.3V or 
5.0V Read/Write operation. Hence, the 28F016SA’s 
3/5# pin is not required and is a no-connect (NC) 
on the 28F016XS maintaining backwards-compati- 
bility between components. 

A Command User Interface (CUI) serves as the sys- 
tem interface between the microprocessor or micro- 
controller and the internal memory operation. 
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Internal Algorithm Automation allows Byte/Word 
Writes and Block Erase operations to be executed 
using a Two- Write command sequence to the CUI in 
the same way as the 28F008SA 8-Mbit FlashFileTM 
memory. 

A super-set of commands has been added to the 
basic 28F008SA command-set to achieve higher 
write performance and provide additional capabili- 
ties. These new commands and features include: 

• Page Buffer Writes to Flash 

• Command Queuing Capability 

• Automatic Data Writes during Erase 

• Software Locking of Memory Blocks 

• Two-Byte Successive Writes in 8-bit Systems 

• Erase All Unlocked Blocks 

Writing of memory data is performed in either byte or 
word increments, typically within 6 fxsec at 12.0V 
Vpp, which is a 33% improvement over the 
28F008SA. A Block Erase operation erases one of 
the 16 blocks in typically 1 .2 sec, independent of the 
other blocks. 

Each block can be written and erased a minimum of 
100,000 cycles. Systems can achieve one million 
Block Erase Cycles by providing wear-leveling algo- 
rithms and graceful block retirement. These tech- 
niques have already been employed in many flash 
file systems and hard disk drive designs. 

The 28F016XS incorporates two Page Buffers of 
256 bytes (128 words) each to allow page data 
writes. This feature can improve a system write per- 
formance by up to 4.8 times over previous flash 
memory devices, which have no Page puffers. 

All operations are started by a sequence of Write 
commands to the device. Three Status Registers 
(described in detail later in this datasheet) and a 
RY/BY# output pin provide information on the prog- 
ress of the requested operation. 

While the 28F008SA requires an operation to com- 
plete before the next operation can be requested, 
the 28F01 6XS allows queuing of the next operation 
while the memory executes the current operation. 
This eliminates system overhead when writing sev- 
eral bytes in a row to the array or erasing several 
blocks at the same time. The 28F016XS can also 
perform Write operations to one block of memory 
while performing Erase of another block. 


intel. 

The 28F016XS provides selectable block locking to 
protect code or data such as direct-executable oper- 
ating systems or application code. Each block has 
an associated nonvolatile lock-bit which determines 
the lock status of the block. In addition, the 
28F016XS has a master Write Protect pin (WP#) 
which prevents any modifications to memory blocks 
whose lock-bits are set. 

The 28F016XS contains three types of Status Regis- 
ters to accomplish various functions: 

• A Compatible Status Register (CSR) which is 
100% compatible with the 28F008SA FlashFile 
memory Status Register. The CSR, when used 
alone, provides a straightforward upgrade capa- 
bility to. the 28F016XS from a 28F008SA-based 
design. 

• A Global Status Register (GSR) which informs 
the system of command Queue status, Page 
Buffer status, and overall Write State Machine 
(WSM) status. 

• 16 Block Status Registers (BSRs) which provide 
block-specific status information such as the 
block lock-bit status. 

The GSR and BSR memory maps for Byte-Wide and 
Word-Wide modes are shown in Figures 5 and 6. 

The 28F016XS incorporates an open drain RY/BY# 
output pin. This feature allows the user to OR-tie 
many RY/BY# pins together in a multiple memory 
configuration such as a Resident Flash Array. The 
RY/BY# output pin employs five distinct configura- 
tions, which are enabled via special CUI commands 
and are described in detail in the 16-Mbit Flash 
Product Family User’s Manual. 

The 28F016XS also incorporates a dual chip-enable 
function with two input pins, CEo# and CEi#. 
These pins have exactly the same functionality as 
the regular chip-enable pin, CE#, on the 28F008SA. 
For minimum chip designs, CEi# may be tied to 
ground and system logic may use CEo# as the chip 
enable input. The 28F016XS uses the logical combi- 
nation of these two signals to enable or disable the 
entire chip. Both CEo# and CEi# must be active 
low to enable the device. If either one becomes in- 
active, the chip will be disabled. This feature, along 
with the open drain RY/BY# pin, allows the system 
designer to reduce the number of control pins used 
in a large array of 16-Mbit devices. 
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The BYTE# pin allows either x8 or x16 read/writes 
to the 28F016XS. BYTE# at logic low selects 8-bit 
mode with address Ao selecting between low byte 
and high byte. On the other hand, BYTE# at logic 


high enables 16-bit operation with address Ai be- 
coming the lowest order address and address Ao is 
not used (don’t care). A device block diagram is 
shown in Figure 1 . 



Architectural Evolution Includes Synchronous Pipelined Read Interface, SmartVoltage Technology, 
Page Buffers, Queue Registers and Extended Status Registers 
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The 28F016XS incorporates an Automatic Power 
Saving (APS) feature, which substantially reduces 
the active current when the device is in static mode 
of operation (addresses not switching). In APS 
mode, the typical Ice current is 1 mA at 5.0V (3 mA 
at 3.3V). 

A deep power-down mode of operation is invoked 
when the RP# (called PWD# on the 28F008SA) pin 
transitions low. This mode brings the device power 
consumption to less than 2.0 jtxA, typically, and pro- 
vides additional write protection by acting as a de- 
vice reset pin during power transitions. A reset time 
of 300 ns is required from RP# switching high be- 
fore latching an address into the 28F016XS. In the 
Deep Power-Down state, the WSM is reset (any cur- 
rent operation will abort) and the CSR, GSR and 
BSR registers are cleared. 


inlel. 

A CMOS standby mode of operation is enabled 
when either CEq# or CEi# transitions high and 
RP# stays high with all input control pins at CMOS 
levels. In this mode, the device typically draws an 
Ice standby current of 70 ju,A at 5V Vcc- 

The 28F016XS will be available in a 56-Lead, 1.2mm 
thick, 14mm x 20mm TSOP Type I package. The 
package’s form factor and pinout allows for very 
high board layout densities. 


2.0 DEVICE PINOUT 

The 28F016XS is pinout compatible with the 
28F016SA/SV 16-Mbit FlashFileTM memory compo- 
nent, providing an performance upgrade path to the 
28F016XS. The 28F016XS 56-Lead TSOP pinout 
configuration is shown in Figure 2. 



Figure 2. 28F016XS 56-Lead TSOP Pinout Configuration Shows Compatibility with the 28F016SA/SV, 
Allowing for Easy Performance Upgrades from Existing 16-Mbit Designs 
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2.1 Lead Descriptions 


Symbol 

Type 

Name and Function 

A o 

Input 

BYTE-SELECT ADDRESS: Selects between high and low byte when device is in 
x8 mode. This address is latched in x8 Data Writes and ignored in x16 mode (i.e., 
the Ao input buffer is turned off when BYTE# is high). 

Ai 

Input 

BANK-SELECT ADDRESS: Selects an even or odd bank in a selected block. A 
128-KByte block is subdivided into an even and odd bank. A-j = 0 selects the even 
bank and Ai = 1 selects the odd bank, in both byte-wide mode and word-wide 
mode device configurations. 

A 2 -A 16 

Input 

WORD-SELECT ADDRESSES: Select a word within one 128-KByte block. 
Address Ai and A 7 _ie select 1 of 2048 rows, and A 2_6 selects 16 of 512 columns. 
These addresses are latched during both data reads and writes. 

A17-A20 

Input 

BLOCK-SELECT ADDRESSES: Select 1 of 16 Erase blocks. These addresses are 
latched during Data Writes, Erase and Lock-Block operations. 

DQq-DQ7 

Input 

Output 

LOW-BYTE DATA BUS: Inputs data and commands during CUI write cycles. 
Outputs array, buffer, identifier or status data in the appropriate read mode. 
Floated when the chip is de-selected or the outputs are disabled. 

DQ 8 -DQ 15 

Input 

Output 

HIGH-BYTE DATA BUS: Inputs data during x16 Data-Write operations. Outputs 
array, buffer or identifier data in the appropriate read mode; not used for Status 
Register reads. Outputs floated when the chip is de-selected, the outputs are 
disabled (OE# = Vih) or BYTE# is driven active. 

CE 0 #,CE 1 # 

Input 

CHIP ENABLE INPUTS: Activate the device’s control logic, input buffers, 
decoders and sense amplifiers. With either CEo#or CEi # high, the device is 
de-selected and power consumption reduces to standby levels upon completion of 
any current Data-Write or Erase operations. Both CEq# and CE-j # must be low to 
select the device. 

All timing specifications are the same for both signals. Device Selection occurs 
with the latter falling edge of CEq# or CEi #. The first rising edge of CEq# or 
CEi # disables the device. 

RP# 

Input 

RESET/POWER-DOWN: RP# low places the device in a Deep Power-Down 
state. All circuits that consume static power, even those circuits enabled in standby 
mode, are turned off. When returning from Deep Power-Down, a recovery time of 
tpHCH is required to allow these circuits to power-up. 

When RP# goes low, any current or pending WSM operation(s) are terminated, 
and the device is reset. All Status Registers return to ready, clearing all status 
flags. Exit from Deep Power-Down places the device in read array mode. 

OE# 

Input 

OUTPUT ENABLE: Drives device data through the output buffers when low. The 
outputs float to tri-state off when OE# is high. CE X # overrides OE#, and OE# 
overrides WE#. 

WE# 

Input 

WRITE ENABLE: Controls access to the CUI, Page Buffers, Data Queue Registers 
and Address Queue Latches. WE# is active low, and latches both address and 
data (command or array) on its rising edge. Page Buffer addresses are latched on 
the falling edge of WE # . 
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2.1 Lead Descriptions (Continued) 


Symbol 

Type 

Name and Function 

CLK 

Input 

CLOCK: Provides the fundamental timing and internal operating frequency. CLK 
latches input addresses in conjunction with ADV#, times out the desired output SFI 
Configuration as a function of the CLK period, and synchronizes device outputs. CLK 
can be slowed or stopped with no loss of data or synchronization. CLK is ignored 
during write operations. 

ADV# 

Input 

ADDRESS VALID: Indicates that a valid address is present on the address inputs. 
ADV# low at the rising edge of CLK latches the address on the address inputs into the 
flash memory and initiates a read access to the even or odd bank depending on the 
state of address A-|. ADV # is ignored during write operations. 

RY/BY# 

Open 

Drain 

Output 

READY/BUSY: Indicates status of the internal WSM. When low, it indicates that the 
WSM is busy performing an operation. RY/BY# high indicates that the WSM is ready 
for new operations (or WSM has completed all pending operations), or Erase is 
Suspended, or the device is in deep power-down mode. This output is always active 
(i.e., not floated to tri-state off when OE# or CEq#, CEi # are high), except if a 
RY/BY# Pin Disable command is issued. 

WP# 

Input 

WRITE PROTECT: Erase blocks can be locked by writing a nonvolatile lock-bit for 
each block. When WP# is low, those locked blocks as reflected by the Block-Lock 
Status bits (BSR. 6 ), are protected from inadvertent Data Writes or Erases. When WP# 
is high, all blocks can be written or erased regardless of the state of the lock-bits. The 
WP# input buffer is disabled when RP# transitions low (deep power-down mode). 



BYTE ENABLE: BYTE# low places device in x 8 mode. All data is then input or output 
on DQ 0 -. 7 , and DQs-is float. Address Aoselects between the high and low byte. 
BYTE# high places the device in x16 mode, and turns off the Aq input buffer. Address 
Ai then becomes the lowest order address. 

Vpp 

Supply 

WRITE/ERASE POWER SUPPLY (12.0V + 0.6V, 5.0V ±0.5V): For erasing memory 
array blocks or writing words/bytes/pages into the flash array. Vpp = 5.0V ±0.5V 
eliminates the need for a 12V converter, while the 12.0V ± 0.6V option maximizes 
Write/Erase Performance. 

Write and Erase attempts are inhibited with Vpp at or below 1 .5V. Write and Erase 
attempts with Vpp between 1 .5V and 4.5V, between 5.5V and 1 1 .4V, and above 1 2.6V 
produce spurious results and should not be attempted. 

Vcc 

Supply 

DEVICE POWER SUPPLY (3.3V ±0.3V, 5.0V ±0.5V): Internal detection configures 
the device for 3.3V or 5.0V operation. To switch 3.3V to 5.0V (or vice versa), first ramp 
Vcc down to GND, and then power to the new Vcc voltage. Do not leave any power 
pins floating. 

GND 

Supply 

GROUND FOR ALL INTERNAL CIRCUITRY: Do not leave any ground pins floating. 

NC 


NO CONNECT: No internal connection to die, lead may be driven or left floating. 
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3.0 MEMORY MAPS 
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Figure 3. 28F016XS Memory Map 
(Byte-Wide Mode) 
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7FFFF 


60000 

5FFFF 


4FFFF 


40000 

3FFFF 


30000 

2FFFF 


^FFFF 


10000 

OFFFF 

00000 


290532-4 


Figure 4. 28F016XS Memory Map 
(Word-Wide Mode) 
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3.1 Extended Status Register Memory Map 


x8 Mode 


RESERVED 

RESERVED 

GSR 

RESERVED 

BSR 15 

RESERVED 

RESERVED 

■ 

■ 

■ 

RESERVED 

RESERVED 

GSR 

RESERVED 

BSR 0 

RESERVED 

RESERVED 


^ 20-0 

1FFFFFH 


1E0006H 

1E0005H 

1E0004H 

1E0003H 

1E0002H 

1E0001H 

1E0000H 


01FFFFH 


000006H 

000005H 

000004H 

000003H 

000002H 

000001 H 
000000H 

290532-5 


Figure 5. Extended Status Register Memory 
Map (Byte-Wide Mode) 


x16 Mode 

A 20-1 
FFFFFH 




RESERVED 



RESERVED 

F0003H 


GSR 

F0002H 


RESERVED 


BSR 15 



RESERVED 

rUUUl n 


RESERVED 

F0000H 

■ 

■ 


■ 

OFFFFH 




RESERVED 

00003H 




RESERVED 



GSR 

00002H 




RESERVED 



BSR 0 



RESERVED 

00001 H 


RESERVED 

00000H 



290532-6 


Figure 6. Extended Status Register Memory 
Map (Word-Wide Mode) 
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4.0 BUS OPERATIONS, COMMANDS AND STATUS REGISTER DEFINITIONS 


4.1 Bus Operations for Word-Wide Mode (BYTE# = V|h) 


Mode 

Notes 

RP# 

CEo-i # 

OE# 

WE# 

ADV# 

CLK 

Ai 

DQo-15 

RY/BY# 

Latch Read 
Address 

1,9,10 

V|H 

V| L 

X 

V|H 

V|L 

T 

X 

X 

X 

Inhibit 
Latching 
Read Address 

1,9 

V|H 

V|L 

X 

V|H 

V|H 

T 

X 

X 

X 

Read 

1,2, 7, 9 

V|H 

V|L 

V|L 

V|H 

X 

T 

X 

Dqut 

X 

Output 

Disable 

1,6, 7, 9 

V|H 

V,L 

V| H 

V|H 

X 


X 


X 




V| L 

X 

X 

X 

X 



X 

Deep 

Power-Down 

H 




H 

H 

X 

X 



Manufacturer 

ID 











Device ID 

Hill 




■ 

X 

T 



MEM 

Write 

1,5, 6, 9 

V|H ' 

V| L 

V|H 

V|L 

X 

X 

X 

Din 

X 


NOTES: 

1. X can be Vih or V||_ for address or control pins except for RY/BY#, which is either Vql or Vqh> or High Z or Dqut for 
data pins depending on whether or not OE# is active. 

2. RY/BY# output is open drain. When the WSM is ready, Erase is suspended or the device is in deep power-down mode. 
RY/BY# will be at Vqh if it is tied to Vcc through a resistor. RY/BY# at Vqh is independent of OE# while a WSM 
operation is in progress. 

3. RP# at GND ±0.2V ensures the lowest deep power-down current. 

4. Aq and Ai at V||_ provide device manufacturer codes in x8 and xl 6 modes respectively. Ao and Ai at Vm provide device 
ID codes in x8 and x16 modes respectively. All other addresses are set to zero. 

5. Commands for Erase, Data Write, or Lock-Block operations can only be completed successfully when Vpp = Vppm or 
Vpp = VppH2- 

6. While the WSM is running, RY/BY# in level-mode (default) stays at Vql until all operations are complete. RY/BY# goes 
to Voh when the WSM is not busy or in erase suspend mode. 

7. RY/BY# may be at Vql while the WSM is busy performing various operations. For example, a Status Register read 
during a Write operation. 

8. The 28F016XS shares an identical device identifier with other Intel Flash memories. Reading this identifier in conjunction 
with the unique Device Proliferation Code (read from the Page Buffer after writing the Upload Device Configuration com- 
mand), the 28F016XS can be identified by system software. 

9. CEo-i # at V|l is defined as both CEq# and CEi # low, and CEq-i # at Vih is defined as either CEo# or CEi # high. 

10. Addresses are latched on the rising edge of CLK in conjunction with ADV# low. Address A-| = 0 selects the even bank 
and Ai = 1 selects the odd bank, in both byte-wide mode and word-wide mode device configurations. 
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4.2 Bus Operations for Byte-Wide Mode (BYTE# = V||_) 


Mode 

Notes 

RP# 

CEq-i # 

OE# 

WE# 

ADV# 

CLK 

Ao 

DQo-7 

RY/BY# 

Latch Read 
Address 

1,9,10 






■ 

X 

■ 

X 

Inhibit 
Latching 
Read Address 

1,9 



■ 

V| H 

V| H 

■ 

X 

■ 

X 

Read 

1,2,7, 9 

V|H 

V|L 

V|L 

V|H 

X 

mm 

X 

Dout 

X 

Output 

Disable 

1,6, 7, 9 



V|H 

| 


X 

X 

High Z 

X 

Standby 

1,6, 7,9 

V|H 

V| H 

X 


X 

X 

X 

High Z 

X 


1,3 

V|L 


H 



X 

X 

High Z 

Voh 


1,4,9 

VlH 







89H 

Voh 





Eli 


X 





Write 

1,5, 6, 9 

V|H 

V|L 

Vih 

V|L 

X 

X 

X 

Din 

X 


NOTES: 

1. X can be Vm or V||_for address or control pins except for RY/BY#, which is either Vql or Vqh. or High Z or Dout for 
data pins depending on whether or not OE# is active. 

2. RY/BY# output is open drain. When the WSM is ready, Erase is suspended or the device is in deep power-down mode. 
RY/BY# will be at Voh if if is tied to Vcc through a resistor. RY/BY# at Voh is independent of OE# while a WSM 
operation is in progress. 

3. RP# at GND ±0.2V ensures the lowest deep power-down current. 

4. Aq and Ai at V||_ provide device manufacturer codes in x8 and x16 modes respectively. Ao and Ai at Vih provide device 
ID codes in x8 and x16 modes respectively. All other addresses are set to zero. 

5. Commands for Erase, Data Write, or Lock-Block operations can only be completed successfully when Vpp = Vppm or 
Vpp = VppH2* 

6. While the WSM is running, RY/BY# in level-mode (default) stays at Vol until ail operations are complete. RY/BY# goes 
to Voh when the WSM is not busy or in erase suspend mode. 

7. RY/BY# may be at Vql while the WSM is busy performing various operations. For example, a Status Register read 
during a Write operation. 

8. The 28F016XS shares an identical device identifier with other Intel Flash memories. Reading this identifier in conjunction 
with the unique Device Proliferation Code (read from the Page Buffer after writing the Upload Device Configuration com- 
mand), the 28F016XS can be identified by system software. 

9. CEo-i # at V|i_ is defined as both CEo# and CE-| # low, and CEo-i # at V|h is defined as either CEo# or CEi# high. 

10. Addresses are latched on the rising edge of CLK in conjunction with ADV# low. Address Ai = 0 selects the even bank 
and Ai = 1 selects the odd bank, in both byte-wide mode and word-wide mode device configurations. 
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4.3 28F008SA — Compatible Mode Command Bus Definitions 


Command 

Notes 

First Bus Cycle 

Second Bus Cycle 

Oper 

Addr 

Data 

Oper 

Addr 

Data 

Read Array 


Write 

X 

FFH 

Read 

AA 

AD 

Intelligent Identifier 

1 

Write 

X 

90H 

Read 

IA 

ID 

Read Compatible Status Register 

2 

Write 

X 

70H 

Read 

X 

CSRD 

Clear Status Register 

3 


X 





Word/ Byte Write 


Write 

X 

40H 

Write 

WA 

WD 

Alternate Word/ Byte Write 


Write 

X 

10H 

Write 

WA 

WD 

Block Erase/Confirm 


Write 

X 

20H 

Write 

BA 

DOH 

Erase Suspend/Resume 


Write 

X 

BOH 

Write 

X 

DOH 


ADDRESS 

AA = Array Address 
BA = Block Address 
IA = Identifier Address 
WA = Write Address 
X = Don’t Care 

NOTES: 

1. Following the Intelligent Identifier command, two Read operations access the manufacturer and device signature codes. 

2. The CSR is automatically available after device enters Data Write, Erase, or Suspend operations. 

3. Clears CSR.3, CSR.4 and CSR. 5. Also clears GSR.5 and all BSR.5, BSR.4 and BSR.2 bits. See Status Register defini- 
tions. 


DATA 

AD = Array Data 
CSRD = CSR Data 
ID = Identifier Data 
WD = Write Data 
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4.4 28F016XS — Performance Enhancement Command Bus Definitions 


Command 

Mode 

Notes 

First Bus Cycle 

Second Bus Cycle 

Third Bus Cycle 

Oper 

Addr 



Addr 



Addr 

Data 

Read Extended 
Status Register 

■ 

1 

Write 




RA 


i 

B 


Page Buffer Swap 


7 

Write 

X 

72H 







Read Page Buffer 


11 

Write 

X 



PA 

PD 




Single Load to 
Page Buffer 

■ 


Write 

X 



PA 

PD 

■ 

B 


Sequential Load 
to Page Buffer 

|| 

4,6,10 

Write 

X 

H 


X 

BCL 


B 

BCH 



Write 

mm 



BS 

WCL 

Write 


WCH 

Page Buffer 
Write to Flash 

x8 

3,4,9,10 

Write 

m 




BC(L,H) 



BC(H,L) 



Write 

X 






WA 

WCH 

Two-Byte Write 


3 


X 

FBH 







Lock Block/Confirm 




X 

77H 



DOH 




Upload Status 
Bits/Confirm 

■ 

2 

Write 

H 

97H 



DOH 

■ 

B 


Upload Device 
Information/Confirm 

■ 

12 

Write 

H 

mn 


B 

DOH 

■ 

B 


Erase All Unlocked 
Blocks/Confirm 

■ 


Write 

H 

m 


H 

DOH 

B 

B 


Device 

Configuration 

■ 



H 


Write 

B 


B 

B 


Sleep 




X 

FOH 







Abort 



Write 

X 

80H 








ADDRESS DATA 

BA = Block Address AD = Array Data WC (L,H) = Word Count (Low, High) 

PA = Page Buffer Address PD = Page Buffer Data BC (L,H) = Byte Count (Low, High) 

RA = Extended Register Address BSRD = BSR Data WD (L,H) = Write Data (Low, High) 

WA = Write Address GSRD = GSR Data DCCD = Device Configuration Code Data 

X = Don’t Care 
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NOTES: 

1 . RA can be the GSR address or any BSR address. See Figures 5 and 6 for Extended Status Register memory maps. 

2. Upon device power-up, all BSR lock-bits come up locked. The Upload Status Bits command must be written to reflect the 
actual lock-bit status. 

3. Ao is automatically complemented to load second byte of data. BYTE# must be at V|l- Aq value determines which 
WD/BC is supplied first: A 0 = 0 looks at the WDL/BCL, A 0 = 1 looks at the WDH/BCH. 

4. BCH/WCH must be at 00H for this product because of the 256-byte (128-word) Page Buffer size, and to avoid writing the 
Page Buffer contents to more than one 256-byte segment within an array block. They are simply shown for future Page 
Buffer expandability. 

5. In x16 mode, only the lower byte DQ 0 _7 is used for WCL and WCH. The upper byte DQ 8 _i 5 is a don’t care. 

6. PA and PD (whose count is given in cycles 2 and 3) are supplied starting in the fourth cycle, which is not shown. 

7. This command allows the user to swap between available Page Buffers (0 or 1). 

8. This command reconfigures RY/BY# output and SFI Configuration. 

9. Write address, WA, is the Destination address in the flash array which must match the Source address in the Page Buffer. 
Refer to the 16-Mbit Flash Product Family User’s Manual. 

10. BCL = 00H corresponds to a byte count of 1. Similarly, WCL = 00H corresponds to a word count of 1. 

11. Page buffer reads are valid at any frequency up to the corresponding SFI Configuration setting of 2. Page buffer reads 
above this frequency may produce invalid results and should not be attempted. See Section 4.9 for SFI Configuration 
frequency settings. 

12. After writing the Upload Device Information command and the Confirm command, the following information is output at 
Page Buffer addresses specified below: 


Address 

06H, 07H (Byte Mode) 

03H (Word Mode) 

1 EH (Byte Mode) 

OFH (DQ 0 _ 7 )(Word Mode) 

1 FH (Byte Mode) 

OFH (DQ 0 _ 15 )(Word Mode) 


Information 

Device Revision Number 
Device Revision Number 
Device Configuration Code 
Device Configuration Code 
Device Proliferation Code (03H) 
Device Proliferation Code (03H) 


A page buffer swap followed by a page buffer read sequence is necessary to access this information. The contents of all 
other Page Buffer locations, after the Upload Device Information command is written, are reserved for future implementation 
by Intel Corporation. See Section 4.8 for a description of the Device Configuration Code. This code also corresponds to data 
written to the 28F016XS after writing the Device Configuration command. 
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4.5 Compatible Status Register 


WSMS 

ESS 

ES 

DWS 

VPPS 

R 

R 

R 

7 

6 

5 

4 

3 

2 

1 

0 


CSR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 
0 = Busy 

NOTES: 

RY/BY# output or WSMS bit must be checked to determine 
completion of an operation (Erase, Erase Suspend, or Data 
Write) before the appropriate Status bit (ESS, ES or DWS) is 
checked for success. 

CSR.6 = ERASE-SUSPEND STATUS 
1 = Erase Suspended 

0 = Erase In Progress/Completed 

CSR.5 = ERASE STATUS 

1 = Error In Block Erasure 

0 = Successful Block Erase 
CSR.4 = DATA-WRITE STATUS 

1 = Error in Data Write 

0 = Data Write Successful 

If DWS and ES are set to “1 " during an erase attempt, an 
improper command sequence was entered. Clear the CSR 
and attempt the operation again. 

CSR.3 = Vp P STATUS 

1 = Vpp Error Detect, Operation 
Abort 

0 = Vpp OK 

The VPPS bit, unlike an A/D converter, does not provide 
continuous indication of Vpplevel. The WSM interrogates 
Vpp’s level only after the Data Write or Erase command 
sequences have been entered, and informs the system if 
Vpp has not been switched bn. VPPS is not guaranteed to 
report accurate feedback between Vppi_K(max) and 
v PPHi( min )» between Vppm(max) and VppH 2 (min), and 
above VppH 2 (max). 

CSR.2-0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when polling the CSR. 


3-18 


AEM&M©! 0MIF@[^[i!MY0@N] 






28F016XS FLASH MEMORY 


Intel 


4.6 Global Status Register 


WSMS 

OSS 

DOS 

DSS 

QS 


PBS 

PBSS 

7 

6 

5 

4 

3 

2 

1 

0 


GSR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 
0 = Busy 

NOTES: 

[1] RY/BY# output or WSMS bit must be checked to 
determine completion of an operation (Block Lock, 
Suspend, any RY/BY# reconfiguration, Upload Status 
Bits, Erase or Data Write) before the appropriate Status 
bit (OSS or DOS) is checked for success. 

GSR.6 = OPERATION SUSPEND STATUS 
1 = Operation Suspended 
0 = Operation in Progress/Completed 


GSR.5 = DEVICE OPERATION STATUS 
1 = Operation Unsuccessful 
0 = Operation Successful or Currently 
Running 


GSR.4 = DEVICE SLEEP STATUS 
1 = Device in Sleep 
0 = Device Not in Sleep 


MATRIX 5/4 

0 0 = Operation Successful or 
Currently Running 
01= Device in Sleep mode or 
Pending Sleep 

10 = Operation Unsuccessful 
11= Operation Unsuccessful or 
Aborted 

If operation currently running, then GSR.7 = 0. 
If device pending sleep, then GSR.7 = 0. 

Operation aborted: Unsuccessful due to Abort 
command. 

GSR.3 = QUEUE STATUS 
1 = Queue Full 
0 = Queue Available 


GSR.2 = PAGE BUFFER AVAILABLE STATUS 
1 = One or Two Page Buffers 
Available 

0 = No Page Buffer Available 

The device contains two Page Buffers. 

GSR.1 = PAGE BUFFER STATUS 

1 = Selected Page Buffer Ready 

0 = Selected Page Buffer Busy 

GSR.O = PAGE BUFFER SELECT STATUS 

1 = Page Buffer 1 Selected 
0 = Page Buffer 0 Selected 

Selected Page Buffer is currently busy with WSM 
operation 


NOTE: 

1. When multiple operations are queued, checking BSR.7 only provides indication of completion for that particular block. 
GSR.7 provides indication when all queued operations are completed. 
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4.7 Block Status Register 


BS 

BLS 

BOS 

BOAS 

QS 

VPPS 

VPPL 

R 

7 

6 

5 

4 

3 

2 

1 

0 


BSR.7 = BLOCK STATUS 
1 = Ready 
0 = Busy 

NOTES: 

[1 ] RY/BY# output or BS bit must be checked to 
determine completion of an operation (Block Lock, 
Suspend, Erase or Data Write) before the appropriate 
Status bits (BOS, BLS) is checked for success. 

BSR.6 = BLOCK LOCK STATUS 

1 = Block Unlocked for Write/Erase 
0 = Block Locked for Write/ Erase 


BSR.5 = BLOCK OPERATION STATUS 
1 = Operation Unsuccessful 
0 = Operation Successful or Currently 
Running 


BSR.4 = BLOCK OPERATION ABORT STATUS 
1 = Operation Aborted 
0 = Operation Not Aborted 

The BOAS bit will not be set until BSR.7 = 1 . 

MATRIX 5/4 

0 0 = Operation Successful or 
Currently Running 

0 1 = Not a Valid Combination 

1 0 = Operation Unsuccessful 
1 1 = Operation Aborted 

Operation halted via Abort command. 

BSR.3 = QUEUE STATUS 
1 = Queue Full 
0 = Queue Available 


BSR.2 = V PP STATUS 

1 = Vpp Error Detect, Operation Abort 
0 = Vpp OK 


BSR.1 = Vpp LEVEL 

1 = Vpp Detected at 5.0V ± 1 0% 
0 = Vpp Detected at 12.0V ±5% 

BSR.1 is not guaranteed to report accurate feedback 
between the Vppm and VppH 2 voltage ranges. Writes 
and erases with Vpp between VppLK(fnax) and Vppm 
(min), between Vppm (max) and Vpp^min), and above 
VppH 2 (max) produce spurious results and should not be 
attempted. 

BSR.O = RESERVED FOR FUTURE ENHANCEMENTS 

This bits is reserved for future use; mask it out when polling the BSRs. 


NOTE: 

1. When multiple operations are queued, checking BSR.7 only provides indication of completion for that particular block. 
GSR.7 provides indication when all queued operations are completed. 
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4.8 Device Configuration Code 


R 

R 

SFI2 

SFI1 

SFI0 

RB2 

RBI 

RB0 

7 

6 

5 

4 

3 

2 

1 

0 


NOTES: 

Default SFI Configuration on powerup or return from deep 
powerdown mode is 4, allowing system boot from the 
28F016XS at any frequency up to the device’s maximum 
frequency. Undocumented combinations of SFI2-SFI0 are 
reserved by Intel Corporation for future implementations 
and should not be used. 


DCC.5-DCC.3 = SFI CONFIGURATION 
(SFI2-SFI0) 

001 = SFI Configuration 1 

010 = SFI Configuration 2 

011 = SFI Configuration 3 
1 00 = SFI Configuration 4 

(Default) 

DCC.2-DCC.0 = RY/BY# CONFIGURATION 
(RB2-RB0) 

001 = Level Mode (Default) 

010 = Pulse-On-Write 

011 = Pulse-On-Erase 

100 = RY/BY# Disabled 

101 = Pulse-On-Write/Erase 

DCC.7-DCC.6 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when reading the Device Configuration Code. Set 
these bits to “0” when writing the desired RY/BY# configuration to the device. 


Undocumented combinations of RB2-RB0 are reserved by 
Intel Corporation for future implementations and should not 
be used. 


4.9 SFI Configuration Table 


SFI 

Configuration 

Notes 

28F016XS-15 
Frequency (MHz) 

28F016XS-20 
Frequency (MHz) 

28F016XS-25 
Frequency (MHz) 

4 

1,2 

66 (and below) 

50 (and below) 

40 (and below) 

3 

2 

50 (and below) 

37.5 (and below) 

30 (and below) 

2 

2 

33 (and below) 

25 (and below) 

20 (and below) 

1 

2 


12.5 (and below) 

10 (and below) 


NOTE: 

1. Default SFI Configuration after powerup or return from deep power-down mode via RP# low. 

2. SFI Configuration is retained if put in sleep mode via a Sleep or Abort Command. 
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5.0 ELECTRICAL SPECIFICATIONS 

5.1 Absolute Maximum Ratings* 

Temperature Under Bias 0°Cto +80°C 

Storage Temperature 65°Cto +125°C 


Intel 


NOTICE: This data sheet contains information on 
products in fhe sampling and initial production phases 
of development. The specifications are subject to 
change without notice. Verify with your local Intel 
Sales office that you have the latest data sheet be- 
fore finalizing a design. 

* WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings " may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


V CC = 3.3V ± 0.3V Systems( 5 ) 


Symbol 

Parameter 





Test Conditions 

Ta 

Operating Temperature, Commercial 

1 

0 

70 

El 


Vcc 

Vcc with Respect to GND 

2 


7.0 

V 


Vpp 

Vpp Supply Voltage with 
Respect to GND 


-0.2 

14.0 

■ 


V 

Voltage on any Pin (except Vcc. Vpp) 
with Respect to GND 

2 



V 


1 

Current into any Non-Supply Pin 



30 

mA 


Iqut 

Output Short Circuit Current 

4 


100 

mA 



V C c = 5.0V ±0.5VSystems(5) 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 

Test Conditions 

Ta 

Operating Temperature, Commercial 

1 

0 

70 

■a 

Ambient Temperature 


Vcc with Respect to GND 

2 

Q21 

7.0 

■ 


Vpp 

Vpp Supply Voltage with Respect to GND 

2,3 

an 

14.0 



V 

Voltage on any Pin (except Vcc. Vpp) with 
Respect to GND 


-2.0 

7.0 

■ 


1 

Current into any Non-Supply Pin 



30 



Iqut 

Output Short Circuit Current 

4 


100 

mA 



NOTES: 

1 . Operating temperature is for commercial product defined by this specification. 

2. Minimum DC voltage is -0.5V on input/output pins. During transitions, this level may undershoot to -2.0 V for periods 
<20 ns. Maximum DC voltage on input/output pins is Vcc+ 0.5V which may overshoot to Vcc + 2.0 V for periods 
<20 ns. 

3. Maximum DC voltage on Vpp may overshoot to + 14.0V for periods <20 ns. 

4. Output shorted for no more than one second. No more than one output shorted at a time. 

5. AC specifications are valid at both voltage ranges. See DC Characteristics tables for voltage range-specific specifications. 
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5.2 Capacitance 


For a 3.3V ±0.3V System: 


Symbol 

Parameter 

Notes 

Typ 

Max 

Units 

Test Conditions 

C|N 

Capacitance Looking into an 
Address/Control Pin 

1 

6 

8 

PF 

T a = 25°C, f = 1.0 MHz 

COUT 

Capacitance Looking into an 
Output Pin 

1 

8 

12 

PF 

T a - 25°C, f = 1.0 MHz 

Cload 

Load Capacitance Driven by 
Outputs for Timing Specifications 

1,2 


50 

PF 

For the 28F016XS-20 
and 28F016XS-25 


For 5.0V ±0.5V System: 


Symbol 

Parameter 

Notes 

Typ 

Max 

Units 

Test Conditions 

C|N 

Capacitance Looking into 
an Address/Control Pin 

1 

6 

H 

PF 

T a = 25°C, f = 1.0 MHz 




8 

H 


T a = 25°C, f = 1.0 MHz 

Cload 

Load Capacitance Driven by 
Outputs for Timing Specifications 


H 

100 

PF 

For the 28F016XS-20 



PF 

For the 28F016XS-15 


NOTE: 

1. Sampled, not 100% tested. Guaranteed by design. 

2. Intel is currently developing more accurate models for the Transient Equivalent Testing Load Circuits. For more informa- 
tion or to obtain iBIS models, please contact your local Intel/Distribution Sales Office. 
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5.3 Transient Input/Output Reference Waveforms 




AC test inputs are driven at Vqh (2.4 VTTL) for a Logic “1” and Vql (0.45 VTTL) for a Logic “0.” Input timing begins at 
V|h (2.0 VTTL) and Vil (0.8 VTTL). Output timing ends at Vih and V|l- Input rise and fall times (10% to 90%) <10 ns. 


Figure 7. Transient Input/Output Reference Waveform 
(V CC = 5.0V ± 0.5V) for Standard Testing Configuration 1 ) 



AC test inputs are driven at 3.0V for a Logic “1” and 0.0V for a Logic “0.” Input timing begins, and output timing ends, at 
1.5V. Input rise and fall times (10% to 90%) <10 ns. 


Figure 8. Transient Input/Output Reference Waveform (Vqc = 3.3V ±0.3V) 
Highspeed Reference Waveform^) (V C c = 5.0V +0.5V) 

NOTES: 

1. Testing characteristics for 28F016XS-20 at 5V Vcc- 

2. Testing characteristics for 28F016XS-15 at 5V V C c and 28F016XS-20/28F016XS-25 at 3.3V V C c- 
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5.4 DC Characteristics 


Vcc = 3.3V ±0.3V, T a = 0°c to + 70°C 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

Ili 

Input Load Current 

1 



±1 

JA A 

Vcc = Vcc Max, 
Vin = Vcc or GND 

«LO 

Output Leakage 
Current 

1 



±10 

fxA 

v cc = v cc Max, 
VouT = Vcc or GND 

lees 

Vcc Standby 
Current 

1,5 

1 

70 

130 

jiiA 

Vcc = VccMax, 

CE 0 #,CE 1 #,RP# = V C c ±0.2V 
BYTE#, WP# = V CC ±0.2V 
or GND ±0.2V 

■ 


■ 



ICCD 

Vcc Deep 

Power-Down 

Current 

1 

■ 

2 

5 

fxA 

RP# = GND ± 0.2 V 

BYTE# = V C c ± 0.2V or GND ±0.2V 

ICCR1 

Vcc Word/Byte 
Read Current 

1,4,5 

i 

65 

85 

mA 

Vcc = Vcc Max 

CMOS:CE 0 #,CE 1 # = GND ±0.2V 
BYTE# = GND ±0.2VorV C c ±0.2V 
Inputs = GND ± 0.2V or V C c ±0.2V 
4-Location Access 
Sequence: 3-1 -1-1 (clocks) 
f = 25 MHz, Iout = 0 mA 

•CCR2 

Vcc Word/Byte 
Read Current 

1,4, 

5,6 


60 

75 

mA 

v cc = v cc Max 

CMOS: CE 0 #, CE-| # = GND ±0.2V 
BYTE# = GND ±0.2VorV C c ±0.2V 
Inputs = GND ±0.2VorV C c ±0.2V 
4-Location Access 
Sequence: 3-1 -1-1 (clocks) 
f = 16 MHz, Iqut = 0 mA 

Iccw 

Vcc Write Current 

1,6 


8 

12 

mA 

Word/Byte Write in Progress 
V PP = 12.0V ±5% 


8 

. 17 

mA 

Word/Byte Write in Progress 
V PP = 5.0V ±10% 

ICCE 

Vcc Block Erase 
Current 

1,6 



H 

mA 

Block Erase in Progress 
V PP = 12.0V ±5% 



9 

H 

mA 

Block Erase in Progress 
V PP = 5.0V ±10% 

ICCES 

Vcc Erase 
Suspend Current 

1,2 




mA 

CE 0 #,CE 1 # = V| H 
Block Erase Suspended 
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5.4 DC Characteristics (Continued) 


Vcc = 3.3V ± 0.3V, T a = 0°cto +70°C 


Symbol 

Parameter 

Notes 

Min 



Units 

Test Conditions 

Ipps 

Vpp Standby/ Read 

1 


±1 

±10 

julA 

Vpp ^ Vcc 

IPPR 

Current 



30 

50 

jliA 

Vpp > Vcc 

IpPD 

Vpp Deep Power- 
Down Current 


■ 

0.2 


Q 

RP# = GND +0.2V 

Ippw 

Vpp Write Current 

1,6 


10 

15 

B 

Vpp = 12.0V ±5% 
Word/Byte Write in Progress 




■ 

15 

25 

mA 

Vpp = 5.0V ±10% 
Word/Byte Write in Progress 

IPPE 

Vpp Erase Current 

1,6 

■ 

■ 



Vpp = 12.0V ±5% 
Block Erase in Progress 




■ 

H 

20 

mA 

Vpp = 5.0V ±10% 
Block Erase in Progress 

IPPES 

Vpp Erase 
Suspend Current 

1 

■ 

g 

50 

ju,A 

Vpp = VppHi or VppH 2 > 
Block Erase Suspended 

V|L 

Input Low Voltage 

6 

-0.3 


0.8 

V 


V|H 

Input High Voltage 

H 


■ 

Vcc 
+ 0.3 

V 



Output Low 
Voltage 

H 

■ 

■ 

0.4 

1 

Vcc = Vcc Min anc ^ 

Iql = 4 mA 

VoHI 

Output High 
Voltage 

6 

H 

■ 



Ioh = — 2.0 mA 
Vcc = Vcc Min 

VOH2 



Vcc 

-0.2 

■ 



Iqh = —i 00 j^A 
Vcc = Vcc Min 

VpPLK 

Vpp Erase/Write 
Lock Voltage 


0.0 

■ 

1.5 

V 


VppHI 

Vpp during Write/ Erase 
Operations 

H 

4.5 



V 


VppR2 

Vpp during Write/Erase 
Operations 

B 

11.4 

12;0 

12.6 

V 


VlKO 

Vcc Erase/Write 
Lock Voltage 



■ 

B 

V 



NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 3-3V, Vpp = 12.0V or 5.0V, T = 25°C. These 
currents are valid for all product versions (package and speeds). 

2. Icces is specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum 
of Icces and Iccr- 

3. Block Erases, Word/Byte Writes and Lock Block operations are inhibited when Vpp \ Vpplk and not guaranteed in the 
ranges between VppLK(max) and VppHi(min), between Vppm(max) and VppH 2 (min) and above VppH 2 (max). 

4. Automatic Power Savings (APS) reduces Iccr to 3 m A typical in static operation. 

5. CMOS Inputs are either Vcc ±0.2V or GND ±0.2V. TTL Inputs are either V||_ or Vm- 

6. Sampled, but not 100% tested. Guaranteed by design. 
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5.5 DC Characteristics 


Vcc = 5.0V ±0.5V, T a = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

lu 

Input Load Current 

1 



±1 

julA 

Vcc = Vcc Max 
V|N = Vcc ° r GND 

•lo 

Output Leakage 
Current 

1 


■ 


jllA 

Vcc = Vcc Max 
v OUT = Vcc or GND 

lees 

Vcc Standby 
Current 


i 

70 

130 

|liA 

Vcc~ v cc Max 

CE 0 #,CE 1 #,RP# = V C c ± 0.2V 
BYTE#, WP# = Vcc ±0.2V or GND ±0.2V 

i 

2 

■ 

mA 

v cc = v cc Max 
CE 0 #,CE 1 # J RP# = V| H 
BYTE#, WP# = V, H orV| L 

•CCD 

Vcc Deep Power- 
Down Current 


■ 

2 

5 


RP# = GND ±0.2V 

BYTE# = V C c ± 0.2V or GND ±0.2V 

•CCR1 

Vcc Read Current 



120 

175 

mA 

Vcc = Vcc Max, 

CMOS: CE 0 # t CE^ # = GND ±0.2V 
BYTE# = GND ± 0.2V or V C c ±0.2V 
Inputs = GND ± 0.2V or V C c ±0.2V 
4-Location Access 
Sequence: 3-1 -1-1 (clocks) 
f = 33 MHz, l 0 UT == 0 mA 

•CCR2 

Vcc Read Current 

CD 
T— lO 


105 

• ' 

150 

mA 

Vcc = Vcc Max, 

CMOS:CE 0 #,CE 1 # = GND +0.2V 
BYTE# = GND ±0.2VorV C c ±0.2V 
Inputs = GND ± 0.2V or V C c ±0.2V 
4-Location Access 
Sequence: 3-1 -1 -1 (clocks) * 
f = 20 MHz, Iout = 0 mA 

•ccw 

Vcc Write Current 

1,6 


25 

Q 

mA 

Word/ Byte in Progress 
V PP = 12.0V ±5% 

■ 


H 

mA 

Word/ Byte in Progress 
V PP = 5.0V ±10% 

ICCE 

Vcc Erase 
Suspend Current 

1,6 


18 

25 

mA 

Block Erase in Progress 
V PP = 12.0V ±5% 


20 

30 

mA 

Block Erase in Progress 
V PP = 5.0V ±10% 




■ 


10 

mA 

CE 0 #,CE 1 # = V| H 
Block Erase Suspended 


0KHF@K0M1AT0©K1 


3-27 





































28F016XS FLASH MEMORY 


intel 


5.5 DC Characteristics (Continued) 


Vcc = 5.0V ± 0.5V, T a = 0°c to + 70°C 


Symbol 

Parameter 

Notes 

Min 



Units 

Test Conditions 

•PPS 

Vpp Standby/ Read 

1 


±i 

± 10 

juA 

Vpp ^ Vcc 

■PPR 

Current 



30 

50 

julA 

Vpp > Vcc 

IpPD 

Vpp Deep Power- 
Down Current 

1 

■ 

0.2 

5 



Ippw 

Vpp Write Current 

1,6 

■ 

■ 



Vpp = 12.0V ±5% 
Word/Byte Write in Progress 




■ 


22 


Vpp = 5.0V ±10% 
Word/Byte Write in Progress 

IpPE 

Vpp Block Erase 
Current 

1,6 

■ 

H 

10 

mA 

Vpp = 12.0V ±5% 
Block Erase in Progress 




■ 

16 

20 

mA 

Vpp = 5.0V ±10% 
Block Erase in Progress 

IPPES 

Vpp Erase 
Suspend Current 


■ 

30 

50 

jllA 

Vpp = VppHI Or VppH2, 
Block Erase Suspended 

V|L 

Input Low Voltage 

6 

-0.5 


0.8 

V 


V|H 

Input High Voltage 

6 

2.0 

■ 

Vcc 
+ 0.5 

V 


Vql 

Output Low 
Voltage 

6 

■ 


0.45 

V 

Vcc = Vcc Min 
Iql == 5.8 mA 

VOHI 

Output High 
Voltage 

6 


■ 

■ 

V 

lOH = -2.5 mA 
Vcc = Vcc Min 

V OH2 



Vcc 

-0.4 

■ 

■ 


•oh = ~ 1 06 j^A 

Vcc = v cc Min 

VppLK 

Vpp Write/ Erase 
Lock Voltage 

3,6 

0.0 

■ 

1.5 

V 


VppHI 

Vpp during Write/Erase 
Operations 


4.5 

5.0 


V 


VppH2 

Vpp during Write/Erase 
Operations 


11.4 

12.0 

12.6 

V 


Vlko 

Vcc Write/ Erase 
Lock Voltage 


2.0 

■ 


V 



NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, Vpp = 12.0V or 5.0V, T = 25°C. These 
currents are valid for all product versions (package and speeds). 

2. Icces is specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum 
of Icces and Iccr- 

3. Block Erases, Word/Byte Writes and Lock Block operations are inhibited when Vpp ^ Vpp[_K and not guaranteed in the 
ranges between VppLK(max) and VppHi(min), between Vppm(max) and VppH 2 (min) and above VppH 2 (max). 

4. Automatic Power Saving (APS) reduces Iccr to 1 mA typical in Static operation. 

5. CMOS Inputs are either Vcc ±0.2V or GND ±0.2V. TTL Inputs are either V||_ or Vih- 

6. Sampled, but not 100% tested. Guaranteed by design. 
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5.6 Timing Nomenclature 

All 3.3V system timings are measured from where signals cross 1.5V. 

For 5.0V systems, use the standard JEDEC cross point definitions (standard testing) or from where signals 
cross 1 .5V (high speed testing). 

Each timing parameter consists of 5 characters. Some common examples are defined below: 


tELCH time(t) from CE# (E) going low (L) to CLK (C) going high (H) 
tAvcH time(t) from address (A) valid (V) to CLK (C) going high (H) 

twHDX time(t) from WE# (W) going high (H) to when the data (D) can become undefined (X) 



Pin Characters 


Pin States 

A 

Address Inputs 

H 

High 

C 

CLK (Clock) 

L 

Low 

D 


V 

Valid 

Q 

Data Outputs 

X 

Driven, but Not Necessarily Valid 

E 

CE# (Chip Enable) 

z 

High Impedance 

F 

BYTE# (Byte Enable) 

L 

Latched 

G 

OE# (Output Enable) 



W 

WE# (Write Enable) 



P 

RP# (Deep Power-Down Pin) 



R 

RY/BY# (Ready Busy) 



V 

ADV# (Address Valid) 



5V 

Vcc at 4.5V Minimum 



3V 

Vqc at 3.0V Minimum 
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5.7 AC Characteristics— Read Only Operations^) 

Vcc = 3.3V ± 0.3V, Ta = 0°C to +70“C 


Versions( 3 ) 


Symbol 

Parameter 

fCLK 

CLK Frequency 

tCLK 

CLK Period 

*CH 

CLK High Time 

tCL 

CLK Low Time 

tCLCH 

CLK Rise Time 

tCHCL 

CLK Fall Time 

tELCH 

CEx# Setup to CLK 

tVLCH 

ADV# Setup to CLK 

WCH 

Address Valid to CLK 

tCHAX 

Address Hold from CLK 

tCHVH 

ADV# Hold from CLK. 

tGLCH 

OE# Setup to CLK 

tCHQV 

CLK to Data Delay 

tPHCH 

RP# High to CLK 

tCHQX 

Output Hold from CLK 

tELQX 

CEx# to Output Low Z 

tEHQZ 

CEx# High to Output High Z 

tGLQX 

OE# to Output Low Z 

tGHQZ 

OE# High to Output High Z 

<OH 

Output Hold from CEx# or OE# 
Change, Whichever Occurs First 


28F016XS-20 


28F016XS-25 
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5.7 AC Characteristics— Read Only Operations^) (Continued) 


Vcc = 5.0V ±0.5V, T a = 0°C to + 70°C 


Versionsi 3 ) 

28F016XS-15W 

28F016XS-20(5) 

Units 

Symbol 

Parameter 

Notes 

Min 

Max 

Min 

Max 

f CLK 

CLK Frequency 

7 


66 


50 



CLK Period 


15 


20 


| 1 

1 

CLK High Time 




6 


ns 

tCL 

CLK Low Time 


3.5 


6 


ns 


CLK Rise Time 



4 


4 

ns 

E3Hl 

CLK Fall Time 



4 


4 

. ns 


CEx# Setup to CLK 

6 

mm 


30 


ns 


ADV# Setup to CLK 


■ai 


20 


ns 

UVCH 

Address Valid to CLK 


15 


20 



tCHAX 

Address Hold from CLK 


0 


0 


II 


ADV# Hold from CLK 


0 


0 


Hi 


OE# Setup to CLK 




20 


B9| 

f^SSSIH 

CLK to Data Delay 



20 


30 

ns 

tpHCH 

RP# High to CLK 




300 


ns 

tCHQX 

Output Hold from CLK 

2 

5 


5 


ns 

*ELQX 

CEx# to Output Low Z 

2,6 

0 


0 


ns 

Iehqz 

CEx# High to Output High Z 



30 


30 

ns 

*GLQX 

OE# to Output LowZ 

2 

0 


0 



l GHQZ 

OE# High to Output High Z 

2 


30 


30 


k)H 

Output Hold from CEx# or OE# 
Change, Whichever Occurs First 

6 

0 


0 


ns 


NOTES: 

1 . See AC Input/Output Reference Waveforms for timing measurements. 

2. Sampled, not 100% tested. Guaranteed by design. 

3. Device speeds are defined as: 

1 5 ns at Vcc = 5.0V equivalent to 
20 ns at V C c = 3.3V 
20 ns at Vcc — 5.0V equivalent to 
25 ns at V C c = 3.3V 

4. See the high speed AC Input/Output Reference Waveforms. 

5. See the standard AC Input/Output Reference Waveforms. 

6. CEx# is defined as the latter of CEo# or CEi # going low, or the first of CEo# or CE-| # going high. 

7. Page buffer reads are valid at any frequency up to the corresponding SFI Configuration setting of 2. Page buffer reads 
above this frequency may produce invalid results and should not be attempted. See Section 4.9 for SFI Configuration 
frequency settings. 
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Figure 1 1. Read Timing WaveformO) (SFI Configuration = 2, Alternate-Bank Accesses) 
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Figure 12. Read Timing Waveform^) (SFI Configuration = 3, Alternate-Bank Accesses) 
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5.8 AC Characteristics for WE# -Controlled Write Operations^) 


Vcc = 3.3V ±0.3V, T a = 0°c to + 70°C 


Versions 


Symbol | Parameter 


Write Cycle Time 


Vpp Setup to WE # 
Going High 


RP# Setup to CE X # 
Going Low 


CE X # Setup to WE# 
Going Low 


Address Setup to WE# 
Going High 


Data Setup to WE# 
Going High 


WE# Pulse Width 


Data Hold from WE# High 


Address Hold from 
WE# High 


CEx# hold from WE# High 


WE# Pulse Width High 


Read Recovery 
before Write 


WE# High to RY/BY# 
Going Low 


RP# Hold from Valid Status 
Register (CSR, GSR, BSR) 
data and RY/BY# High 


RP# High Recovery 
to WE# Going Low 


Write Recovery 
before Read 


Vpp Hold from Valid Status 
Register (CSR, GSR, BSR) 
Data and RY/BY# High 


Duration of Word/Byte 
Write Operation 


twHQV2 Duration of Block 
Erase Operation 




28F016XS-20 
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5.8 AC Characteristics for WE# — Controlled Write Operations^) (Continued) 


Vcc = 5.0V ±0.5V, T a = 0°c to +70°C 


Versions 

28F016XS-15 

28F016XS-20 

Unit 

Symbol 

Parameter 








tAVAV 

Write Cycle Time 








ns 

tvPWH 

Vpp Setup to WE# 
Going High 



■ 

■ 

100 

■ 

■ 

ns 

tpHEL 

RP# Setup to CEx# Going Low 

S 

ESI 



jhh 



ns 

tELWL 

CE X # Setup to WE# 
Going Low 


n 

■ 

■ 

H 

■ 

| 

ns 

*AVWH 

Address Setup to WE# 
Going High 

2,6 


■ 

■ 

50 

■ 

■ 

H 

ISM 

Data Setup to WE# Going High 

2,6 








ifflWW 

WE# Pulse Width 





HQ | 




HI 

Data Hold from WE# High 

2 

0 



mm 





Address Hold from WE# High 

2 




mm 



ns 

Ml 

CEx# hold from WE# High 


5 



5 



ns 


WE# Pulse Width High 


15 



15 





Read Recovery 
before Write 

3 

0 

■ 

■ 



■ 

ns 

tWHRL 

WE# High to RY/BY# 
Going Low 

3 

■ 

■ 


■ 



■n 

*RHPL 

RP# Hold from Valid Status 
Register (CSR, GSR, BSR) 
data and RY/BY# High 

■ 

0 

■ 

■ 

■ 


1 

ns 

tpHWL 

RP# High Recovery 
to WE# Going Low 

■a 


■ 


Jill 


■ 


tWHCH 

Write Recovery 
before Read 

■a 


■ 

■ 

I 




tQVVL 

Vpp Hold from Valid Status 
Register (CSR, GSR, BSR) 
Data and RY/BY# High 

■ 


■ 

■ 

■ 


■ 


tWHQVl 

Duration of Word/ Byte 
Write Operation 

3,4,5 

4.5 

6 

TBD 

■ 

6 

TBD 

JXS 

tWHQv2 

Duration of Block 
Erase Operation 

3,4 

0.6 

1.2 

20 

0.6 

1.2 

20 

sec 


NOTES: 

1. Read timings during Write and Erase are the same as for normal read. 

2. Refer to command definition tables for valid address and data values. 

3. Sampled, but not 100% tested. Guaranteed by design. 

4. Write/Erase durations are measured to valid Status Register (CSR) Data. 

5. Word/ Byte Write operations are typically performed with 1 Programming Pulse. 

6. Address and Data are latched on the rising edge of WE# for all Command Write operations. 

7. CEx# is defined as the latter of CEq# or CEi # going low, or the first of CEq# or CEi # going high. 
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DEEP WRITE DATA-WRITE OR JSS. AUTOMATED DATA-WRITE WRITE READ EXTENDED | READ EXTENDED 

POWER-DOWN ERASE SETUP COMMAND -- - L - _ ™ OR ERASE DELAY REGISTER COMMANO STATUS REGISTER DA 


ERASE CONFIRM COMMAND 


OR ERASE DELAY REGISTER COMMANO STATUS REGISTER DATA 



CEx • (E) 

NOTE 4 v IL. 


IW ' 

1 DVWH k-W I , 


IA 


V 


(£> — — ©- 


* 


Vpp(V) 



NOTES 


290532-14 


NOTES: 

1. This address string depicts Data Write/Erase cycles with corresponding verification via ESRD. 

2. This address string depicts Data Write/Erase cycles with corresponding verification via CSRD. 

3. This cycle is invalid when using CSRD for verification during Data Write/Erase operations. 

4. CEx# is defined as the latter of CEo# or CEi # going low or the first of CEq# or CEi # going high. 

5. RP# low transition is only to show tpHPU not valid for above Read and Write cycles. 

6. Data Write/Erase cycles are asynchronous; CLK and ADV# are ignored. 

7. Vpp voltage during Data Write/Erase operations valid at both 12.0V and 5.0V. 

8. Vpp voltage equal to or below Vpplk provides complete flash memory array protection. 


Figure 14. AC Waveforms for WE#Command Write Operations, Illustrating a 
Two Command Write Sequence Followed by a Extended Status Register Read 
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5.9 AC Characteristics for CEx#— Controlled Write Operations^) 


V C c = 3.3V ±0.3V, T a = 0°CtO +70°C 


Versions 

28F016XS-20 

28F016XS-25 

Unit 

Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Min 

Typ 

Max 

*AVAV 

Write Cycle Time 


75 



75 



ns 

tVPEH 

Vpp Setup to CEx# 
Going High 

m 



■ 




ns 

tpHWL 

RP# Setup to WE# 
Going Low 

3 

480 


■ 


■ 


ns 

tWLEL 

WE# Setup to CEx# 
Going Low 

3,7 

0 


■ 


■ 


ns 

*AVEH 

Address Setup to CEx# 
Going High 

2,6,7 

60 




■ 

■ 

ns 

tDVEH 

Data Setup to CEx# 
Going High 

2,6,7 

60 


■ 


■ 


B 

tELEH 

CEx# Pulse Width 

7 

60 







tEHDX 

Data Hold from CEx# High 

2,7 

10 



MM 




tEHAX 

Address Hold from 
CEx# High 

H 


■ 

■ 


■ 

■ 

II 

EfflHB 

WE hold from CE X # High 

mm 

5 



5 



ns 

tEHEL 

CE X # Pulse Width High 

7 

MM 



15 



ns 

tGHEL 

Read Recovery 
before Write 


H 



0 



ns 

*EHRL 

CE X # High to RY/BY# 
Going Low 


■ 


100 



100 

ns 


RP# Hold from Valid Status 
Register (CSR, GSR, BSR) 
Data and RY/BY# High 





0 



ns 

tpHEL 

RP# High Recovery to 
CEx# Going Low 





480 



ns 

<EHCH 

Write Recovery 
before Read 





20 



ns 

tQVVL 

Vpp Hold from Valid Status 
Register (CSR, GSR, BSR) 
Data and RY/BY# High 

3 

0 



0 



JUS 

tEHQVI 

Duration of Word /Byte 
Write Operation 

3,4,5 

5 

9 

TBD 

5 

9 

TBD 

JLLS 

*EHQV2 

Duration of Block 
. Erase Operation 

3,4 

0.6 

1.6 

20 

0.6 

1.6 

20 

sec 
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5.9 AC Characteristics for CEx# Controlled Write Operations^) (Continued) 
Vcc = 5.0V + 0.5V, T a = 0°c to + 70°C 


Versions 


Parameter 


Write Cycle Time 


RP# Setup to WE# Going Low 

Jj 

Vpp Setup to CE X # 
Going Low Going High 

tWLEL 

WE# Setup to CE X # 
Going Low 

l AVEH 

Address Setup to CEx# 
Going High 

*DVEH 

Data Setup to CEx# Going High 

*ELEH 

CEx# Pulse Width 

tEHDX 

Data Hold from 
Going HighCEx# High 

tEHAX 

Address Hold from CEx# High 

<EHWH 

WE hold from CEx# High 

tEHEL 

CEx# Pulse Width High 

<GHEL 

Read Recovery 
before Write 

tEHRL 

CE X # High to RY/BY# 
Going Low 

tRHPL 

RP# Hold from Valid Status 
Register (CSR, GSR, BSR) 
Data and RY/BY# High 

tpHEL 

RP# High Recovery to 
CEx# Going Low 

tEHCH 

Write Recovery 
before Read 

tQVVL 

Vpp Hold from Valid Status 
Register (CSR, GSR, BSR) 
Data and RY/BY# High 

tEHQvl 

Duration of Word/Byte 
Write Operation 

tEHQv2 

Duration of Block 
Erase Operation 


28F016XS-15 


28F016XS-20 



HHH 



NOTES: 

1 . Read timings during Write and Erase are the same as for normal read. 

2. Refer to command definition tables for valid address and data values. 

3. Sampled, but not 100% tested. Guaranteed by design. 

4. Write/Erase durations are measured to valid Status Register (CSR) Data. 

5. Word/Byte Write operations are typically performed with 1 Programming Pulse. 

6. Address and Data are latched on the rising edge of WE# for all Command Write operations. 

7. CEx# is defined as the latter of CEq# or CEi # going low, or the first of CEq# or CEi # going high. 
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CLK 
NOTE 6 







* VPEH 


NOTE 7 


NOTE 8 
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NOTES: 

1. This address string depicts Data Write/Erase cycles with corresponding verification via ESRD. 

2. This address string depicts Data Write/Erase cycles with corresponding verification via CSRD. 

3. This cycle is invalid when using CSRD for verification during Data Write/ Erase operations. 

4. CEx# is defined as the latter of CEq# or CEi # going low or the first of CEo# or CE-| # going high. 

5. RP# low transition is only to show tRHPU not valid for above Read and Write cycles. 

6. Data Write/Erase cycles are asynchronous; CLK and ADV# are ignored. 

7. Vpp voltage during Data Write/Erase operations valid at both 1 2.0V and 5.0V. 

8. Vpp voltage equal to or below Vppy< provides complete flash memory array protection. 


Figure 15. AC Waveforms for CEx#— Controlled Write Operations, Illustrating a 
Two Command Write Sequence Followed by a Extended Status Register Read 
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5.10 AC Characteristics for WE#— Controlled Page Buffer Write Operations^) 


Vcc = 3.3V ±0.3V, T a = 0°C to +70°C 


Versions 

28F016XS-20 

28F016XS-25 

Unit 

Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Min 

Typ 

Max 

*AVWL 

Address Setup to WE# 
Going Low 

2 

0 



0 



ns 


V C c = 5.0V ±0.5V, T a = 0°C to + 70°C 


Versions 

28F016XS-15 

28F016XS-20 

Unit 

Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Min 



tAVWL 

Address Setup to WE# 
Going Low 

2 

0 



0 



ns 


NOTES: 

1. All other specifications for WE#Controlled Page Buffer Write Operations see Section 5.8. 

2. Address must be valid during the entire WE# low pulse. 



Figure 16. WE#— Controlled Page Buffer Write Timing Waveforms 
(Loading Data to the Page Buffer) 
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5.1 1 AC Characteristics for CEx# — Controlled Page Buffer Write Operations 


V C c = 3.3V ± 0.3V, T a = 0°C to +70°C 


Versions 

28F016XS-20 

28F016XS-25 

Unit 

Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Min 

Typ 

Max 

tAVEL 

Address Setup to CEx# 
Going Low 

2,3 

0 



0 



ns 


V C c = 5.0V ±0.5V, T a = 0°C to +70°C 


Versions 

28F016XS-15 



Symbol 

Parameter 

Notes 

Min 






tAVEL 

Address Setup to CEx# 
Going Low 

2,3 

0 

■ 





ns 


NOTES: 

1. All other specifications for CEx# Controlled Page Buffer Write Operations see Section 5.9. 

2. Address must be valid during the entire CE# low pulse. 

3. CEx# is defined as the latter of CEq# or CEi # going low, or the first of CEq# or CE-| # going high. 



Figure 17. CE X # — Controlled Page Buffer Write Timing Waveforms 
(Loading Data to the Page Buffer) 
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5.12 Power-Up and Reset Timings 



Symbol 

Parameter 

Notes 

Min 

Max 

Unit 

tpL5V 

RP# Low to Vqc at 4.5V (Minimum) 

2 

0 


jmS 

tpL3V 

RP# Low to Vocat 3.0V (Minimum) 

2 

0 


juS 

t5VPH 

Vcc at 4.5V Minimum) to RP# High 

1 

2 


jmS 

t3VPH 

Vcc at 3.0V (Minimum) to RP# High 

1 

2 


JLtS 


NOTES: 

1. The tsvPH and/or t 3 VPH times must be strictly followed to guarantee all other read and write specifications for the 
28F016XS, 

2. The power supply may start to switch concurrently with RP# going low. 
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5.13 Erase and Word/Byte Write Performance^. 5 ) 


Vcc = 3.3V ± 0.3V, V PP = 5.0V ±0.5V, T A = 0°C to +70°C 


Symbol 


Parameter 


Page Buffer Byte Write Time 
Page Buffer Word Write Time 


twHRHlA Byte Write Time 


twHRHlB Word Write Time 


Block Write Time 
Block Write Time 


Block Erase Time 


Full Chip Erase Time 

Time From Erase 
Suspend Command to 
WSM Ready 



TypO) Max Units Test Conditions 



Vcc = 3.3V + 0.3V, V PP = 12.0V +0.6V, T A = 0°C to +70°C 


Symbol 



tWHRHI 


*WHRH2 


tWHRH3 



Parameter 


Page Buffer Byte Write Time 


Page Buffer Word Write Time 


Word/Byte Write Time 


Block Write Time 


Block Write Time 


Block Erase Time 


Full Chip Erase Time 


Time From Erase 
Suspend Command to 
WSM Ready 


Test Conditions 
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5.13 Erase and Word/Byte Write Performance^ 5 ) (Continued) 
Vcc = 5.0V ±0.5V, Vpp = 5.0V ±0.5V, T A = 0°C to + 70°C 


Symbol 

Parameter 

Notes 

Min 

TypCO 

Max 

Units 

Test Conditions 


Page Buffer Byte 
Write Time 

2 

TBD 

6.0 

TBD 

jutS 



Page Buffer Word 

2 

TBD 

12.1 

TBD 

JUtS 

Write Time 

tWHRHIA 

Byte Write Time 

2 

TBD 

11 

TBD 

juts 



Word Write Time 

2 

TBD 

16 

TBD 

juts 



Block Write Time 

2 

TBD 

1.6 

TBD 

sec 

Byte Write Mode 

tWHRH3 

Block Write Time 

2 

TBD 

1.2 

TBD 

sec 

Word Write Mode 


Block Erase Time 

2 


2.0 

TBD 

sec 



Full Chip Erase Time 

2 

itiaa 

32.0 

TBD 

sec 



Time From Erase 
Suspend Command to 
WSM Ready 

4 

TBD 

10 

TBD 

juts 



V C c = 5.0V ± 0.5V, Vpp = 12.0V ±0.6V, T A = 0°C to + 70°C 


Symbol 

Parameter 

Notes 

Min 

TypO) 

Max 

Units 

Test Conditions 


Page Buffer Byte Write Time 

2 

TBD 

2.1 

TBD 

juts 



Page Buffer Word Write Time 

2 

TBD 

4.1 

TBD 

jutS 


tWHRHI 

Word/Byte Write Time 

2 

■a 

6 

TBD 

JUtS 


11 

Block Write Time 

2 

TBD 

0.8 

■a 

sec 

Byte Write Mode 


Block Write Time 

2 

TBD 

0.4 

2.0 

sec 

Word Write Mode 


Block Erase Time 

2 

0.6 

1.2 

20 

sec 



Full Chip Erase Time 

2 

• TBD 

19.2 

TBD 

sec 



Time From Erase 
Suspend Command to 
WSM Ready 

4 

TBD 

10 

TBD 

juts 



NOTES: 

1. 25°C, and nominal voltages. 

2. Excludes system-level overhead. 

3. These performance numbers are valid for all speed versions. 

4. Specification applies to interrupt latency for Single Block Erase. Suspend latency for Erase All Unlocked Block operation 
typically extends erase suspend latency time to 140 jus. 

5. Sampled, but not 100% tested. Guaranteed by design. 
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6.0 MECHANICAL SPECIFICATIONS 


28F016XS FLASH MEMORY 



290532-19 

Figure 19. Mechanical Specifications of the 28F016XS 56-Lead TSOP Type I Package 


Family: Thin Small Out-Line Package 
Millimeters 

um I Nominal I U 


Maximum 





0.50 


20.00 

20.20 

0.600 

0.700 


N 


0 

0° 
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DEVICE NOMENCLATURE AND ORDERING INFORMATION 


Product line designator for all Intel Flash products 

• — ■ — i 


e; 

00 

= 01 

65 

<S 

■15 


V 

Package 

E = TSOP 


1 i 1 

Period of Maximum CLK 
Input Frequency (ns) 


“ Device Type 
S = Synchronous Pipelined 
Interface 
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Option 

Order Code 

Valid Combinations 

V C c = 3.3V ± 0.3V, 
50 pF load, 
1.5V I/O Leveled) 

Vcc = 5.0V ± 10%, 
100 pF load 
TTL I/O Levels(l) 

Vcc = 5.0V ± 10%, 
30 pF load 
1.5V I/O Levels(i) 

1 

E28F016XS15 

28F016XS-20 


28F016XS-15 

2 

E28F016XS20 

28F016XS-25 

28F016XS-20 
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ADDITIONAL INFORMATION 


Order Number 

Document/Tool 

297372 

16-Mbit Flash Product Family User’s Manual, 
28F01 6SA/28F01 6SV/28F01 6XS/28F01 6XD 

292147 

AP-398, “Designing with the 28F016XS” 

297500 

“Interfacing the 28F016XS to the i960® Microprocessor Family” 

297504 

“Interfacing the 28F016XS to the lntel486TM Microprocessor Family” 

292146 

AP-600, “Performance Benefits and Power/Energy Savings of 28F016XS 
Based System Designs” 

297508 

FlashBuilder Utility 

Contact Intel /Distribution 
Sales Office 

28F016XS Benchmark Utility FlashBuilder 

Contact Intel/Distribution 
Sales Office 

28F016XS iBIS/VHDL Models 

Contact Intel /Distribution 
Sales Office 

28F016XS Orcad/Viewlogic Schematic Symbols 

292126 

AP 377, “16-Mbit Flash Product Family Software Drivers 
28F01 6SA/28F01 6SV/28F01 6XS/28F01 6XD” 

294016 

ER 33, “ETOXtm Flash Memory Technologylnsight to Intel’s 
Fourth Generation Process Innovation” 


DATASHEET REVISION HISTORY 


Number 

Description 

001 

Original Version 
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28F016XD 
16-MBIT (1 MBIT X 16) 
DRAM-INTERFACE FLASH MEMORY 


■ 85 ns Access Time (tRAc) 

■ Multiplexed Address Bus 

■ RAS# and CAS# Control Inputs 

■ No-Glue Interface to Many Memory 
Controllers 

■ Smart Voltage Technology 

— User-Selectable 3.3V or 5V Vcc 
-User-Selectable 5V or 12V V PP 

■ 30.8 MB/sec Burst Write Transfer Rate 

■ 0.48 MB/sec Sustainable Write Transfer 
Rate 

■ x16 Architecture 

■ 56-Lead TSOP Type I Package 


■ Backwards-Compatible with 
28F016SA/SV, 28F008SA Command Set 

■ Revolutionary Architecture 

— Multiple Command Execution 
— Write during Erase 
— Page Buffer Write 

■ 2 ju,A Typical Deep Power-Down 
Current 

■ 1 mA Typical Ice Active Current in 
Static Mode 

■ 32 Separately-Erasable/Lockable 
64-Kbyte Blocks 

■ 1 Million Erase Cycles per Block 

■ State-of-the-Art 0.6 jmm ETOXtm iv 
F lash Technology 


Intel’s 28F016XD 16-MBit Flash memory is a revolutionary architecture which is the ideal choice for designing 
truly revolutionary high-performance products. Combining its DRAM-like read performance and interface with 
the intrinsic non-volatility of flash memory, the 28F016XD eliminates the traditional redundant memory para- 
digm of shadowing code from a slow nonvolatile storage source to a faster execution memory, such as DRAM, 
for improved system performance. The innovative capabilities of the 28F016XD enable the design of direct-ex- 
ecute code and mass storage data/file flash memory systems. 

The 28F016XD is the highest performance high density nonvolatile read/write flash memory solution available 
today. Its DRAM-like interface with a multiplexed address bus, flexible Vcc and Vpp voltages, power saving 
features, extended cycling, fast write and read performance, symmetrically blocked architecture, and selective 
block locking provide a highly flexible memory component suitable for resident flash component arrays on the 
system board or SIMMs. The DRAM-like interface with RAS# and CAS# control inputs allows for easy 
migration to flash memory in existing DRAM-based systems. The 28F016XD’s dual read voltage allows the 
same component to operate at either 3.3V or 5.0V Vcc- Programming voltage at 5V Vpp minimizes external 
circuitry in minimal-chip, space critical designs, while the 12V Vpp option maximizes write/erase performance. 
The x16 architecture allows optimization of the memory-to-processor interface. Its high read performance 
combined with flexible block locking enable both storage and execution of operating systems/application 
software and fast access to large data tables. The 28F016XD is manufactured on Intel’s 0.6 jmm ETOXtm iv 
process technology. 



3-50 


November 1994 
Order Number: 290533-001 


28F016XD 

16-MBIT (1 MBIT X 16) 
DRAM-INTERFACE FLASH MEMORY 

CONTENTS page 


1.0 INTRODUCTION 3-52 

1.1 Product Overview 3-52 

2.0 DEVICE PINOUT 3-55 

2.1 Lead Descriptions 3-56 

3.0 MEMORY MAPS 3-58 

3.1 Extended Status Registers Memory 

Map 3-59 

4.0 BUS OPERATIONS, COMMANDS 

AND STATUS REGISTER 
DEFINITIONS 3-60 

4.1 Bus Operations 3-60 

4.2 28F008SA-Compatible Mode 

Command Bus Definitions 3-61 

4.3 28F016XD-Performance 

Enhancement Command Bus 
Definitions 3-62 

4.4 Compatible Status Register 3-64 

4.5 Global Status Register 3-65 

4.6 Block Status Register 3-66 

4.7 Device Configuration Code 3-67 

5.0 ELECTRICAL SPECIFICATIONS .... 3-68 

5.1 Absolute Maximum Ratings 3-68 

5.2 Capacitance 3-69 

5.3 Transient Input/Output Reference 

Waveforms 3-70 

5.4 DC Characteristics 

(V C c = 3.3V ± 0.3V) 3-71 

5.5 DC Characteristics 

(V C c = 5.0V ± 0.5V) 3-74 


CONTENTS page 

5.6 AC Characteristics 

(V C c = 3.3V ± 0.3V) 3-77 

Read, Write, Read-Modify-Write and 
Refresh Cycles (Common 
Parameters) 3-77 

Read Cycle 3-77 

Write Cycle 3-78 

Read-Modify-Write Cycle 3-79 

Fast Page Mode Cycle 3-79 

Fast Page Mode Read-Modify-Write 
Cycle 3-79 

Refresh Cycle 3-80 

Misc. Specifications 3-81 

5.7 AC Characteristics 

(V C C = 5.0V ± 0.5V) 3-82 

Read, Write, Read-Modify-Write and 
Refresh Cycles (Common 
Parameters) 3-82 

Read Cycle 3-83 

Write Cycle 3-84 

Read-Modify-Write Cycle 3-84 

Fast Page Mode Cycle 3-84 

Fast Page Mode Read-Modify-Write 
Cycle 3-85 

Refresh Cycle 3-85 

Refresh 3-85 

Misc. Specifications 3-86 

5.8 AC Waveforms 3-87 

5.9 Power-Up and Reset Timings 3-99 

5.10 Erase and Word Write 

Performance 3-100 

6.0 MECHANICAL SPECIFICATIONS . . 3-101 

DEVICE NOMENCLATURE AND 
ORDERING INFORMATION 3-102 

ADDITIONAL INFORMATION 3-103 

DATASHEET REVISION HISTORY .... 3-103 


I 


3-51 


28F016XD 


1.0 INTRODUCTION 

The documentation of the Intel 28F016XD flash 
memory device includes this datasheet, a detailed 
user’s manual, and a number of application notes 
and design tools, all of which are referenced at the 
end of this datasheet. 

The datasheet is intended to give an overview of the 
chip feature-set and of the operating AC/DC specifi- 
cations. The 16-Mbit Flash Product Family User’s 
Manual provides complete descriptions of the user 
modes, system interface examples and detailed de- 
scriptions of all principles of operation. It also con- 
tains the full list of software algorithm flowcharts, 
and a brief section on compatibility with the Intel 
28F008SA. 


1.1 Product Overview 

The 28F016XD is a high-performance, 16-Mbit 
(16,777,216-bit) block erasable, nonvolatile random 
access memory, organized as 1 Mword x 16. The 
28F016XD includes thirty-two 32-KW (32,768 word) 
blocks. A chip memory map is shown in Figure 3. 

The implementation of a new architecture, with 
many enhanced features, will improve the device op- 
erating characteristics and result in greater product 
reliability and ease-of-use as compared to other 
flash memories. Significant features of the 
28F016XD include: 

• No-Glue Interface to Memory Controllers 

• Improved Word Write Performance 

• SmartVoltage Technology 

— Selectable 3.3V or 5.0V V C c 
— Selectable 5.0V or 12.0V V PP 

• Internal 3.0V/5.0V Vcc Detection Circuitry 

• Block Write/Erase Protection 

The 28F016XD’s multiplexed address bus with 
RAS# and CAS# inputs allows for a “No Glue’’ in- 
terface to many existing in-system memory control- 
lers. As such, 28F016XD-based SIMMs (72-pin 
JEDEC Standard) offer attractive advantages over 
their DRAM counterparts in many applications. For 
more information on 28F016XD-based SIMM de- 
signs, see the application note referenced at the end 
of this datasheet. 


inlel. 

The 28F016XD incorporates SmartVoltage technol- 
ogy, providing Vcc operation at both 3.3V and 5.0V 
and program and erase capability at V PP = 12.0V or 
5.0V. Operating at Vcc = 3.3V, the 28F016XD con- 
sumes less than 60% of the power consumption at 
5.0V Vcc. while 5.0V Vcc provides highest read per- 
formance capability. V PP = 5.0V operation elimi- 
nates the need for a separate 1 2.0 V converter, while 
V PP = 12.0V maximizes write/erase performance. 
In addition to the flexible program and erase volt- 
ages, the dedicated V PP gives complete code pro- 
tection with V PP ^ V PP |_k* 

Internal 3.3V or 5.0V Vcc detection automatically 
configures the device internally for optimized 3.3V or 
5.0V Read/Write operation. 

A Command User Interface (CUI) serves as the sys- 
tem interface between the microprocessor or micro- 
controller and the internal memory operation. 

Internal Algorithm Automation allows Word Writes 
and Block Erase operations to be executed using a 
Two-Write command sequence to the CUI in the 
same way as the 28F008SA 8-Mbit FlashFileTM 
memory. 

A super-set of commands has been added to the 
basic 28F008SA command-set to achieve higher 
write performance and provide additional capabili- 
ties. These new commands and features include: 

• Page Buffer Writes to Flash 

• Command Queuing Capability 

• Automatic Data Writes during Erase 

• Software Locking of Memory Blocks 

• Erase All Unlocked Blocks 

Writing of memory data is performed in word incre- 
ments typically within 6 ja sec (12.0V V PP ) - a 33% 
improvement over the 28F008SA. A Block Erase op- 
eration erases one of the 32 blocks in typically 0.6 
sec (12.0V V PP ), independent of the other blocks, 
which is about a 65% improvement over the 
28F008SA. 

Each block can be written and erased a minimum of 
100,000 cycles. Systems can achieve one million 
Block Erase Cycles by providing wear-leveling algo- 
rithms and graceful block retirement. These tech- 
niques have already been employed in many flash 
file systems and hard disk drive designs. 
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The 28F016XD incorporates two Page Buffers of 
256 bytes (128 words) each to allow page data 
writes. This feature can improve a system write per- 
formance by up to 4.8 times over previous flash 
memory devices, which have no Page Buffers. 

All operations are started by a sequence of Write 
commands to the device. Three types of Status 
Registers (described in detail later in this datasheet) 
and a RY/BY# output pin provide information on 
the progress of the requested operation. 

While the 28F008SA requires an operation to com- 
plete before the next operation can be requested, 
the 28F016XD allows queuing of the next operation 
while the memory executes the current operation. 
This eliminates system overhead when writing sev- 
eral bytes in a row to the array or erasing several 
blocks at the same time. The 28F016XD can also 
perform Write operations to one block of memory 
while performing Erase of another block. 

The 28F016XD provides selectable block locking to 
protect code or data such as direct-executable oper- 
ating systems or application code. Each block has 
an associated nonvolatile lock-bit which determines 
the lock status of the block. In addition, the 
28F016XD has a master Write Protect pin (WP#) 
which prevents any modifications to memory blocks 
whose lock-bits are set. 

The 28F016XD contains three types of Status Reg- 
isters to accomplish various functions: 

• A Compatible Status Register (CSR) which is 
100% compatible with the 28F008SA FlashFileTM 
memory Status Register. The CSR, when used 
alone, provides a straightforward upgrade capa- 
bility to the 28F016XD from a 28F008SA-based 
design. 

• A Global Status Register (GSR) which informs 
the system of command Queue status, Page 
Buffer status, and overall Write State Machine 
(WSM) status. 

• 32 Block Status Registers (BSRs) which provide 
block-specific status information such as the 
block lock-bit status. 

The GSR and BSR memory maps are shown in Fig- 
ure 4. 


The 28F016XD incorporates an open drain RY/BY# 
output pin. This feature allows the user to OR-tie 
many RY/BY# pins together in a multiple memory 
configuration such as a Resident Flash Array. The 
RY/BY# pin employs five distinct configurations, 
which are enabled via special CUI commands and 
are described in detail in the 16-Mbit Flash Product 
Family User’s Manual. 

The 28F016XD’s enhanced Upload Device Informa- 
tion command provides access to additional infor- 
mation that the 28F016SA previously did not offer. 
This command uploads the Device Revision Num- 
ber, Device Proliferation Code and Device Configu- 
ration Code. The Device Proliferation Code for the 
28F016XD is 04H, and the Device Configuration 
Code identifies the current RY/BY# configuration. 
Section 4.3 documents the exact page buffer ad- 
dress locations for all uploaded information. A sub- 
sequent Page Buffer Swap and Page Buffer Read 
command sequence is necessary to read the correct 
device information. 

The 28F01 6XD is specified for a maximum fast page 
mode cycle time of 65 ns (tpc.R) at 5.0V operation 
(4.75V to 5.25V) over the commercial temperature 
range (0°C to +70°C). A corresponding maximum 
fast page mode cycle time of 75 ns at 3.3V (3.0V to 
3.6V and 0°C to +70°C) is achieved for reduced 
power consumption applications. 

The 28F016XD incorporates an Automatic Power 
Saving (APS) feature, which substantially reduces 
the active current when the device is in static mode 
of operation (addresses not switching). In APS 
mode, the typical Ice current is 1 mA at 5.0V (3.0 mA 
at 3.3V). 

A deep power-down mode of operation is invoked 
when the RP# (called PWD# on the 28F008SA) pin 
transitions low. This mode brings the device power 
consumption to less than 2.0 jliA, typically, and pro- 
vides additional write protection by acting as a de- 
vice reset pin during power transitions. A reset time 
of 300 ns (5.0V Vqc operation) is required from RP# 
switching high until dropping RAS#. In the Deep 
Power-Down state, the WSM is reset (any current 
operation will abort) and the CSR, GSR and BSR 
registers are cleared. 

A CMOS standby mode of operation is enabled 
when RAS# and CAS# transition high and RP# 
stays high with all input control pins at CMOS levels. 
In this mode, the device typically draws an Ice 
standby current of 70 juA at 5V Vcc- 
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Figure 1. 28F016XD Block Diagram 

Architectural Evolution Includes Multiplexed Address Bus, SmartVoltage 
Technology, Page Buffers, Queue Registers and Extended Registers 
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The 28F016XD is available in a 56-Lead, 1.2mm 
thick, 14mm x 20mm TSOP Type I package. This 
form factor and pinout allow for very high board lay- 
out densities. 


2.0 DEVICE PINOUT 

The 28F016XD 56-Lead TSOP Type I pinout config- 
uration is shown in Figure 2. 
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2.1 Lead Descriptions 


Symbol 

Type 

Name and Function 

A 0 -A 9 

INPUT 

MULTIPLEXED ROW/COLUMN ADDRESSES: Selects a word within one 
of thirty-two 32-Kword blocks. Row (upper) addresses are latched on the 
falling edge of RAS#, while column (lower) addresses are latched on the 
falling edge of CAS#. 

dq 0 -dq 15 

INPUT/OUTPUT 

DATA BUS: Inputs data and commands during CUI write cycles. Outputs 
array, buffer, identifier or status data (DQ 0 - 7 ) in the appropriate read mode. 
Floated when the chip is de-selected or the outputs are disabled. 

RAS# 

INPUT 

ROW ADDRESS STROBE: Latches row address information on inputs 
A 9.0 when RAS# transitions low. A subsequent CAS# low transition 
initiates 28F01 6XD read or write operations. 

CAS# 

INPUT 

COLUMN ADDRESS STROBE: Latches column address information on 
inputs A 9.0 when CAS# transitions low. When preceded by a RAS# low 
transition, CAS# low initiates 28F016XD Read or Write operations, along 
with OE# and WE#. Subsequent CAS# low transitions, with RAS# held 
low, enable fast page mode reads/writes. 

RP# 

INPUT 

RESET/POWER-DOWN: RP# low places the device in a Deep Power- 
Down state. All circuits that consume static power, even those circuits 
enabled in standby mode, are turned off. When returning from Deep 
Power-Down, a recovery time of 300 ns at 5.0V Vcc is required to allow 
these circuits to power-up. 

When RP# goes low, any current or pending WSM operation(s) are 
terminated, and the device is reset. All Status Registers return to ready 
(with all status flags cleared). 

Exit from Deep Power-Down places the device in read array mode. 

OE# 

INPUT 

OUTPUT ENABLE: Gates device data through the output buffers when 
low in combination with RAS# and CAS# low. The outputs float to tri- 
state off when OE# is high. OE# can be tied to GND if not controlled by 
the system memory controller. RAS# and CAS# high override OE# low. 
WE# low also overrides OE# low. 

WE# 

INPUT 

WRITE ENABLE: Controls access to the CUI, Page Buffers, Data Queue 
Registers and Address Queue Latches. WE# is active low and initiates 
writes in combination with RAS# and CAS# low. WE# low overrides 
OE# low. RAS# and CAS# high override WE# low. 

RY/BY# 

OPEN DRAIN 
OUTPUT 

READY/BUSY: Indicates status of the internal WSM. When low, it 
indicates that the WSM is busy performing an operation. RY/BY# floating 
indicates that the WSM is ready for new operations (or WSM has 
completed all pending operations), or Erase is Suspended, or the device is 
in deep power-down mode. This output is always active (i.e., not floated to 
tri-state off when OE#, RAS# or CAS# are high), except if a RY/BY# Pin 
Disable command is issued. 

WP# 

INPUT 

WRITE PROTECT: Erase blocks can be locked by writing a nonvolatile 
lock-bit for each block. When WP# is low, those locked blocks as 
reflected by the Block-Lock Status bits (BSR. 6 ), are protected from 
inadvertent Data Writes or Erases. When WP# is high, all blocks can be 
written or erased regardless of the state of the lock-bits. The WP# input 
buffer is disabled when RP# transitions low (deep power-down mode). 
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2.1 Lead Descriptions (Continued) 



Type 

Name and Function 

Vpp 

SUPPLY 

WRITE/ERASE POWER SUPPLY (12.0V ± 0.6V, 5.0V ± 0.5V): For erasing memory 
array blocks or writing words/pages into the flash array. Vpp = 5.0V ± 0.5V 
eliminates the need for a 12V converter, while connection to 12.0V ± 0.6V maximizes 
Write/ Erase Performance. 

NOTE: 

Write and Erase attempts are inhibited with Vpp at or below 1 .5V. Write and Erase 
attempts with Vpp between 1 .5V and 4.5V, between 5.5V and 1 1 .4V, and above 12.6V 
produce spurious results and should not be attempted. 


SUPPLY 

DEVICE POWER SUPPLY (3.3V ± 0.3V, 5.0V ± 0.5V): Internal detection configures 
the device for 3.3V or 5.0V operation. To switch 3.3V to 5.0V (or vice versa), first ramp 
Vqc down to GND, and then power to the new Vcc voltage. 

Do not leave any power pins floating. 

GND 

SUPPLY 

GROUND FOR ALL INTERNAL CIRCUITRY: 

Do not leave any ground pins floating. 

NC 


NO CONNECT: No internal connection to die, lead may be driven or left floating. 
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4.0 BUS OPERATIONS, COMMANDS AND STATUS REGISTER DEFINITIONS 


4.1 Bus Operations 


Mode 

Notes 

RP# 

RAS# 

CAS# 

OE# 

WE# 

DQo-15 

RY/BY# 

Row Address Latch 

1,2,9 


i 

V|H 

X 

X 

X 

X 

Column Address Latch 

1,2,9 



i 

X 

X 

X 

X 

Read 

1,2,7 

V|H 

V,L 

V|L 

VlL 

V|H 

i^l 

X 

Output Disable 

1,6,7 

V IH 

V|L 

V|L 




X 

Standby 

1,6,7 

V|H 

VlH 


mm 

X 


X 

Deep Power-Down 

1,3 

V|L 

X 

X 

X 

X 

High Z 

Voh 

Manufacturer ID 

4,8 

V|H 

V|L 

V|L 

VlL 

V|H 

0089H 

Voh 

Device ID 

4,8 

V|H 

V|L 

V|L 

VlL 

VlH 

66A8H 

v oh 

Write 

1,5,6 

V|H 

V|L 

VlL 

X 

V|L 

Din 

X 


NOTES: 

1. X can be Vm or Vn_ for address or control pins except for RV/BY#, which is either Vql or Vqh. or High Z or Dout for 
data pins depending on whether or not OE# is active. 

2. RY/BY# output is open drain. When the WSM is ready, Erase is suspended or the device is in deep power-down mode, 
RY/BY# will be at Voh if if is tied to Vcc through a resistor. RY/BY# at Vqh is independent of OE# while a WSM 
operation is in progress. 

3. RP# at GND ± 0.2V ensures the lowest deep power-down current. 

4. Ao (latched by CAS#) at Vjl provides the Manufacturer ID code. Ao (latched by CAS#) at V|h provides the Device ID 
code. All other addresses (row and column) should be set to zero. 

5. Commands for Erase, Data Write, or Lock-Block operations can only be completed successfully when Vpp = Vppm or 
Vpp = Vp P H2- 

6. While the WSM is running, RY/BY# in level-mode (default) stays at Vol until all operations are complete. RY/BY# goes 
to Vqh when the WSM is not busy or in erase suspend mode. 

7. RY/BY# may be at Vql while the WSM is busy performing various operations. For example, a Status Register read 
during a Write operation. 

8. The 28F016XD shares an identical device identifier with other Intel Flash memories. Reading this identifier in conjunction 
with the unique Device Proliferation Code (read from the Page Buffer after writing the Upload Device Configuration com- 
mand) allows unique identification of the 28F016XD by system software. 

9. Row (upper) addresses are latched via inputs Ao-g on the falling edge of RAS#. Column (lower) addresses are latched 
via inputs Ao_g on the falling edge of CAS#. Row addresses must be latched before column addresses are latched. 
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4.2 28F008SA — Compatible Mode Command Bus Definitions 


Command 


First Bus Cycle 

Second Bus Cycle 

Oper 



mm 


Data 

Read Array 


Write 


QQI 

mm 



Intelligent Identifier 

1 

Write 

X 



mm 

ID 


2 

Write 

X 


Read 

X 


Clear Status Register 

3 

Write 

X 

50H 




Word/Byte Write 


Write 

X 

40H 

Write 



Alternate Word/Byte Write 


Write 

X 

10H 

Write 

WA 

WD 

Block Erase/Confirm 


Write 

X 

20 H 

Write 

BA 

DOH 

Erase Suspend/ Resume 


Write 

X 

BOH 

Write 

X 

DOH 


ADDRESS 

AA = Array Address 
BA = Block Address 
IA = Identifier Address 
WA = Write Address 
X = Don’t Care 


DATA 

AD = Array Data 
CSRD = CSR Data 
ID = Identifier Data 
WD = Write Data 


NOTES: 

1. Following the Intelligent Identifier command, two Read operations access the manufacturer and device signature codes. 

2. The CSR is automatically available after device enters Data Write, Erase, or Suspend operations. 

3. Clears CSR.3, CSR.4 and CSR.5. Also clears GSR. 5 and all BSR.5, BSR.4 and BSR.2 bits. See Status Register 
definitions. 
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4.3 28F016XD— Performance Enhancement Command Bus Definitions 


Command 

Notes 

First Bus Cycle 

Second Bus Cycle 

Third Bus Cycle 

Oper 

Addr 

Data 

Oper 

Addr 



Addr 

Data 

Read Extended 
Status Register 

1 

Write 

H 



RA 

GSRD 

BSRD 

■ 

■ 

■ 

Page Buffer Swap 

6 

Write 

X 

72H 







Read Page Buffer 


Write 

X 

75H 

Read 

PA 

PD 




Single Load to Page Buffer 


Write 

wa 


Write 

PA 

PD 




Sequential Load to 
Page Buffer 

3, 4, 5, 9 

Write 

H 

mi 

Write 

X 

WCL 

Write 

X 

WCH 

Page Buffer Write 
to Flash 

3,4,9 

Write 

X 

OCH 

Write 

X 

WCL 

Write 

WA 

WCH 

Lock Block/Confirm 


Write 

X 

77H 

Write 

BA 

DOH 




Upload Status 
Bits/Confirm 

2 

Write 

H 

97H 

Write 

X 

DOH 




Upload Device 
Information/Confirm 

10 

Write 

H 

99H 

Write 

X 

DOH 




Erase All Unlocked 
Blocks/Confirm 

Hi 

Write 

X 

A7H 

Write 

H 

DOH 




RY/BY# Enable to 
Level-Mode 

■a 

Write 

X 

96H 

Write 

X 

01 H 




RY/BY# 

Pulse-On-Write 


Write 

X 

96H 

Write 

H 

02H 




RY/BY# 

Pulse-On-Erase 

■a 

Write 

H 

96H 

Write 

X 

03H 




RY/BY# Disable 

7 

Write 

X 

96H 

Write 

X 

04H 




RY/BY# Pulse-On- 
Write/ Erase 

aa 

Write 

H 

96H 

Write 

H 

05H 

■ 

BB 

fli 

Sleep 


Write 

X 

FOH 







Abort 


Write 

X 

80H 








DATA 

AD = Array Data WC (L,H) = Word Count (Low, High) 

PD = Page Buffer Data WD (L,H) = Write Data (Low, High) 

BSRD = BSR Data 
GSRD = GSR Data 


ADDRESS 

BA = Block Address 
PA = Page Buffer Address 
RA = Extended Register Address 
WA = Write Address 
X = Don’t Care 
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NOTES: 

1. RA can be the GSR address or any BSR address. See Figure 4 for the Extended Status Register memory map. 

2. Upon device power-up, all BSR lock-bits come up locked. The Upload Status Bits command must be written to reflect the 
actual lock-bit status. 

3. WCH must be at 00H for this product because of the 128-word Page Buffer size, and to avoid writing the Page Buffer 
contents to more than one 1 28-word segment within an array block. They are simply shown for future Page Buffer ex- 
pandability. 

4. Only the lower byte DQo _7 is used for WCL and WCH. The upper byte DQq-is is a don’t care. 

5. PA and PD (whose count is given in cycles 2 and 3) are supplied starting in the fourth cycle, which is not shown. 

6. This command allows the user to swap between available Page Buffers (0 or 1). 

7. These commands reconfigure RY/BY# output to one of three pulse-modes or enable and disable the RY/BY# function. 

8. Write address, WA, is the Destination address in the flash array which must match the Source address in the Page Buffer. 
Refer to the 1 6-Mbit Flash Product Family User’s Manual. 

9. WCL = 00H corresponds to a word count of 1 . 

10. After writing the Upload Device Information command and the Confirm command, the following information is output at 
Page Buffer addresses specified below: 


Row Address 

Column Address 

Information 

00H 

03H 

Device Revision Number 

00H 

OFH (DQo-y) 

Device Configuration Code 

00H 

OFH (DQ 8 - 15 ) 

Device Proliferation Code (04H) 


A Page Buffer Swap followed by a Page Buffer Read sequence is necessary to access this information. The contents of all 
other Page Buffer locations, after the Upload Device Information command is written, are reserved for future implementation 
by Intel Corporation. See Section 4.7 for a description of the Device Configuration Code. This code also corresponds to data 
written to the 28F016XD after writing the RY/BY# Configuration command. 
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4.4 Compatible Status Register 



CSR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 
0 = Busy 

NOTES: 

RY/BY# output or WSMS bit must be checked to determine 
completion of an operation (Erase, Erase Suspend, or Data 
Write) before the appropriate Status bit (ESS, ES or DWS) is 
checked for success. 

CSR.6 = ERASE-SUSPEND STATUS 
1 = Erase Suspended 

0 = Erase In Progress/Completed 

CSR.5 = ERASE STATUS 

1 = Error In Block Erasure 

0 = Successful Block Erase 
CSR.4 = DATA-WRITE STATUS 

1 = Error in Data Write 

0 = Data Write Successful 

If DWS and ES are set to “1 ” during an erase attempt, an 
improper command sequence was entered. Clear the CSR 
and attempt the operation again. 

CSR.3 = Vpp STATUS 
1 = Vpp Error Detect, Operation Abort 
0 = Vpp OK 

The VPPS bit, unlike an A/D converter, does not provide 
continuous indication of Vpp level. The WSM interrogates 
Vpp’s level only after the Data Write or Erase command 
sequences have been entered, and informs the system if 
Vpp has not been switched on. VPPS is not guaranteed to 
report accurate feedback between Vppi_K(max) and 
VppHi(min), between Vppni(max) and VppH 2 (min) and 
above VppH 2 (max). 

CSR.2-0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when polling the CSR. 
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4.5 Global Status Register 


WSMS 

OSS 

DOS 

DSS 

QS 

PBAS 

PBS 

PBSS 

7 

6 

5 

4 

3 

2 

1 

0 


GSR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 
0 = Busy 

[1] RY/BY# output or WSMS bit must be checked to 
determine completion of an operation (Block Lock, 
Suspend, any RY/BY# reconfiguration, Upload Status 
Bits, Erase or Data Write) before the appropriate Status 
bit (OSS or DOS) is checked for success. 

GSR.6 = OPERATION SUSPEND STATUS 
1 = Operation Suspended 

0 = Operation in Progress/Completed 

GSR.5 = DEVICE OPERATION STATUS 

1 = Operation Unsuccessful 

0 = Operation Successful or Currently Running 

GSR.4 = DEVICE SLEEP STATUS 

1 = Device in Sleep 

0 = Device Not in Sleep 


MATRIX 5/4 

0 0 = Operation Successful or Currently 
Running 

0 1 = Device in Sleep mode or Pending 

Sleep 

10 = Operation Unsuccessful 

1 1 = Operation Unsuccessful or 

Aborted 

If operation currently running, then GSR.7 = 0. 
If device pending sleep, then GSR.7 = 0. 

Operation aborted: Unsuccessful due to Abort 
command. 

GSR.3 = QUEUE STATUS 
1 = Queue Full 
0 = Queue Available 


GSR.2 = PAGE BUFFER AVAILABLE STATUS 
1 = One or Two Page Buffers Available 
0 = No Page Buffer Available 

The device contains two Page Buffers. 

GSR.1 = PAGE BUFFER STATUS 
1 = Selected Page Buffer Ready 

0 = Selected Page Buffer Busy 

GSR.O = PAGE BUFFER SELECT STATUS 

1 = Page Buffer 1 Selected 
0 = Page Buffer 0 Selected 

Selected Page Buffer is currently busy with WSM 
operation 


NOTE: 

1. When multiple operations are queued, checking BSR.7 only provides indication of completion for that particular block. 
GSR.7 provides indication when all queued operations are completed. 
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4.6 Block Status Register 


BS 

BLS 

BOS 

BOAS 

QS 

VPPS 

VPPL 

R 

7 

6 

5 

4 

3 

2 

1 

0 


BSR.7 = BLOCK STATUS 
1 = Ready 
0 = Busy 

NOTES: 

[1 ] RY/BY # output or BS bit must be checked to 
determine completion of an operation (Block Lock, 
Suspend, Erase or Data Write) before the appropriate 
Status bits (BOS, BLS) is checked for success. 

BSR.6 = BLOCK LOCK STATUS 
1 = Block Unlocked for Write/Erase 
0 = Block Locked for Write/ Erase 


BSR.5 = BLOCK OPERATION STATUS 
1 = Operation Unsuccessful 
0 = Operation Successful or 
Currently Running 


BSR.4 = BLOCK OPERATION ABORT STATUS 
1 = Operation Aborted 
0 = Operation Not Aborted 

The BOAS bit will not be set until BSR.7 = 1 . 

MATRIX 5/4 

0 0 = Operation Successful or 
Currently Running 
0 1 = Not a Valid Combination 
10 = Operation Unsuccessful 
11= Operation Aborted 

Operation halted via Abort command. 

BSR.3 = QUEUE STATUS 
1 = Queue Full 
0 = Queue Available 


BSR.2 = Vrr STATUS 
1 = Vpp Error Detect, Operation Abort 
0 = V PP OK 


BSR.1 = Vpp LEVEL BSR.1 is not guaranteed to report accurate feedback 

1 = Vpp Detected at 5.0V ± 10% between the Vppm and VppH 2 voltage ranges. Writes 

0 = Vpp Detected at 12.0V ± 5% and erases with Vpp between Vppi_K(max) and Vppm 

(min), between V P p H1 (max) and VppH 2 (min), and above 
VppH 2 ( nr, ax) produce spurious results and should not be 
attempted. 

BSR.1 was a RESERVED bit on the 28F016SA. 

BSR.O = RESERVED FOR FUTURE ENHANCEMENTS 

This bit is reserved for future use; mask it out when polling the BSRs. 


NOTE: 

1. When multiple operations are queued, checking BSR.7 only provides indication of completion or that particular block. 
GSR.7 provides indication when all queued operations are completed. 
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4.7 Device Configuration Code 


R 

R 

R 

R 

R 

RB2 

RBI 

RB0 

7 

6 

5 

4 

3 

2 

1 

0 


NOTES: 

DCC.2-DCC.0 = RY/BY# CONFIGURATION Undocumented combinations of RB2-RB0 are reserved 
(RB2-RB0) by Intel Corporation for future implementations and 

001 = Level Mode (Default) should not be used. 

010 = Pulse-On-Write 

011 = Pulse-On-Erase 

100 = RY/BY# Disabled 

101 = Pulse-On-Write/Erase 

DCC.7-DCC.3 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when reading the Device Configuration Code. Set 
these bits to “0” when writing the desired RY/BY# configuration to the device. 
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5.0 ELECTRICAL SPECIFICATIONS 

5.1 Absolute Maximum Ratings* 

Temperature Under Bias 0°C to + 80°C 

Storage Temperature -65°C to + 125°C 


intgl 


NOTICE: This data sheet contains information on 
products in the sampling and initial production phases 
of development. The specifications are subject to 
change without notice. Verify with your local Intel 
Sales office that you have the latest data sheet be- 
fore finalizing a design. 

* WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


Vcc = 3.3V ± 0.3V Systems(5) 


Symbol 

Parameter 

Notes 

Min 



Test Conditions 

Ta 

Operating Temperature, Commercial 

1 

0 

70 

BE 

Ambient Temperature 

Vcc , 

Vcc with Respect to GND 

2 


7.0 

V 


Vpp 

Vpp Supply Voltage with Respect to GND 



14.0 

V 


V 

Voltage on any Pin (except Vcc. Vpp) 
with Respect to GND 

2 

-0.5 




1 

Current into any Non-Supply Pin 



±30 

mA 


•out 

Output Short Circuit Current 

4 


100 

mA 



Vq C = 5.0V ± 0.5V Systems(S) 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 

Test Conditions 

Ta 

Operating Temperature, Commercial 

1 

0 

El 

BE 

Ambient Temperature 

Vcc 

Vcc Wlt h Respect to GND 

2 


E3 



Vpp 

Vpp Supply Voltage with Respect to GND 

2,3 

m 

QQI 

MM 


V 

Voltage on any Pin (except Vcc. Vpp) 
with Respect to GND 

2 


M 

■ 


1 

Current into any Non-Supply Pin 



±30 

mA 


■out 

Output Short Circuit Current 

4 


100 

mA 



NOTES: 

1 . Operating temperature is for commercial product defined by this specification. 

2. Minimum DC voltage is -0.5 V on input/output pins. During transitions, this level may undershoot to -2.0V for periods 
<20 ns. Maximum DC voltage on input/output pins is Vcc + 0.5V which, during transitions, may overshoot to Vcc + 
2.0V for periods <20 ns. 

3. Maximum DC voltage on Vpp may overshoot to + 14.0V for periods <20 ns. 

4. Output shorted for no more than one second. No more than one output shorted at a time. 

5. AC specifications are valid at both voltage ranges. See DC Characteristics tables for voltage range-specific specifications. 
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5.2 Capacitance 

For a 3.3V ± 0.3V System: 


Symbol 

Parameter 

Notes 

El 

Max 

Units 

Test Conditions 

C|N 

Capacitance Looking into an 
Address/Control Pin 

1 

H 

8 

PF 

T a = 25°C, f = 1.0 MHz 

CoUT 

Capacitance Looking into an 
Output Pin 

1 

H 

12 

PF 

T a = 25°C,f = 1.0 MHz 

CLOAD 



■ 





For 5.0V ± 0.5V System: 



Parameter 


El 


BS53I 

Test Conditions 


Capacitance Looking into an 
Address/Control Pin 

■ 

B 

B 

B 


CouT 

Capacitance Looking into an 
Output Pin 

1 

B 

B 


T a = 25°C, f = 1.0 MHz 

Cload 

Load Capacitance Driven by 
Outputs for Timing Specifications 

1,2 


100 

PF 



NOTE: 

1. Sampled, not 100% tested. 

2. Intel is currently developing more accurate models for the Transient Equivalent Testing Load Circuits. For more 
information or to obtain iBIS models, please contact your local Intel /Distribution Sales Office. 




3-69 


















28F016XD 


intel 


5.3 Transient Input/Output Reference Waveforms 


INPUT 


0.45- 


X 2 0 ^ ' 3 

Mjj— 5 s -lAli 


OUTPUT 


290533-5 

AC test inputs are driven at Voh (2.4 VTTL) for a Logic “1” and Vol (0.45 VTTL) for a Logic “0.” Input timing begins at 
Vih (2.0 VTTL) and Vil (0.8 VTTL). Output timing ends at Vih and V|i_. Input rise and fall times (10% to 90%) <10 ns. 


Figure 5. Transient Input/Output Reference Waveform for Vcc = 5.0V ± 0.5VO) 


3.0- 


INPUT 


0 . 0 - 


XiE 


-TEST POINTS - 


-5 J“ 




5 OUTPUT 


290533-6 

AC test inputs are driven at 3.0V for a Logic “1” and 0.0V for a Logic “0.” Input timing begins, and output timing ends, at 
1.5V. Input rise and fall times (10% to 90%) <10 ns. 

Figure 6. Transient Input/Output Reference Waveform for Vcc = 3.3V ± 0.3V( 2 ) 


NOTES: 

1. Testing characteristics for 28F016XD-85. 

2. Testing characteristics for 28F016XD-95. 
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5.4 DC Characteristics 

Vcc = 3.3V ± 0.3V, T a = 0°c to + 70°C 


Symbol Parameter Notes Min Typ 


Ice 1 Vcc word Read 1,4,5 50 

Current 


•cc 2 Vcc Standby Current 1,5 


Max Unit 


70 mA 


Ice 3 Vcc RAS# -Only 

Refresh Current 


1,5 50 



Vcc Fast Page Mode 1 ,4,5 40 

Word Read Current 


Vcc Standby Current 1 ,5 


Ice 6 Vcc CAS# -Before- 1,5 

RAS# Refresh Current 


Ice 7 Vcc Standby Current 1 ,5 
(Self Refresh Mode) 


Input Load Current 


Output Leakage 1 

Current 


Vcc Deep Power-Down 1 
Current 




130 jllA 


Test Condition 

Vcc = v cc Max 
RAS#, CAS# = V| L 
RAS#, CAS#, Addr. Cycling @ 
Irc = min 
Iout = 0 mA 
Inputs = TTLorCMOS 


Vcc = v cc Max 
RAS#, CAS#, RP# = V| H 
WP# = V| L or V| H 


Vcc = v cc Max 
CAS# = V| H 
RAS# = V| L 

RAS#, Addr. Cycling @ tRc = min 
Inputs = TTLorCMOS 


Vcc = Vcc Max 

RAS#, CAS# = V| L 

CAS#, Addr. Cycling @tpc = min 

Iout = 0 mA 

Inputs = Vil or Vih 


Vcc = Vcc Max 

RAS# CAS# RP# = V C c— 0.2V 
WP# = V C c± 0.2V or GND ± 0.2V 


55 

mA 

Vcc = Vcc Max 
CAS#, RAS# = V| L 

CAS#, RAS#, Addr. Cycling @ tRc = min 
Inputs = TTLorCMOS 1 

55 

mA 

Vcc = v cc Max 
RAS#, CAS# = V| L 
Iout = 0 mA 
Inputs = Vil or V|R 

± 1 

jllA 

Vcc = Vcc Max 
V|N = Vcc °r GND 

± 10 

jllA 

Vcc = v cc Max 
Vqut = v cc ° r dnd 

5 

jiA 

RP# = GND ± 0.2V 
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5.4 DC Characteristics (Continued) 
Vcc = 3.3V ± 0.3V, T a = 0°C to + 70°C 


Symbol 

Parameter 

Notes 

Min 

iaa 

Max 

Unit 

! CCW 

Vcc Word Write Current 

1.6 


H 

12 

mA 





8 

17 

mA 

•CCE 

Vcc Block Erase 
Current 

1,6 


6 

12 

mA 





9 

17 

mA 

•CCES 

Vcc Erase Suspend 
Current 

1,2 


1 

■ 

mA 

Ipps 

Vpp Standby/Read 

1 


±1 

±10 

jblA 


Current 



30 

50 

1 

IpPD 

Vpp Deep Power-Down 
Current 

1 


0.2 

5 

jitA 

Ippw 

Vpp Word Write Current 

1,6 


10 

15 

mA 





15 

25 

mA 

•PPE 

Vpp Block Erase 
Current 

1,6 


■ 

10 

mA 





14 

20 

mA 

IPPES 

Vpp Erase Suspend 
Current 

1 


30 

50 

fxA 

V|L 

Input Low Voltage 

6 

-0.3 


0.8 

V 

V| H 

Input High Voltage 

6 

2.0 

■ 

Vcc 
+ 0.3 

a 



Test Condition 


Word Write in Progress 
V PP = 12.0V ± 5% 


Word Write in Progress 
V PP = 5.0V ± 10% 


Block Erase in Progress 
V P p = 12.0V ± 5% 


Block Erase in Progress 
V PP = 5.0V ± 10% 


RAS#, CAS# = V| H 
Block Erase Suspended 


Vpp ^ Vcc 


RP# = GND ± 0.2V 

Vpp = 12.0V ± 5% 
Word Write in Progress 


Vpp = 5.0V ± 10% 
Word Write in Progress 


Vpp = 12.0V ± 5% 
Block Erase in Progress 


Vpp = 5.0V ± 10% 
Block Erase in Progress 


Block Erase Suspended 
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5.4 DC Characteristics (Continued) 
Vcc = 3.3V ± 0.3V, T a = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

V 0 L 

Output Low Voltage 

6 



0.4 

V 

V CC = V CC Min 
Iql = 4.0 mA 

VOHI 

Output High Voltage 

6 

2.4 



V 

Iqh = — 2.0 mA 
V CC = Vcc Min 


6 




■ 

•OH = -100 juA 
V CC “ v cc Min 

Vpp|_K 

Vpp Erase/Write Lock 
Voltage 

3,6 



1.5 

V 


VpPH 1 

Vpp during Write/Erase 
Operations 

3 

m 

5.0 

5.5 

V 


VppH 2 

Vpp during Write/Erase 
Operations 

3 



12.6 

V 


V|_KO 

Vcc Erase/Write Lock 
Voltage 


2.0 



V 



NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 3.3V, Vpp = 12.0V or 5.0V, T = 25°C. These 
currents are valid for all product speed versions. 

2. Icces is specified with the device de-selected. If the device is read while in Erase Suspend mode, current draw is the sum 
of Icces and lcci/lcc 4 - 

3. Block erases, word writes and lock block operations are inhibited when Vpp = Vppy< and not guaranteed in the ranges 
between VppLK(max) and VppHi(min), between Vppm(max) and VppH 2 (min), and above VppH 2 (max). 

4. Automatic Power Saving (APS) reduces Icci and Icc 4 to 3.0 mA typical in static operation. 

5. CMOS inputs are either Vcc ± 0.2V or GND ± 0.2V. TTL inputs are either V||_ or V|p. 

6. Sampled, but not 100% tested. Guaranteed by design. 
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5.5 DC Characteristics 

Vcc = 5.0V ± 0.5V, T a = 0°c to +70°C 


Symbol 

Parameter 

Notes 



Max 

Unit 

Test Condition 

Icc 1 

Vcc Word Read Current 

1,4,5 

1 

90 

120 

mA 

Vcc = Vcc Max 
RAS#, CAS# = V, L 
RAS#, CAS#, Addr. Cycling @ 
tRC = min 

Iqut = 0 m A 
Inputs = TTL or CMOS 

Ice 2 

Vcc Standby Current 

1,5 

■ 

2 

■ 

mA 

Vcc ~ v cc Max 
RAS#, CAS#, RP# = V| H 
WP# = V| L or V| H 

Icc 3 

Vcc RAS# -Only 
Refresh Current 

1,5 


90 

120 

mA 

Vcc = v cc Max 
CAS# = V| H 
RAS# = V| L 

RAS#, Addr. Cycling @ tRC = min 
Inputs = TTL or CMOS 

Icc 4 

Vcc Fast Fa9 e Mode 
Word Read Current 

1,4,5 


80 

110 

mA 

Vcc = Vcc Max 

RAS#, CAS# = V| L 

CAS#, Addr. Cycling @ tpc = min 

•out = ° mA 

Inputs = V|i_or Vih 

•cc 5 

Vcc Standby Current 

1,5 


70 

130 

jllA 

Vcc = Vcc Max 

RAS#, CAS#, RP# = V C c ± 0.2V 
WP# = V C c ± 0.2V or 
GND ± 0.2V 

Icc 6 

Vcc CAS#-Before- 
RAS# Refresh Current 

1,5 


50 

65 

mA 

Vcc = Vcc Max 
CAS#, RAS# = V| L 
CAS#, RAS#, Addr. Cycling 
@ tRC = min 
Inputs = TTL or CMOS 

Icc 7 

Vcc Standby Current 
(Self Refresh Mode) 

1,5 


50 

65 

mA 

Vcc = Vcc Max 
RAS#, CAS# = V, L 
•out = 0 mA 
Inputs = V||_ or V|r 

lu 

Input Load Current 

1 





v cc = v cc Max 
V|N = Vcc or DND 






±10 

jmA 

v cc = v cc Max 
VoUT = Vcc or GND 

IcCD 

Vcc Deep Power-Down 
Current 

1 


2 

5 

jxA 

RP# = GND ±0.2V 

Iccw 

Vcc Word Write Current 

1,6 


25 

35 

mA 

Word Write in Progress 
Vrr = 12.0V ±5% 


25 

40 

mA 

Word Write in Progress 
V PP = 5.0V ±10% 
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5.5 DC Characteristics (Continued) 
Vcc = 5.0V ± 0.5V, T a = 0°c to +70°C 


Symbol 

Parameter 






Test Condition 

•CCE 

Vcc Block Erase 
Current 

1,6 




mA 

Block Erase in Progress 
Vpp = 12.0V ± 5% 




Q 

Block Erase in Progress 
Vpp = 5.0V ± 10% 

ICCES 

Vcc Erase Suspend 
Current 

1,2 


2 

■ 

D 

RAS#, CAS# = V| H 
Block Erase Suspended 

•pps 

Vpp Standby/Read 
Current 

1 


±1 

±10 

jllA 

Vpp ^ Vcc 




jliA 

Vpp > Vcc 

IPPD 

Vpp Deep Power-Down 
Current 

1 



1 

juA 

RP# = GND ± 0.2 V 

IppW 

Vpp Word Write Current 

1,6 


■ 

12 

mA 

Vpp = 12.0V ± 5% 
Word Write in Progress 


17 

22 

mA 

Vpp = 5.0V ± 10% 
Word Write in Progress 

IPPE 

Vpp Block Erase 
Current 

1,6 

■ 

5 

10 

mA 

Vpp = 12.0V ± 5% 
Block Erase in Progress 


16 

20 

mA - 

Vpp = 5.0V ± 10% 
Block Erase in Progress 

IPPES 

Vpp Erase Suspend 
Current 

1 


30 

50 

jllA 

Block Erase Suspended 

V|L 

Input Low Voltage 

6 

-0.5 


0.8 

V 


V|H 

Input High Voltage 

6 

2.0 


Vcc 
+ 0.5 

V 



| 0MF®KMz&T0@N] 


3-75 

























































28F016XD 


Intel 


5.5 DC Characteristics (Continued) 
Vcc = 5.0V ± 0.5V, T a = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 



Unit 

Test Condition 

VOL 

Output Low Voltage 

H 



0.45 

V 

Vcc = Vcc Min 
Iql = 5.8 mA 

VoHI 

Output High Voltage 

H 

< P 

O 00 
O CJi 


■ 

V 


V OH2 

6 

Vcc 

-0.4 

■ 


V 

IRIEEffi3i9| 

V PPLK 

Vpp Erase/Write Lock 
Voltage 

3,6 

0.0 


1.5 

H 


VpPH 1 

Vpp during Write/ Erase 
Operations 

3 

4.5 

5.0 

5.5 

V 


VppH 2 

Vpp during Write/ Erase 
Operations 


11.4 

12.0 

12.6 

■ 


V LKO 

Vcc Erase/Write 
Lock Voltage 


2.0 



V 



NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, Vpp = 12.0V or 5.0V, T = 25°C. These 
currents are valid for all product speed versions. 

2. Icces is specified with the device de-selected. If the device is read while in Erase Suspend mode, current draw is the sum 
of Icces and Icci/lcc4- 

3. Block erases, word writes and lock block operations are inhibited when Vpp=Vppi_« and not guaranteed in the ranges 
between Vppu<(max) and Vppm(min), between Vppm(max) and VppH 2 (min), and above VppH 2 (max). 

4. Automatic Power Saving (APS) reduces Icci sod lcC4 to 1 mA typical in static operation. 

5. CMOS inputs are either Vcc ± 0.2V or GND ± 0.2V. TTL inputs are either V|t_ or Vih- 

6. Sampled, not 100% tested. Guaranteed by design. 
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5.6 AC Characteristics^ 1 ) 

V C c = 3.3V ± 0.3V, T a = 0°C to +70°C 


Read, Write, Read-Modify-Write and Refresh Cycles (Common Parameters) 


Versions 

28F016XD-95 

Units 

Symbol 

Parameter 

Notes 

Min 

Max 

*RP 

RAS# Precharge Time 


10 


ns 

tcp 

CAS# Precharge Time 


15 


ns 

l ASR 

Row Address Set-Up Time 

9 

0 


ns 

tRAH 

Row Address Hold Time 

9 

15 


ns 

m 

Column Address Set-Up Time 

9 

0 


ns 

tCAH 

Column Address Hold Time 

9 



ns 

*AR 

Column Address Hold Time Referenced to RAS# 

3,9 

35 


ns 


RAS# to Column Address Delay Time 

8,9 

15 

15 

ns 


CAS# to RAS# Precharge Time 


10 


ns 

tOED 

OE# to Data Delay 

10 

30 


ns 

*DZO 

OE# Delay Time from Data In 

10 

0 


ns 

*DZC 

CAS# Delay Time from Data In 

10 

0 


ns 

t T 

Transition Time (Rise and Fall) 

10 

2 

4 

ns 


Read Cycle 


Versions 

28F016XD-95 

Units 

Symbol 

Parameter 

Notes 

Min 

Max 

tRC(R) 

Random Read Cycle Time 


105 


ns 

tRAS(R) 

RAS# Pulse Width (Reads) 


95 

oo 

ns 

tCAS(R) 

CAS# Pulse Width (Reads) 


40 

oo 

ns 

tRCD(R) 

RAS# to CAS# Delay Time (Reads) 

1 

15 

55 

ns 

tRSH(R) 

RAS# Hold Time (Reads) 


30 


ns 


CAS# Hold Time (Reads) 


95 


ns 


Access Time from RAS# 

1,8 


95 

ns 

*CAC 

Access Time from CAS# 

1,2 


40 

ns 

*AA 

Access Time from Column Address 

8 


75 

ns 

tOEA 

OE# Access Time 



40 

ns 
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Read Cycle (Continued) 


Versions 

28F016XD-95 

Units 


Parameter 

Notes 

Min 

Max 

| 

RAS# Hold Time Referenced to OE# 


40 


ns 

B 

Read Command Set-Up Time 


5 


ns 

wsm 

Read Command Hold Time Referenced to GAS# 

6,10 

0 


ns 

tRRH 

Read Command Hold Time Referenced to RAS# 

6,10 

0 


ns 

*RAL 

Column Address to RAS# Lead Time 

9 

15 



*CAL 

Column Address to CAS# Lead Time 

9 

75 


ns 

l CLZ 

CAS# to Output in Low-Z 


0 


ns 

tOH 

Output Data Hold Time 


0 


ns 

tOHO 

Output Data Hold Time from OE# 


0 


ns 

*OFF 

Output Buffer Turn-Off Delay 

4 


30 

ns 

tOEZ 

Output Buffer Turn Off Delay Time From OE# 



30 

ns 

tCDD 

CAS# to Data in Delay Time 


30 


ns 


Write Cycle 


Versions 

28F016XD-95 

Units 

Symbol 

Parameter 

Notes 

Min 

Max 

l RC(W) 

Random Write Cycle Time 


90 


ns 

l RAS(W) 

RAS# Pulse Width (Writes) 


80 

oo 

ns 

tCAS(W) 

CAS# Pulse Width (Writes) 


65 

oo 

ns 

tRCD(W) 

RAS# to CAS# Delay Time (Writes) 

1 

15 

15 

ns 

tRSH(W) 

RAS# Hold Time (Writes) 


65 


ns 

tcSHO/V) 

CAS# Hold Time (Writes) 


80 


ns 

*WCS 

Write Command Set-Up Time 

5 

0 


ns 

B 

Write Command Hold Time 


15 


ns 

Bfiflfl 

Write Command Hold Time Referenced to RAS# 

3 

30 


ns 

t W p 

Write Command Pulse Width 


15 


ns 

tRWL 

Write Command to RAS# Lead Time 


65 


ns 

tCWL 

Write Command to CAS# Lead Time 


65 


ns 

*ds 

Data-In Set-Up Time 

7,9 

0 


ns 

tDH 

Data-In Hold Time 

7,9 

15 


ns 

*DHR 

Data-In Hold Time Referenced to RAS# 

3,9 

30 


ns 
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Read-Modify-Write Cycle 


Versions 

28F016XD-95 

Units 

Symbol 

Parameter 

Notes 

Min 

Max 

tRWC 

Read-Modify-Write Cycle Time 

10 

200 


ns 

mam 

RAS# to WE# Delay Time 

5,10 

125 


ns 

mam 

CAS# to WE# Delay Time 

5,10 

70 


ns 

tAWD 

Column Address to WE# Delay Time 


105 


ns 

tOHH 

OE# Command Hold Time 

10 

15 


ns 


Fast Page Mode Cycle 


Versions 

28F016XD-95 

Units 

Symbol 

Parameter 

Notes 

Min 

Max 

tpC(R) 

Fast Page Mode Cycle Time (Reads) 


75 


ns 

tpC(W) 

Fast Page Mode Cycle Time (Writes) 


80 


ns 

tRASP(R) 

RAS# Pulse Width (Reads) 


95 

oo 

ns 


RAS# Pulse Width (Writes) 


80 

oo 

ns 


Access Time from CAS# Precharge 



85 



WE# Delay Time from CAS# Precharge 

10 

0 




RAS# Hold Time from CAS# Precharge (Reads) 


75 


ns 


RAS# Hold Time from CAS# Precharge (Writes) 


80 


ns 


Fast Page Mode Read-Modify-Write Cycle 


Versions 

28F016XD-95 

Units 


Parameter 

Notes 

Min 

Max 

tpRWC 

Fast Page Mode Read-Modify-Write Cycle Time 

10 

170 


ns 


0M(F©l^D!fflA¥O@M 


3-79 
























28F016XD 


Intel 


Refresh Cycle 


Versions 

28F016XD-95 

Units 

Symbol 

Parameter 

Notes 

Min 

Max 

tcSR 

CAS# Set-Up Time (CAS#-Before-RAS# Refresh) 

10 

10 


ns 

tCHR 

CAS# Hold Time (CAS#-Before-RAS# Refresh) 

10 

10 


ns 

tWRP 

WE# Set-Up Time (CAS#-Before-RAS# Refresh) 

10 

10 


ns 

*WRH 

WE# Hold Time (CAS#-Before-RAS# Refresh) 

10 

10 


ns 

tRPC 

RAS# Precharge to CAS# Hold Time 

10 

10 


ns 

*RASS 

RAS# Pulse Width (Self-Refresh Mode) 

10 

0 


ns 

<RPS 

RAS# Precharge Time (Self-Refresh Mode) 

10 

10 


ns 

*CPN 

CAS# Precharge Time (Self-Refresh Mode) 

10 

10 


ns 

*CHS 

CAS# Hold Time (Self-Refresh Mode) 

10 

0 


ns 


Refresh 


Versions 

28F016XD-95 

Units 

Symbol 

Parameter 

Notes 

Min 

Max 

tREF 

Refresh Period 

10 


oo 

ms 
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Miscellaneous Specifications 


Versions 

28F016XD-95 

Units 

Parameter 

Notes 



RP# High to RAS# Going Low 

10 



ns 

RP# Set-Up to WE# Going Low 

10 

480 


ns 

Vpp Set-Up to CAS# High at End of Write Cycle 

10 



ns 

WE# High to RY/BY# Going Low 

10 


100 

ns 

RP# Hold from Valid Status Register Data and RY/BY# high 

10 

0 


ns 

Vpp Hold from Valid Status Register Data and RY/BY# high 

10 

0 


ns 


NOTES: 

1 . Operation within the tRCD(max) limit insures that tRAC(max) can be m et. tRCD(max) is specified as a reference point. 

2. Assumes that tRCD ^ tRCD(max)- 

3. tAR, twcR. tDHR are referenced to t RA D(max)- 

4. tOFF(max) defines the time at which the output achieves the open circuit condition and is not referenced to Voh or Vol- 

5. twcs, tRWD. tcwD and tAWD are non restrictive operating parameters. They are included in the datasheet as electrical 
characteristics only. If twcs ^ twcs(min) the cycle is an early write cycle and the data output will remain high impedance 
for the duration of the cycle. If tcwD ^ tcwD(min). tRWD ^ tRWD(min), 1 awd ^ tAWD(min), then the cycle is a read-write 
cycle and the data output will contain the data read from the selected address. If neither of the above conditions are 
satisfied, the condition of the data out is indeterminate. 

6. Either tRCH or tRRR must be satisfied for a read cycle. 

7. These parameters are referenced to the CAS# leading edge in early write cycles and to the WE# leading edge in read- 
write cycles. 

8. Operation within the tRAD(max) limit ensures that tRAC(max) can be met, tRAD(max) is specified as a reference point only. If 
tRAD is greater than the specified tRAD(max) limit, then the access time is controlled by tAA- 

9. Refer to command definition tables for valid address and data values. 

10. Sampled, but not 100% tested. Guaranteed by design. 

1 1 . See AC Input/Output Reference Waveforms for timing measurements. 
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5.7 ACCharacteristicsO 1 ) 

Vcc = 5.0V ± 0.5V, T a = 0°C to + 70°C 



Read, Write, Read-Modify-Write and Refresh Cycles (Common Parameters) 


Versions 



Symbol 

Parameter t 




*RP 

RAS# Precharge Time 


10 



tcp 

CAS# Precharge Time 


15 


ns 

USR 

Row Address Set-Up Time 

9 

0 


ns 

tRAH 

Row Address Hold Time 

9 

15 


ns 

Use 

Column Address Set-Up Time 

9 

0 


ns 

tCAH 

Column Address Hold Time 

9 

20 


ns 

Ur 

Column Address Hold Time Referenced to RAS# 

3,9 

35 


ns 

tRAD 

RAS# to Column Address Delay Time 

8,9 

15 

15 

ns 

tCRP 

CAS# to RAS# Precharge Time 


10 


ns 

tOED 

OE# to Data Delay 

10 

30 


ns 

.tDZO 

OE # Delay Time from Data In 

10 

0 


ns 

*DZC 

CAS# Delay Time from Data In 

10 

0 


ns 

»T 

T ransition Time (Rise and Fail) 

10 

2 

4 

ns 



3-82 


APMftNKgH DM(F@KRMirD®N] 


























































28F016XD 


Intel 


Read Cycle 


Versions 

28F016XD-85 

Units 

Symbol 

Parameter 

Notes 

Min 

Max 

l RC(R) 

Random Read Cycle Time 


95 


ns 

tRAS(R) 

RAS# Pulse Width (Reads) 


85 

oo 

ns 

tCAS(R) 

CAS# Pulse Width (Reads) 


35 

oo 

ns 

^RCD(R) 

RAS# to CAS# Delay Time (Reads) 

1 

15 

50 

ns 

tRSH(R) 

RAS# Hold Time (Reads) 





tCSH(R) 

CAS# Hold Time (Reads) 


85 


ns 

*RAC 

Access Time from RAS# 

1,8 


85 

ns 

tCAC 

Access Time from CAS # 

1,2 


35 

ns 

*AA 

Access Time from Column Address 

8 


65 

ns 


OE# Access Time 



35 

ns 

l ROH 

RAS# Hold Time Referenced to OE# 


35 



BS9H 

Read Command Set-Up Time 


5 



wsssm 

Read Command Hold Time Referenced to CAS# 

6,10 

0 



*RRH 

Read Command Hold Time Referenced to RAS# 


0 


ns 

B 

Column Address to RAS# Lead Time 

9 

15 



139^1 

Column Address to CAS# Lead Time 

9 

65 


ns 

tcLZ 

CAS# to Output in Low-Z 

10 

0 


ns 

tOH 

Output Data Hold Time 

10 

0 


ns 

tOHO 

Output Data Hold Time from OE# 

10 

0 


ns 

tOFF 

Output Buffer Turn-Off Delay 

4,10 


30 

ns 

*OEZ 

Output Buffer Turn-Off Delay Time from OE# 

10 


30 

ns 

tCDD 

CAS# to Data in Delay Time 

10 

30 


ns 
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Write Cycle 


Versions 

28F016XD-85 

Units 

Symbol 

Parameter 

Notes 

Min 

Max 

*RC(W) 

Random Write Cycle Time 


75 


ns 

tRAS(W) 

RAS# Pulse Width (Writes) 


65 

oo 

ns 

tCAS(W) 

CAS# Pulse Width (Writes) 


50 

oo 

ns 

tRCD(W) 

RAS# to CAS# Delay Time (Writes) 

1 

15 

15 

ns 

tRSH(W) 

RAS# Hold Time (Writes) 


50 


ns 

tcSH(W) 

CAS# Hold Time (Writes) 


65 


ns 

*wcs 

Write Command Set-Up Time 

5 

0 


ns 


Write Command Hold Time 


15 


ns 


Write Command Hold Time Referenced to RAS# 

3 

30 


ns 

EH 

Write Command Pulse Width 


15 


ns 

*RWL 

Write Command to RAS# Lead Time 


50 


ns 

tcWL 

Write Command to CAS# Lead Time 


50 


ns 

tos 

Data-In Set-Up Time 


0 


ns 

*DH 

Data-In Hold Time 


15 


ns 

tDHR 

Data-In Hold Time Referenced to RAS# 

3,9 

30 


ns 


Read-Modify-Write Cycle 


Versions 

28F016XD-85 

Units 

Symbol 

Parameter 

Notes 

Min 

Max 

*RWC 

Read-Modify-Write Cycle Time 

10 

175 


ns 

tRWD 

RAS# to WE# Delay Time 


115 


ns 

tCWD 

CAS# to WE# Delay Time 

5,10 

65 


ns 

tAWD 

Column Address to WE# Delay Time 


100 


ns 

tOEH 

OE# Command Hold Time 

10 

15 


ns 


Fast Page Mode Cycle 


Versions 




Parameter 




tpC(R) 



65 


ns 

tpC(W) 

Fast Page Mode Cycle Time (Writes) 


65 


ns 
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Fast Page Mode Cycle (Continued) 


Versions 




Parameter 



Max 


RAS# Pulse Width (Reads) 


85 

oo 

— 


RAS# Pulse Width (Writes) 


65 

oo 

ns 


Access Time from CAS# Precharge 



70 

ns 


WE# Delay Time from CAS# Precharge 

10 

0 




RAS# Hold Time from CAS# Precharge (Reads) 


65 


ns 

wmm 

RAS# Hold Time from CAS# Precharge (Writes) 


65 




Fast Page Mode Read-Modify-Write Cycle 


Versions 

28F016XD-85 

Units 


Parameter 

Notes 



tpRWC 

Fast Page Mode Read-Modify-Write Cycle Time 

10 

145 


ns 


Refresh Cycle 


Versions 

28F016XD-85 

Units 

Symbol 

Parameter 





CAS# Set-Up Time (CAS#-Before-RAS# refresh) 

10 

10 



tCHR 

CAS# Hold Time (CAS#-Before-RAS# Refresh) 

10 

10 



*WRP 

WE# Set-Up Time (CAS#-Before-RAS# Refresh) 

10 

10 


ns 


WE# Hold Time (CAS#-Before-RAS# Refresh) 

10 

10 


ns 


RAS# Precharge to CAS# Hold Time 

10 

10 


ns 

tRASS 

RAS# Pulse Width (Self-Refresh Mode) 

10 

0 


ns 

*RPS 

RAS# Precharge Time (Self-Refresh Mode) 

10 

10 


ns 

*CPN 

CAS# Precharge Time (Self-Refresh Mode) 

10 

10 


ns 

tCHS 

CAS# Hold Time (Self-Refresh Mode) 

10 

0 


ns 


Refresh 


Versions 

28F016XD-85 

Units 

Symbol 

Parameter 

Notes 

Min 

Max 

tREF 

Refresh Period 

10 


oo 

ms 
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Misc. Specifications 


Versions 



Parameter 

Notes 

Min 

Max 

RP# High to RAS# Going Low 

10 

300 



RP# Set-Up to WE# Going Low 

10 



ns 

Vpp Set-Up to CAS# High at End of Write Cycle 

10 

100 


ns 

WE# High to RY/BY# Going Low 

10 


100 

ns 

RP# Hold from Valid Status Register Data and RY/BY# High 

10 

0 


ns 

Vpp Hold from Valid Status Register Data and RY/BY# High 

10 

0 


ns 


NOTES: 

1 . Operation within the tRCD(max) limit insures that tRAC(max) can be met. tRCD(max) is specified as a reference point. 

2. Assumes that t RC D ^ tRCD(max)- 

3- tAR, twcR. tDHR are referenced to tR A D(max)- 

4. toFF(max) defines the time at which the output achieves the open circuit condition and is not referenced to Voh or Vql- 

5. twcs» tRWD. tcwD and tAWD are non restrictive operating parameters. They are included in the datasheet as electrical 
characteristics only. If twcs ^ twcs(min) the cycle is an early write cycle and the data output will remain high impedance 
for the duration of the cycle. If tcwD ^ tcwD(min). tRWD ^ tRWDfmin). tAWD ^ t A wD(min). then the cycle is a read-write 
cycle and the data output will contain the data read from the selected address. If neither of the above conditions are 
satisfied, the condition of the data out is indeterminate. 

6. Either tRCH or tRRp must be satisfied for a read cycle. 

7. These parameters are referenced to the CAS# leading edge in early write cycles and to the WE# leading edge in read- 
write cycles. 

8. Operation within the tRAD(max) limit ensures that tRAC(max) can be met, tRAD(max) is specified as a reference point only. If 
tRAD is greater than the specified tRAD(max) limit, then the access time is controlled by tAA- 

9. Refer to command definition tables for valid address and data values. 

10. Sampled, but not 100% tested. Guaranteed by design. 

11. See AC Input/Output Reference Waveforms for timing measurements. 
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Figure 8. AC Waveforms for Early Write Operations 
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Figure 9. AC Waveforms for Delayed Write Operations 


I 


3-89 





28F016XD 


Intel 



Figure 10. AC Waveforms for Read-Modify- Write Operations 
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Figure 12. AC Waveforms for Fast Page Mode Early Write Operations 
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Figure 13. AC Waveforms for Fast Page Mode Delayed Write Operations 


AOWAKK&IS ONFOIRIiMrOON 


3-93 



28F016XD 


Intel 



Figure 14. AC Waveforms for Fast Page Mode Read-Modify- Write Operations 
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Figure 15. AC Waveforms for RAS#-Only Refresh Operations 
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Figure 16. AC Waveforms for CAS#-before-RAS# Refresh Operations 
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Figure 17. AC Waveforms for Hidden Refresh Operations 
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5.9 Power-Up and Reset Timings 



Symbol 

Parameter 

Notes 

Min 

Max 

Unit 

*PL5V 

RP# Low to Vcc at 4.5V (Minimum) 

2 

0 


JXS 

tPL3V 

RP# Low to Vqc at 3.0V (Minimum) 

2 

0 


JLLS 

t5VPH 

Vcc at 4.5V Minimum) to RP# High 

1 

2 


fjtS 

*3VPH 

Vcc at 3.0V (Minimum) to RP# High 

1 

2 


JXS 


NOTES: 

For Read Timings following Reset, see sections 5.6 and 5.7. 

1 . The tsvPH and/or t 3 vPH times must be strictly followed to guarantee all other read and write specifications for the 
28F016XD. 

2. The power supply may start to switch concurrently with RP# going low. 
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5.10 Erase and Word Write Performance^ 5 ) 

Vcc = 5.0V ± 0.5V, Vpp = 5.0V ± 0.5V, T A = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 

TypO) 

Max 

Units 


Page Buffer Word Write Time 

2 


12.1 

TBD 

/AS 

tWHRH 1 

Word Write Time 

2 


16 

TBD 

/AS 

tWHRH 3 

Block Write Time 

2 


0.6 

TBD 

sec 


Block Erase Time 

2 


1.0 


sec 


Full Chip Erase Time 

2 


32.0 


sec 


Time From Erase Suspend 
Command to WSM Ready 

4 

^9 

10 

TBD 

/AS 


V C c = 5.0V ± 0.5V, Vpp = 12.0V ± 0.6V, T A = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 

Typ(D 

HH9 



Page Buffer Word Write Time 

2 

TBD 

4.1 

|^| 

/AS 

tWHRH 1 

Word Write Time 

2 

4.5 

6 

B9 

/AS 

tWHRH 3 

Block Write Time 

2 

TBD 

0.2 

1.0 

sec 


Block Erase Time 

2 

0.3 

0.6 

10 

sec 


Full Chip Erase Time 

2 


19.2 

TBD 

sec 


Time From Erase Suspend 
Command to WSM Ready 

4 

TBD 

10 


/AS 


NOTES: 

1. 25°C, and nominal voltages. 

2. Excludes system-level overhead. 

3. These performance numbers are valid for all speed versions. 

4. Specification applies to interrupt latency for Single Block Erase. Suspend latency for Erase All Unlocked Block operation 
extends the latency time to 1 40 jxs (typical). 

5. Sampled, but not 1 00% tested. Guaranteed by design. 
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DEVICE NOMENCLATURE AND ORDERING INFORMATION 


Product line designator for all Intel Flash products 

i — 1 — i 

E28F016XI 

) - 8 5 

V h 

r 1 1 — | — 1 

Package 

Random Access Time 

E = TSOP 

(tRAc) at 5V Vcc(ns) 


r Device Type 


D = Main Memory 


(DR AM-like) Interface 


290533-21 


Order Code 

Valid Combinations 

V cc = 3.3V ± 0.3V, 50 pF load, 
1.5V I/O Levels! 1 ) 

Vcc = 5.0V ± 10%, 100 pF load, 
TTL I/O Levels! 1 ) 

E28F016XD 85 

E28F016XD-95 

E28F01 6XD-85 


NOTE: 

1. See Section 5.2 for Transient Input/Output Reference Waveforms. 
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ADDITIONAL INFORMATION 


Order Number 

Document/Tool 

297372 

16-Mbit Flash Product Family User's Manual, 
28F01 6SA/28F01 6SV/28F01 6XS/28F01 6XD 

292152 

AB-58, “28F01 6XD-Based SIMM Designs” 

292092 

AP-357, “Power Supply Solutions for Flash Memory” 

292123 

AP-374, “Flash Memory Write Protection Techniques” 

292126 

AP-377, “16-Mbit Flash Product Family Software Drivers, 
28F01 6SA/28F01 6SV/28F01 6XS/28F01 6XD” 

292131 

AP-384, “Designing with the 28F016XD” 

297508 

FlashBuilder Utility 

Contact Intel/Distribution 
Sales Office 

28F016XD Benchmarking Utility 

Contact Intel/ Distribution 
Sales Office 

28F016XDiBIS Models 

Contact Intel/Distribution 
Sales Office 

28F016XD VHDL/Verilog Models 

Contact Intel/Distribution 
Sales Office 

28F016XD Timing Designer Library Files 

Contact Intel/Distribution 
Sales Office 

28F016XD Oread and ViewLogic Schematic Symbols 


DATASHEET REVISION HISTORY 


Number 

Description 

001 

Original Version 
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1.0 INTRODUCTION The example design explained in detail in this applica- 

tion brief (Section 2), uses the JEDEC 72-lead DRAM 
This application brief provides design information for SIMM standard and supports densities of 1 -Mbyte x 32 

SIMM (Single In-Line Memory Module) configura- and 2-Mbyte x 32. Section 3 discusses ideas for extrapo- 
tions based on the 28F016XD flash memory. The lating this design to other JEDEC DRAM SIMM 

28F016XD is an Intel 16 Mbit Flash memory compo- pinouts, while Section 4 provides software guidelines 

nent with a multiplexed address bus hardware inter- corresponding to flash memory-based SIMM hardware 

face, compatible with system DRAM controllers. As designs. See Section 6 for additional information on 

such, it is an ideal high-density flash memory for use in Intel’s flash memory products, 

existing designs with DRAM SIMM connectors, or in 
new designs where flexibility in system memory config- 

uration is needed. The 28F016XD preserves all tradi- 2.0 72-LEAD SIMM DESIGN EXAMPLE 

tional FlashFileTM memory attributes, including per- 

bit programmability and per-block eraseability. Its low Figure 1 shows a full-size layout for the 72-lead SIMM 

power consumption, full nonvolatility (i.e., no refresh explained in this section, while Tables 1 and 2 show and 

required) and in-system updateability are desirable at- describe the SIMM pinout. Figure 2 shows the SIMM 

tributes in comparison to the DRAM memory altema- component interconnect. 

tive. The 28F016XD supports both standard and fast 

page mode reads/writes and all refresh cycles (which it 

internally disregards). 



Figure 1. Flash Memory-Based 72-Lead SIMM (1M x 32 or 2M x 32) with 
Identical Dimensions and Pinout as the DRAM-Based Alternative 


l 
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Table 1. 72-Lead SIMM Pinout 


1 

GND 


Ai 

25 

DQ22 

37 

NC 

49 

dq 8 

61 

DQ13 

2 

DQq 

14 

a 2 

26 

dq 7 

38 

NC 

50 

DQ24 

62 

DQ30 

3 

DQie 

15 

A 3 

27 

DQ23 

39 

GND 



63 

DQ14 

4 

DQ-| 

16 

a 4 

28 

a 7 

40 

CAS 0 # 

52 

dq 2 5 

64 

DQ31 

5 

DQi 7 

la 

A 5 

29 

NC 

41 

CAS2# 

53 

DQ10 

dl 

DQ15 

6 

DQ2 

0 

As 

30 

Vcc 

42 

CASi# 

O 

DQ26 


NC 

7 

DQ18 

19 

NC 

31 

As 

43 

cas 3 # 

dl 

DQ11 

67 

PD, 

8 

DQ3 

20 

dq 4 

32 

A 9 

44 

RASq# 

56 

DQ27 

68 

pd 2 

9 

DQ-jg 

21 

DQ20 





57 

DQ12 

69 


10 

Vcc 

22 

dq 5 

34 

ras 2 # 

46 

NC 

58 

DQ28 



11 

NC 

23 

DQ21 

35 

NC 

47 

W# 

59 

Vcc 



12 

Aq 

24 

dq 6 

36 

NC 

48 

NC 

60 

DQ29 

72 



NOTES: 

1. Pin 33 is a NC for the 1M x 32 SIMM and RAS 3 # for the 2M x 32 SIMM. 

2. Pin 45 is a NC for the 1 M x 32 SIMM and RAS-, # for the 2M x 32 SIMM. 
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Table 2. 72-Lead SIMM Pin Description 


Symbol 

Type 

Name and Function 

Ao-Ag 

INPUT 

MULTIPLEXED ROW/COLUMN ADDRESSES: Select a location within the flash 
memory array in conjunction with appropriate RAS# and CAS# signals. Row 
(upper) addresses are latched on the falling edge of RAS#, while column (lower) 
addresses are latched on the falling edge of CAS#. 


INPUT/ 

OUTPUT 

DATA BUS: Inputs flash memory data and commands during CUI write cycles. 
Outputs flash memory array, buffer, identifier or status data in the appropriate read 
mode. Floated when the SIMM is de-selected or the outputs are disabled. 

RASq-3# 

INPUT 

ROW ADDRESS STROBE: Latches row address information on inputs Aq _9 when 
RAS# transitions low. A subsequent CAS# low transition initiates flash memory 
read or write operations. RASq# selects the lower 1 M x 32 memory bank, while 
RAS-| # selects the upper 1 M x 32 bank (for the 2M x 32 SIMM). Signals RAS 2 # 
and RAS 3 # are not used in the design shown in Section 2 . 

CASq-3# 

INPUT 

COLUMN ADDRESS STROBE: Latches column address information on inputs 
Ao-g when CAS# transitions low. When preceded by a RAS# low transition, 
CAS# low initiates flash memory read or write operations in conjunction with W#. 
Subsequent CAS# low transitions, with RAS# held low, enable fast page mode 
reads/writes. CASq# selects the lower 16 bits of a memory bank, while CAS 2 # 
selects the upper 16 bits. Signals CASi # and CAS 3 # are not used in the design 
shown in Section 2 . 

W# 

INPUT 

WRITE ENABLE: Controls access to the CUI, Page Buffers, Data Queue 
Registers and Address Queue Latches. W# is active low and initiates writes in 
combination with RAS# and CAS# low. W# inactive high with RAS# and CAS# 
low signifies a flash memory read operation. RAS# and CAS# high override W# 
low. 

PDi_4 

OUTPUT 

PRESENCE DETECT: Indicates SIMM speed/density information for system 
identification. Various combinations of PD pins, either connected to GND or left 
not connected (pulled high by a resistor on the system board) refer to JEDEC 
standards, as indicated in Table 3. 

Vcc 

INPUT 

OPERATIONAL AND ERASE/WRITE POWER SUPPLY (5V ± 0.5V). Do not 

leave any power pins unconnected. Vcc also provides the flash memory Vpp 
update voltage. The design example in Section 2 does not support operation at 
V C c = 3.3V ± 0.3V (see Section 3.4). 

GND 

SUPPLY 

GROUND FOR ALL INTERNAL CIRCUITRY: Do not leave any ground pins 
floating. 

NC 


NO CONNECT: Lead may be driven or left floating. 


| DMF©[^1MAT0®(M1 
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GND 



292152-2 


Figure 2. The 28F016XD’s Multiplexed Address Bus Interface 
Makes DRAM-Compatible SIMM Designs Simple 


2.1 Address and Data Bus 

The multiplexed address and data buses of all flash 
memories are connected together. See the 28F016XD 
data sheet (Additional Information, Section 6) for per- 
component address and data bus pin capacitance. 
RAS#, CAS# and W # control prevents data bus con- 
tention between multiple flash memory components. 


2.2 RAS#, CAS#, W# 

The 28F016XD is a xl6-only flash memory, and each 
28F016XD contains one CAS# input. CASq# con- 
nects to the lower 16-bit component in each 28F016XD 
bank, while CAS 2 # connects to the upper 16-bit com- 
ponent. Therefore, this interface supports xl6 or x32 
reads and writes. RASq# selects the first 1 Mbyte x 32 
bank, while RASj# selects the optional second bank. 
W# from the SIMM interface connects to all flash 
memories. 


2.3 SIMM Power Pins 

Vcc from the SIMM interface connects to the Vqc an d 
Vpp inputs of all 28F016XD flash memories, and Vcc 
also connects to the optional supply voltage monitoring 


circuit. GND from the SIMM interface connects to all 
SIMM component GNDs. This design uses the 5.0V 
Vpp option of Intel’s SmartVoltage technology. A 
small ceramic capacitor filters each flash memory Vcc 
and Vpp input, while a larger decoupling capacitor fil- 
ters Vcc at the SIMM interface. See Section 3.4 for 
alternate Vcc an d Vpp techniques. 

2.4 Other 28F016XD Signals 

RP# Reset/ Power-Down 

This design includes an optional low-cost supply volt- 
age monitoring circuit (Maxim MAX705) whose 
POWERGOOD output controls flash memory RP# 
inputs. This scheme protects the flash memory from 
spurious command writes during system power tran- 
sitions. Include the monitoring circuit unless you can 
guarantee that your DRAM controller holds the 
RAS# /CAS# combination and W# inactive with 
Vcc above Vlko ( see 28F016XD specifications) in all 
cases except when intentionally writing to flash memo- 
ry. Experience has shown that many memory control- 
lers have unspecified and unpredictable operation dur- 
ing system power transitions. 
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If the monitoring circuit is not used, remove the 8-pin 
SOIC layout from the SIMM and connect RP# to 
Vqo Alternatively, connect SOIC layout pins corre- 
sponding to the (non-present) monitoring circuit Vcc 
input and POWERGOOD output, together with a 
0-ohm resistor. 


WP# 

This design connects WP# to Vqc> driving this input 
inactive at all times. 

RY/BY# 

This design does not use the RY/BY # output, leaving 
it disconnected. System software should poll the flash 
memory Status Registers to determine device status and 
completion of internal operations. 

OE# 

This design connects OE# to GND. RAS# and 
CAS# active, in conjunction with an inactive (high) 
W#, initiate a flash memory read. W # active low over- 
rides the state of OE#. RAS# and CAS# inactive 
high override OE# active low. 

2.5 Other SIMM Signals 

PD 1-4 

PD leads are connected to GND or left unconnected on 
the SIMM, and are connected to Vcc pull-up resis- 
tors on the system board. Their state (“1” or “0”), 
when read by system logic, provide SIMM speed/densi- 
ty information and reference the speed bin of the 
28F016XD flash memories. JEDEC standard Presence 
Detect pin combinations for 4-MB, 8-MB and 16-MB 
(x36 72-pin) SIMMs with tRAC = 100 ns are shown in 
Table 3. PD combinations for other “non-standard” 
speed/density combinations are user definable. 


Table 3. PD Signal Combinations for Various 
Densities 
(t RA c = 100 ns) 



PDi 

pd 2 

pd 3 

pd 4 

4 MB 

GND 

GND 

GND 

GND 

8 MB 

NC 

NC 

GND 

GND 

16 MB 

GND 

NC 

GND 

GND 


3.0 RECOMMENDATIONS FOR 
DESIGN MODIFICATIONS AND 
OTHER SIMM INTERFACES 

The 72-lead SIMM interface is only one of several pin- 
outs approved by JEDEC and other standards bodies. 
This section gives recommendations for adapting the 
design techniques of Section 2 to other SIMM interfac- 
es. In addition, it discusses providing voltages other 
than 5.0V to the 28F016XD SIMM and enhancing sys- 
tem control of 28F016XD operations. 


3.1 Parity 

Flash memory is not subject to the alpha particle soft 
errors that plague DRAM, as it stores the data value 
(“1” or “0”) intrinsically on the floating gate of the 
flash memory transistor. For this reason, a parity out- 
put was not included as part of the 28F016XD pinout. 
In systems that employ parity check to confirm the 
integrity of the DRAM memory subsystem, on-SIMM 
programmable or dedicated logic can generate parity 
bits required for the flash memory-based SIMM read 
interface, if required. See Figure 3 for an example. 



Figure 3. Parity Generation for DRAM Controller 
Compatibility 


APWAM©! 0MIP@[^RMU'0©M 


3-109 



iny 


3.2 8-Bit or 9-Bit SIMM Interfaces 

The 28F016XD is a xl6-only flash memory compo- 
nent. When used in a x8 or x9 (see Section 3.1) SIMM 
pinout, interface logic like that shown in Figure 4 
should be used to route system data to the correct 8 bits 
of the flash memory bus and drive the alternate 8 bits to 
“l”s. System software must write commands to the 
flash memory only on the lower 8 bits for such an inter- 
face. 



Figure 4. Converting the 16-Bit Flash Memory 
Data Bus to a x8/x9 System Interface 


3.3 Flash Memory Control Input/ 
Output and Vpp Control 

SIMMs other than the 72-lead version described in Sec- 
tion 2 may include additional inputs and outputs that 
can provide a system RESET# to the supply voltage 
monitoring circuit MR# input. Alternatively, if system 
RESET# includes power supply monitoring, this sig- 
nal can directly control the 28F016XD RP# inputs. 
Additionally, system I/O signals can control the flash 
memory WP# input and route the RY/BY # output to 
a system port pin or hardware interrupt line. Finally, 
by separating out supply and program/erase voltage 
pins, alternate or semi-custom SIMM interfaces can 
provide 12.0V to the 28F016XD flash memory Vpp in- 
puts for fast write performance and switch this pro- 
gram/erase voltage to GND when not updating flash 
memory contents for additional write protection. 


3.4 Vqc and Vpp Flexibility 

The 28F016XD, by virtue of its SmartVoltage technol- 
ogy can be operated at either 3.3V or 5.0V Vqc> and at 
either 5.0V or 12.0V Vpp. If 3.3V Vcc operation is 
desired (for lower power), an on-SIMM 3.3V-to-5.0V 
converter can generate the necessary 5.0V Vpp voltage. 

Some designs may desire to program and erase the 
28F016XD at 12.0V Vpp for high write performance. 
In these cases, include a 5.0V-to-12.0V or 3.3V-to- 
12.0V converter on the SIMM to generate the 12.0V 
Vpp voltage. See application note AP-357 for industry- 
representative 12V-converters. 


4.0 SOFTWARE GUIDELINES 

System software should not attempt to scan/check the 
28F016XD memory space as part of system initializa- 
tion. The 28F016XD does not support the DRAM self- 
check function. Data combinations written to the 
28F016XD may be decoded as valid commands and 
result in unintended flash memory operations. Check- 
sum calculation and comparison with a checksum data 
value stored in the flash memory is a recommended 
technique for ensuring data/code integrity. 

The hardware interface described in Section 2 allows 
only 16- and 32-bit command/data writes to flash 
memory. When programming a flash memory location, 
set bits not to be programmed to “l”s as part of the 
data write. This technique can also be used to mask a 
write to the alternate byte of a 16-bit word when per- 
forming a byte program operation. 

The 72-lead SIMM interface of Section 2 does not allow 
use of the flash memory RY/BY # output. System soft- 
ware should poll flash memory Status Registers to de- 
termine status of device operations, including program 
and erase. 

System software should separate temporary data from 
code and “permanent” data tables, and route writes to 
the former to the system DRAM memory space. Flash 
memory is per-bit programmable (changing data “l”s 
to “0”s) and per-block erasable (changing data “0”s to 
“l”s), unlike DRAM, which is fully per-bit alterable. 
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5.0 CONCLUSION 

This application brief has described one possible SIMM 
design using Intel’s 28F016XD Flash memory, and has 
provided design recommendations for alternative 
SIMM approaches. Consult reference documentation 


for a more complete understanding of device capabili- 
ties and design techniques. Please contact your local 
Intel or distribution sales office for more information 
on Intel’s flash memory products. 


6.0 ADDITIONAL INFORMATION 


6.1 References 


Order Number 

Document/Tool 

290533 

28F016XD DRAM-Interface Flash Memory Datasheet 

297372 

“16-Mbit Flash Product Family User’s Manual, 
28F01 6SA/28F01 6SV/28F01 6XS/28F01 6XD” 

292092 

AP-357 “Power Supply Solutions for Flash Memory” 

292123 

AP-374 “Flash Memory Write Protection Techniques” 

292126 

AP-377 “16-Mbit Flash Product Family Software Drivers, 
28F01 6SA/28F01 6SV/28F01 6XS/28F01 6XD” 

292131 

AP-384 “Designing with the 28F016XD” 

Contact Intel/Distribution 
Sales Office 

FlashBuilder Utility 

Contact Intel/Distribution 
Sales Office 

28F016XD Benchmarking Utility 

Contact Intel/Distribution 
Sales Office 

28F016XDiBIS Models 

Contact Intel /Distribution 
Sales Office 

28F01 6XD VHDL/Verilog Models 

Contact Intel/Distribution 
Sales Office 

28F016XD Timing Designer Library Files 

Contact Intel/Distribution 
Sales Office 

28F016XD Oread and ViewLogic Schematic Symbols 


6.2 Revision History 


Number 

Description 

001 

Original Version 
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1.0 INTRODUCTION 

The interfacing concepts discussed in this document are 
based on preliminary 28F016XS specifications. Please 
contact your Intel or distribution sales office for up-to- 
date information. Do not finalize a design based on the 
specifications in this document. 

The 28F016XS is an extremely high performance 16- 
Mbit memory component, organized as either 2 
MBytes or 1 MWord. The 28F016XS contains sixteen 
128-KByte (64 KWord) blocks. Each block is separate- 
ly erasable, lockable and capable of 1 million write/ 
erase cycles by providing wear-leveling algorithms and 
graceful block retirement. 

28F016XS’s enhancements over first generation 16- 
Mbit flash memories include: 

• Synchronous pipelined read interface providing sig- 
nificantly improved read performance 

• Smart Voltage technology 

The 28F016XS’s synchronous pipelined read interface 
delivers highest read performance when interfaced to a 
microprocessor with a burst or pipelined bus, such as 
the i960® and Intel486TM microprocessors. The 
28F016XS delivers equivalent or better read perform- 
ance than DRAM, given an optimized interface. 

The enhanced read performance capability of the 
28F016XS eliminates the need of code shadowing from 
nonvolatile memory (ROM, EPROM, etc.) to DRAM 
for increased system performance. The 28F016XS elim- 
inates the need for this multi-component memory mod- 
el, enabling direct code execution out of nonvolatile 
memory with its high read performance. 

This application note will discuss the concepts involved 
in interfacing to the 28F016XS, illustrating that it re- 
quires minimal glue logic and is compatible with a wide 
range of processors and buses. 


intel. 

2.0 OPERATIONAL FUNDAMENTALS 
OF THE 28F016XS 

The 28F016XS, in read mode, is a fully synchronous 
component with a maximum operating frequency of 
66 MHz at 5 V Vcc- Write operations to the 28F016XS 
are asynchronous, similar to traditional flash memories 
such as the 28F016SA. Flash memory is read, erased 
and written in system via the local processor. 


2. 1 28F01 6XS Pinout Comparison to 
the 28F016SA 

The 28F016XS’s pinout is very similar to the pinouts of 
the 28F016SA/SV (see Figure 1). All devices use the 
56-Lead TSOP package. 

The 28F016SA uses the 3/5# pin (pin 1) to configure 
the flash memory for operation at 3.3V or 5.0V Vcc- 
The 28F016XS and 28F016SV use an internal detector 
connected to Vcc to accomplish this same function. 
The 3/5# pin is no longer needed on the 28F016XS 
and 28F016SV, and pin 1 has been renamed NC (“no 
connect’*)- This pin may be driven to Vjl or Vjh, or 
may be left unconnected. 

The 28F016XS also incorporates two new pins in com- 
parison to the 28F016SA/SV: CLK (pin 29) and 
ADV # (pin 30). These two pins control the 
28F016XS’s synchronous pipelined read interface. 

CLK 

CLK provides the fundamental timing and internal op- 
erating read frequency for the 28F016XS (maximum 
frequency of 66 MHz at 5.0V ± 0.5V Vcc and 50 
MHz at 3.3V ± 0.3V Vcc)- CLK latches input ad- 
dresses on its rising edge in conjunction with ADV#, 
times out the SFI Configuration (configurable via the 
Configure Device Command), and synchronizes device 
outputs. CLK can be slowed or stopped without loss of 
data synchronization. CLK is ignored during write op- 
erations. 
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Figure 1. 28F016XS Pinout Configuration Compared to the 28F016SA/SV 


ADV# 

Address Valid (ADV #) indicates that a valid address is 
present on the 28F016XS’s address pins. ADV# sensed 
active low on the rising edge of CLK latches the ad- 
dress into the 28F016XS, which initiates a read access. 
ADV# is ignored by the 28F016XS during write cy- 
cles. 


2.2 Enhanced Read Capability 

Given an optimized interface, the 28F016XS’s read per- 
formance is up to 2x higher than traditional asynchro- 
nous flash memory. The 28F016XS’s synchronous 
pipelined read interface is capable of executing multiple 
read accesses in parallel. This parallel execution capa- 
bility more than doubles read performance. 

Memory Address Decoding 

Figure 2 illustrates the 28F016XS’s memory address 
decoding. Addresses A 20-1 select a 16-bit location with- 
in the 28F016XS’s memory array. Address Ai makes 
the bank selection, even or odd bank. Byte selection, in 
x8 mode (BYTE# = Vjl), is based on the value of 
address Ao. In xl6 mode (BYTE# = Vjh), the 
28F016XS does not use Aq. 



Figure 2. Memory Address Decoding Illustrating 
Ao Selecting the Byte Location and 
Ai Selecting the Even or Odd Bank 


I 
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NOTE: 

Refer to the 28F016XS datasheet for timing specifications. 

Figure 3. Initiating a Single Read Access Waveform 
(28F016XS-15, SFI Configuration = 2) 


Executing a Read Access Cycle 

In read mode, AD V # and CLK together initiate read 
accesses when the device is selected (Figure 3). A read 
cycle is initiated and addresses are latched when the 
28F016XS senses ADV# low on a rising CLK edge. 
After a read cycle begins and the SFI Configuration 
value has elapsed, data is latched and begins driving on 
the output pins. Valid data is guaranteed tcHQV after 
the elapse of the SFI Configuration value. 

Refer to Section 2.3 for further information about the 
SFI Configuration. 

Consecutive Read Accesses 

Consecutive accesses to the 28F016XS, from the proc- 
essor perspective, occur in either an Alternating-A j or a 
Same- A j pattern. Of the two sequences, consecutive Al- 
ternating-A i accesses offer highest read performance. 


Consecutive Alternating-A / accesses change the value 
of address A\ between consecutive read cycles. As Fig- 
ure 4 illustrates, up to three accesses can be initiated 
before data from the first access is valid on the output 
pins. Consecutive Alternating-A j accesses allow multi- 
ple accesses to the 28F016XS to occur in parallel, effec- 
tively filling the 28F016XS’s internal pipeline. 

Consecutive Same-A j accesses retain the same address 
A\ value between consecutive read cycles. This pattern 
allows up to two accesses to be initiated before data 
from the first accesses is read. The SFI Configuration 
value must elapse before a second access can begin (see 
Section 2.3). 

Refer to Sections 4.2 and 4.3, the Alternating-A / and 
Same-A j access rules, for minimum delays between 
consecutive read accesses. The Alternating-A / and 
Same-A j access rules both apply to consecutive Alter- 
nating-A j accesses, while only the Same-A j rule applies 
to consecutive Same-A j accesses. 


0(MF©^G!MY0©[M 
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Figure 4. Synchronous Pipelined Read Waveform Example 
(28F016XS-15, SFI Configuration = 2, Consecutive Alternating-A / Access) 


2.3 SFI Configuration 

The SFI Configuration (Table 1) optimizes the 
28F016XS for a wide range of input CLK frequencies. 
After a read access begins, the 28F016XS will latch 
data on its output pins after a CLK count correspond- 
ing to the SFI Configuration has elapsed. 

The 28F016XS default SFI Configuration is 4 after 
power-up or return from deep power-down mode 
(RP# = Vil), allowing system boot from the 
28F016XS, if desired, at any CLK frequency up to 66 
MHz at 5.0V ± 0.5V V CC (50 MHz at 3.3V ± 0.3V 
Vcc)* SFI Configurations are retained if the 28F016XS 
is put in sleep mode via a Sleep or Abort command. An 
optimized SFI Configuration for a given frequency (Ta- 
ble 1) enables the highest read performance. The SFI 
Configuration is updated via the Device Configuration 
command. SFI Configurations can range from 1 to 4. 

The 28F016XS is fully synchronous. CLK can be 
slowed or stopped at any time within a series of access- 
es without loss of data synchronization. 


Table 1. SFI Configuration 
Correspondence to CLK Frequency 


28F016XS-15 

Frequency (MHz) 

SFI Configuration 

66 (and below) 

4 

50 (and below) 

3 

33 (and below) 

2 

16.7 (and below) 

1 


28F016XS-20 

Frequency (MHz) 

SFI Configuration 

50 (and below) 

4 

37.5 (and below) 

3 

25 (and below) 

2 

12.5 (and below) 

1 
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Table 1 . SFI Configuration Correspondence to 
CLK Frequency (Continued) 


28 F 016 XS -25 

Frequency (MHz) 

SFI Configuration 

40 (and below) 

4 

30 (and below) 

3 

20 (and below) 

2 

1 0 (and below) 

1 


NOTE: 

SFI Configurations other than those shown in Table 1 pro- 
duce spurious results and should not be used. 


3.0 CPU/BUS COMPATIBILITY WITH 
28F016XS 

The 28F016XS , s synchronous read interface pipelines 
up to three accesses at time. This multiple execution 
capability makes the 28F016XS highly compatible with 
CPUs and buses that employ an Intel or linear burst, or 
pipelined bus. 

Burst Bus 

A burst bus executes a series of accesses in retrieving 
data from the memory subsystem. Accessing data con- 
secutively, a processor or bus employing an Intel or 
linear burst order increments the lower address lines, 
effectively executing consecutive Alternating-A ] access- 
es. Tables 2 and 3 illustrate the Intel and linear burst 
order, for a 4-access burst. 


Table 2 . Intel Burst Order 
Address A3.2 on a 32 -Bit Processor 


Intel Burst Order 

First 

Address 

Second 

Address 

Third 

Address 

Fourth 

Address 

00 

01 

10 

11 

01 

00 

11 

10 

10 

11 

00 

01 

11 

10 

01 

00 


Table 3 . Linear Burst Order 
Address A3.2 on a 32 -Bit Processor 


Linear Burst Order 

First 

Address 

Second 

Address 

Third 

Address 

Fourth 

Address 

00 

01 

10 

11 

01 

10 

11 

00 

10 

11 

00 

01 

11 

00 

01 

10 


During a burst cycle, some CPUs themselves increment 
addresses, while others only supply the initial address, 
requiring peripheral logic to increment the address. 
CPUs that increment addresses, however, may not pro- 
vide addresses quick enough to take full advantage of 
the 28F016XS’s synchronous pipelined interface. Some 
processors wait for the completion of the first access 
before incrementing the address for the next access. 
Generating addresses within the interfacing logic, the 
28F016XS is not forced to wait for the CPU. Therefore, 
several accesses can be initiated before the 28F016XS 
completes the initial access. 
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Figure 5 shows a block diagram of a four double-word 
burst CPU interface to the 28F016XS. This interface 
executes a 4 double word burst. Notice that addresses 
A 2-1 are controlled by the interface. A multi-bit coun- 
ter generates the addresses for the burst cycle. 


Using the interface to increment addresses, the 
28F016XS achieves highest read performance executing 
multiple Alternating-A j accesses at the same time. For 
example, the 28F016XS-15, at 33 MHz and 5.0V V C o 
can deliver effective zero wait state performance inter- 
facing to a burst bus, after the initial pipeline fill. 



Figure 5. Burst Address Generation and Wait-State Control 
When Interfacing the 28F016XS to a Burst Processor 
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Figure 6. Comparing Past Address with Current Address to Determine Whether an Alternating-Af or 
Same-Af Access Occurs When Interfacing the 28F016XS to a Pipelined Bus Processor 


Pipelined Bus 

A pipelined bus activates the address and control sig- 
nals for the next cycle before completing the current 
cycle. Pipelined buses have no defined access order; 
therefore, Alternating-A j accesses are not guaranteed. 
The interface must guard against a possible mixture of 
consecutive Alternating-A 7 and Same-A j accesses. Fig- 
ure 6 illustrates a pipelined bus interface to the 
28F016XS. 

In a pipelined interface, the system logic does not incre- 
ment the 28F016XS’s lower addresses. The system log- 
ic instead latches address Ai and compares it to A j of 
the following cycle. Comparing Ai, the interface logic 
can identify Alternating- A 7 and Same-A 7 accesses, 
which directly informs the interface logic when it can 
initiate a read access to the 28F016XS. The Alternating- 
A i and Same-A 7 access rules define the minimum delay 
between consecutive accesses (see Section 4.2 and 4.3). 

In the past, external latches were required to latch the 
next address and control signals. The 28F016XS elimi- 
nates this extra system overhead, latching the next ad- 
dress internally and initiating the next cycle prior to 
completing the current cycle. The 28F016XS’s synchro- 
nous pipelined interface takes full advantage of a pipe- 
lined bus. 


4.0 INTERFACING TO THE 28F016XS 

The 28F016XS can interface to a wide range of CPUs 
and bus architectures. Glue logic is minimal and the 
performance enhancements are significant. Below are 
key considerations to keep in mind when interfacing to 
the 28F016XS: 

• Clocking Options 

• Alternating-A 7 Access Rule 

• Same-A 7 Access Rule 

• Optimizing Read Performance in x8 Mode 

• Consecutive Accesses across Bank Boundaries 

• Handling Asynchronous Write Cycles 

• System Boot-Up out of the 28F016XS 

4.1 Clocking Options 

In choosing a CLK option, keep in mind that the 
28F016XS operates at optimum performance with a 
CLK frequency at an upper SFI Configuration bounda- 
ry (50 MHz and 33 MHz are two of four SFI Configu- 
ration upper boundaries for the 28F016XS-15 at 5.0V 
Vcc)- See Section 2.3 for information about the SFI 
Configuration. 
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NOTE: 

The buffer in Figure 7 eliminates loading effects on the oscillator 

Figure 7. Different CLK Options when Interfacing to a Processor that Requires a 2x CLK Input 

time for interface logic to meet the 28F016XS’s set-up 
time (ADV#, CEx# and OE# to rising CLK edge). A 
lx CLK, on the other hand, has a longer period, relax- 
ing the demands on the interfacing logic to meet the 
28F016XS set-up time. 

A general “rule of thumb” when choosing a CLK op- 
tion: The higher the CLK frequency the higher the 
28F016XS read performance but the faster the interfac- 
ing logic required. 

Clock Generation and Synchronization 

External clock generation and synchronization may be 
required when the interfacing processor uses a 2x CLK 
input and does not provide external access to the inter- 
nally synchronized lx CLK. Generating and synchro- 
nizing a lx CLK from a 2x or 4x CLK can be accom- 
plished with simple flip-flop logic. (Many processors, 
such as the Intel386 processor, synchronize their inter- 
nal lx CLK with the trailing edge of RESET.) Example 
PLD equations that generate and synchronize a lx sys- 
tem output CLK are located in Appendix A. 


For example, a processor running at 25 MHz with a 2x 
CLK input of 50 MHz provides both 25 MHz and 
50 MHz CLK options (Figure 7). Using the 25 MHz 
CLK, the 28F016XS-15/-20 will begin driving data to 
the output pins two clocks (or 80 ns) after initiating a 
read cycle (SFI Configuration = 2 at 5.0 ± 0.5V 
Vcc). Using the 2x CLK, the 28F016XS-15 will begin 
driving data to the output pins in three clocks, or 60 ns 
(SFI Configuration = 3 at 5.0 ± 0.5V V CC ). The CLK 
frequency and SFI Configuration relationship affects 
the 28F016XS’s read performance. 

2x vs. lx CLK 

Figure 7 illustrates three possible CLK options when 
interfacing to a processor requiring a 2x CLK input 
(processors such as the i960 processor and Intel386TM 
processor are two examples). Depending on the proces- 
sor frequency, the 2x CLK may be closer to an upper 
SFI Configuration boundary, thereby reducing the 
28F016XS’s access time. The higher frequency of the 
2x CLK however, reduces the amount of available 
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Clock skew can arise depending upon the approach tak- 
en to derive the lx CLK. Figure 8 (A) will have a 
maximum skew between the 2x and lx clock of tcoi- 
Figure 8 (B) will have minimal-to-no skew because 


both the 2x and lx CLK outputs will have the same 
delay, tcoi> through the EPLD. Figure 9 graphically 
illustrates the amount of skew the two different CLK 
generation circuits produce. 



292147-8 

Figure 8. lx CLK Configurations Using RESET for CLK Synchronization 
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Figure 10. Alternating Access Rule, Illustrating tcHCHA 
(28F016XS-15, SFI Configuration = 2, Consecutive Alternating-A / Accesses) 


4.2 Alternating-A / Access Rule 

The Alternating-A j access rule (Figure 10) defines the 
minimum time required between consecutive accesses 
with different A\ values. The Alternating-A 7 access rule 
is: 

tCHCHA > = tcHQV + (System Propagation Delay) 

+ (CPU Set-up Requirement) 

tcHCHA is then rounded up to the nearest CLK period. 
For example, if the summation Of tcHQV* system delay 
and CPU set-up requirement equals 24 ns, and the 
CLK (33 MHz) period equals 30 ns, tcHCHA is round- 
ed up to 30 ns (1 CLK period). 

When tcHCHA equal one CLK period, an Alternating- 
A 7 access can execute on the next rising CLK edge. In 


some designs, however, the sum of tcHQV* system delay 
and CPU set-up requirement may exceed the CLK pe- 
riod, requiring access stretching. 

Section 4.4 describes several interface examples demon- 
strating the Alternating-A 1 access rule. 

Access Stretching 

Access stretching (Figure 11) extends the amount of 
time data is held between consecutive accesses. Inter- 
mediate cycles with ADV # disabled between initial ac- 
cess and subsequent access will extend the number of 
CLKs that the 28F016XS holds data. Intermediate cy- 
cles with ADV # disabled are required in all cases when 
tcHQV exceeds the CLK period. 
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NOTE: 

Refer to the 28F016XS datasheet for timing specifications. 

Figure 1 1. Access Stretching Example at 40 MHz 
(28F016XS-15, SFI Configuration = 3, Consecutive Alternating-A 1 Accesses) 
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4.3 Same-A 7 Access Rule 

The Same-A i access rule (Figure 12) defines the mini- 
mum time required between accesses with the same ad- 
dress K\ value. The Same-A j access rule is: 

tCHCHS > = SFI Configuration 
or 

tCHCHS > = 2 * tcHCHA 


tcHCHS equals the largest value derived from the two 
above equations. For instance, a system operating at 50 
MHz (20 ns period) with a SFI Configuration value set 
to 3 and a tcHCHA equaling 40 ns 

SFI Configuration (3) = 60 ns 
2 * tcHCHA = 80 ns 

will have a tcHCHS equal to 80 ns. 

Section 4.4 describes several interface examples that 
show the Same-A j access rule. 
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NOTE: 

Refer to the 28F016XS datasheet for timing specifications. 


Figure 12. Same-A / Access Rule, Illustrating tcHCHS 
(28F016XS-15, SFI Configuration = 3, Consecutive A/ternat/ng-A / Accesses) 
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4.4 Interfacing Examples 

The following waveform examples illustrate the Alter- 
nating-A j and Same-A \ access rules. 

Consecutive Alternating- A / Accesses at 33 MHz 

Figure 13 illustrates consecutive Alternating- A j access- 
es at 33 MHz, interfacing to a burst bus. The system 
logic controls ADV#, CEx# and OE# to initiate read 
accesses to the 28F016XS. tcHCHA and tcHCHS (delay 
between Alternating- A j and Same-A j accesses) define 
the rate at which the system logic can initiate read ac- 
cesses to the 28F016XS. 


tCHCHA calculation: 

tcHQV = 20 ns 

System Propagation Delay = 0 ns 

CPU Set-up Requirement = 4 ns 

Summation = 24 ns 

tcHCHA = 30 ns 


Access 2 can begin on the next rising CLK edge after 
access 1 because tcHCHA equals one CLK period. 

tcHCHS calculation: 

SFI Configuration (2) = 60 ns 

or 

2 * tcHCHA = 60 ns 

tcHCHS = 60 ns 


tcHCHS is equal to two CLK periods. A second Same- 
A j access can occur two clocks after the initial access. 
This burst bus interface delivers 1 -0-0-0 wait-state read 
performance at 33 MHz, excluding system-level over- 
head. 
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Refer to the 28F016XS datasheet for timing specifications. 
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Figure 13. 33 MHz Read Timing Waveform Example 
(28F016XS-15, SFI Configuration = 2, Consecutive Alternating-A / Accesses) 
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Consecutive Same-A / Accesses at 33 MHz 

Figure 14 illustrates consecutive Same-A j accesses at 
33 MHz. This situation could occur when interfacing to 
a pipelined bus. Pipelined buses do not guarantee con- 
secutive Alternating-A j accesses. 

Consecutive Same-A / accesses, as shown in this exam- 
ple, retain the same address Ai value between accesses. 
Therefore, the tcHCHA calculation is not required be- 
cause no Alternating-A j accesses occur. 


tcHCHS calculation: 

SFI Configuration (2) = 60 ns 

tcHCHS = 60 ns 

tcHCHS equals two CLK periods. Hence, access 2 can 
begin two CLK periods after access 1. 

This example read wait-state performance is 1-1 at 33 
MHz, excluding system-level overhead. 



Figure 14. 33 MHz Read Timing Waveform Example 
(28F016XS-15, SFI Configuration = 2, Consecutive Same-A i Access) 


3-128 


AtSM&N)©! 0K1(F©1^1MAYD©K1 







AP-398 


Intel 

Consecutive A/ternat/ng-A / Accesses at 
40 MHz, Example 1 

Figure 15 illustrates consecutive Alternating- A j access- 
es at 40 MHz, interfacing to a burst bus. 


tcHCHA calculation: 

tcHQV = 20 ns 

System Propagation Delay = 0 ns 

CPU Set-up Requirement = 4 ns 

Summation = 24 ns 

tCHCHA = 25 PS 


tcHCHA equals one CLK period (25 ns). Therefore, an 
Alternating-A j can begin on the next rising CLK edge. 


tCHCHS calculation: 

SFI Configuration (3) = 75 ns 

or 

2 * tcHCHA = 50 ns 

tCHCHS = 75 ns 

tCHCHS is equal to three CLK periods. A second Same - 

A] access, therefore, can start three clocks after the 
initial access. 

This interface delivers 2-0- 1-0 wait-state read perform- 
ance at 40 MHz, excluding system-level overhead. 
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Consecutive A/ternating-A 1 Accesses at 
40 MHz, Example 2 

Figure 16 also illustrates consecutive Alternating-A j ac- 
cesses at 40 MHz, interfacing to a burst bus. In this 
example, a transceiver between the 28F016XS’s outputs 
and the CPU inputs add a system propagation delay to 
the tcHCHA calculation. 


tcHCHA calculation: 

tcHQV = 20 ns 

System Propagation Delay = 5 ns 

CPU Set-up Requirement = 4 ns 

Summation = 29 ns 

tcHCHA = 50 ns 


tcHCHA equals two CLK periods (25 ns). Therefore, 
access stretching is required between Alternating-A 1 ac- 
cesses. 

tCHCHS calculation: 

SFI Configuration (3) = 75 ns 

or 

2* tcHCHA = 100 ns 

tCHCHS = 100 ns 

tcHCHS is equal to four CLK periods. A second Same- 
A i access can begin four clocks after the initial access. 

This burst bus interface to the 28F016XS gives 2- 1-1-1 
wait-state read performance at 40 MHz, excluding sys- 
tem-level overhead. 
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NOTE: 

Refer to the 28F016XS datasheet for timing specifications. 


Figure 16. 40 MHz Read Timing Waveform Example 2 
(28F016XS-15, SFI Configuration = 3, Consecutive Alternating-A / Accesses, Access Stretching) 
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Consecutive Afternating-A / Accesses at 66 MHz 

Figure 17 illustrates consecutive Alternating-A j access- 
es at 66 MHz, interfacing to a burst bus. 

s required between Alternating-A 1 accesses. 


tcHCHS calculation: 

SFI Configuration (4) 
or 

2*t C HCHA 

tCHCHS 


= 60 ns 


= 60 ns 
— 60 ns 


tCHCHA calculation: 
tCHQV 

System Propagation Delay 
CPU Set-up Requirement 

Summation 

tcHCHA 


= 20 ns 
= 0 ns 
= 4 ns 

= 24 ns 
= 30 ns 


tcHCHS i s equal to four CLK periods. Hence, a second 
Same-A j access can begin four clocks after the initial 


This burst bus interface to the 28F016XS delivers 
3- 1-1-1 wait-state read performance at 66 MHz, exclud- 
ing system-level overhead. 


tcHCHA equals two CLK periods or 30 ns. Therefore, 
access stretching is required between Alternating-A j ac- 



Figure 17. 66 MHz Read Timing Waveform Example 
(28F016XS-15, SFI Configuration = 3, Consecutive Alternating-A 1 Accesses, Access Stretching) 
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4.5 Optimizing Read Performance in 
x8 Mode 

When using the 28F016XS as a x8 device, the system 
interface to flash memory should be slightly modified 
to ensure highest read performance. The interface 
shown in Figure 18 ensures that, for a series of sequen- 
tial accesses, address Ai will alternate between “0” and 
“1.” This configuration takes advantage of consecutive 
Alternating- A i accesses and enables highest the 
28F016XS read performance. 

The examples below show the Aq/Ai address sequence 
that will be presented to the 28F016XS when either the 
conventional or optimized Aq and A\ interface configu- 
rations are used. 


Conventional Aq and Ai Configuration 


Ai 

A 0 

Access 

0 

0 

Initial Access 

0 

1 

Subsequent Same-A / Access 

1 

0 

Subsequent Atternating-A / Access 

1 

1 

Subsequent Same-A / Access 

Optimized A 

p and Ai Configuration 

Ai 

Ao 

Access 

0 

0 

Initial Access 

1 

0 

Subsequent Alternating-A / Access 

0 

1 

Subsequent Alternating-A 1 Access 

1 

1 

Subsequent Alternating-A / Access 



Interface for x8 Mode Operation 


Implementing this hardware solution requires that code 
and data be stored to the 28F016XS in a modified se- 
quence when using a PROM programmer. This allows 
expected data to be read in-system with addresses Aq 
and Aj swapped. On-board or in-system data write and 
erase “proceed as normal;” the address translation is 
handled automatically by hardware. 

Figure 19 shows the code/data pattern that should be 
used when storing information to the 28F016XS using 
a PROM programmer. Figure 20 shows how that same 
data pattern appears to the system bus, after the Aq/Aj 
address swap. 



CODE/DATA PATTERN 
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Figure 19. Code/Data Structure when 
Performing Off-Board Programming 
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CODE/DATA PATTERN 
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Figure 20. Code/Date 
Structure Seen by the Processor 

4.6 Consecutive Accesses Across 
Memory Bank Boundaries 

Figure 21 illustrates a multi-bank 28F016XS configura- 
tion. CEq# and CEi# make the particular memory 
bank selection. 

In this configuration, a sequence of accesses can poten- 
tially begin and end in different memory banks, which 
could potentially cause bus contention if not properly 
handled. All pipelined accesses to the initial bank must 
complete before activating the output buffer to the next 
memory bank. Both burst and pipelined buses are sus- 
ceptible to this occurrence because of their sequential 
accessing nature. 


Burst Bus 

A burst bus will only cross memory bank boundaries 
when the length of the burst transfer exceeds the size of 
the individual banks. Refer to Tables 2 and 3 for the 
Intel and linear burst orders. 


Pipelined Bus 

Pipelined buses do not guarantee linear sequential ac- 
cesses. Therefore, consecutive accesses can potentially 
bounce back and forth between different memory 
banks, crossing bank boundaries. 

Handling Consecutive Accesses That Cross 
Memory Bank Boundaries 

When consecutive accesses cross memory bank bounda- 
ries, it is important to guard against enabling the out- 
put buffers for both banks. All pipeline accesses to the 
initial bank must complete before activating the OE# 
to the next bank. Enabling the buffers for both banks at 
the same time will cause bus contention. 

System logic can handle consecutive accesses that cross 
bank boundaries in one of two ways: 

1. Complete all accesses initiated in the first memory 
bank before addressing a new bank (Figure 22). This 
configuration requires only one OE# (Figure 21). 

2. Before finishing all accesses to the initial memory 
bank, read cycles targeting a new bank can start as 
long as its OE# is deactivated. All accesses to the 
initial bank must finish before activating the OE# 
to the next bank. The OE# for the next bank is 
activated toHQZ after the OE# to the initial bank 
has been deactivated (Figure 23). This configuration 
requires an OE# for each bank. 


0N1(F@[^IM)AY0®(N] 
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Figure 21. Two-Bank 28F016XS Combination, Burst Bus interface, Single OE# 
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Figure 22. Consecutive Altemating-A i Accesses Crossing Bank Boundaries, 
One OE# (28F016XS-15, SFI Configuration = 2) 
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Figure 23. Consecutive Alternating-A / Accesses Crossing Bank Boundaries, 
OneOE# per Bank (28F01 6XS-1 5, SFI Configuration = 2) 


4.7 Handling Asynchronous Writes 

The 28F016XS write interface is asynchronous, similar 
to other Intel flash memories. The 28F016XS’s write 
interface is not pipelined, therefore a write cycle must 
complete before another begins. 

When the interfacing CPU can execute a burst write 
cycle, the system logic needs to manage the write cycle, 
allowing only one write cycle to the 28F016XS at a 
time. Write-back caches, for example, support burst 
write cycles. The 28F016XS does support word/byte 
write queuing, but the Queue Status (QS) bit in the 
Global Status Register (GSR) should be checked before 
attempting a second Write operation. If the queue is 
available, a second Write operation can begin before the 
Write State Machine (WSM) has completed the initial 
Write operation. In addition to the command queuing, 
the 28F016XS has two 256-byte page buffers. 


The page buffers allow sequential loading at high 
speeds. Refer to Intel’s 16-Mbit Flash Product Family 
User’s Manual for further information about command 
queuing and page buffer operations. 

When the interfacing CPU does not support burst 
writes, the 28F016XS’s asynchronous write interface is 
not an issue. The processor will only execute one write 
cycle at a time. 

When executing a write cycle, the interfacing processor 
or bus will drive a write signal informing the system of 
the desired operation. Monitoring this signal, the inter- 
facing logic can correctly transition into an appropriate 
state machine sequence. In this situation, the interfac- 
ing logic directly controls the 28F016XS’s write control 
signals (Figure 24), just as with asynchronous Intel 
flash memories. 
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DEEP WRITE DATA-WRITE OR Sn™ AUTOMATED DATA-WRITE WRITE READ EXTENDED | READ EXTENDED 

POWER-DOWN ERASE SETUP COMMAND " r&oou rnuu»un OR ERASE DELAY REGISTER COMMAND STATUS REGISTER DATA 



| READ COMPATIBLE 
STATUS REGISTER DATA 





illBIfll 


illlWM 

Ittillli 


N° TE; 

Refer to the 28F016XS datasheet for timing specifications. 


Figure 24. Write Timing Waveform with Vpp at 5V or 12V 


4.8 System Boot from 28F016XS 

When booting from the 28F016XS, the interfacing logic 
must first support the default SFI Configuration value, 
4. Depending on the actual CLK frequency however, 
the SFI Configuration (Section 2.3) may require adjust- 
ment to achieve maximum read performance. To 
achieve this flexibility, the interfacing logic must: 


• Support the default SFI Configuration 

• Be aware of changes to the SFI Configuration 

• Alter the interface accordingly to handle optimized 
configuration 

If a change is made to the SFI Configuration, the inter- 
face must be informed so that it can adjust accordingly. 
If the interface does not adjust, it will continue per- 
forming read cycles assuming a default SFI Configura- 
tion. 


| AEWj&N)©! 
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Figure 25 illustrates a possible way of informing the 
interface of a change to the SFI Configuration, using a 
general purpose input/output (GPIO). On system pow- 
er up or reset, the GPIO transitions to a specific logic 
level (Vil or Vjh), informing the interface of a default 
SFI Configuration. After altering the SFI Configura- 
tion, software changes the GPIO value. This input in- 
forms the interface of changes to the SFI Configura- 
tion. 



INTERFACE 



LOGIC 


nrAHY ^ 

AD V# 





CLK WE# 


W 

w 


OE# 

► 

GPIO * 

RECONF CE# 

► 
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Figure 25. Informing Interface of a SFI 
Configuration Change 


Figure 26 illustrates the internal state machine. De- 
pending upon the value of the GPIO (RECONFIG), 
the state machine will take one of two paths. One path 
is capable of handling the default SFI Configuration, 
while the second path supports the optimized SFI Con- 
figuration. Supporting the default configuration, the in- 
terface logic initiates accesses to the 28F016XS corre- 
sponding to a SFI Configuration of 4. In the optimized 
SFI Configuration, the interface can initiate read ac- 
cesses to the 28F016XS at a faster rate if the SFI Con- 
figuration is less than 4. The rate at which the system 
logic can start read cycles is related to the SFI Configu- 
ration value. Refer to section 4.2 and 4.3 for the Alter- 
nating-A] and Same-Aj access rules. 



and Optimized SFI Configuration 


5.0 DESIGNING A FLEXIBLE 

INTERFACE FOR THE 28F016XS 
AND 28F016SA/SV 

Designers using the 28F016SA/SV now who are plan- 
ning a future upgrade to the 28F016XS can design sys- 
tem logic capable of interfacing to both components. 

Pinout similarities between the 28F016XS and 
28F016SA/SV support a single footprint suitable for 
both components (see Section 2.1). 

Supporting both components, the interface incorporates 
a state machine designed to control the 28F016SA and 
a second one to control the 28F016XS enhanced read 
interface. 

The device identifiers can be used to communicate 
whether the 28F016SA/SV or enhanced 28F016XS de- 
vice is in the system. The 28F016SA/SV and 
28F016XS have distinct device IDs. A jumper configu- 
ration can also be used to communicate 28F016SA/SV 
or 28F016XS presence. Figure 27 illustrates the jumper 
identification method. The status of the jumper con- 
trols state machines within interface logic and/or can 
be read by system software to set wait state registers 
within the CPU. 


Device ID or jumper identification can also be used to 
enable system software usage of 28F016XS’s Status 
Register enhancements and the Device Configuration 
Code. 
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Figure 27. Jumper Identification of 28F016SA/SV or 28F016XS Presence for Wait State Control 
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6.0 CONCLUSION 

The read performance of the 28F016XS far exceeds 
that of traditional flash memories. Up to three accesses 
at a time can execute in parallel. The 28F016XS’s syn- 
chronous interface makes it highly compatible with 
CPU and bus architectures that implement an Intel 


or linear burst or pipelined bus. This application note 
has provided the fundamental knowledge that will en- 
able designers to easily interface to the 28F016XS. For 
further information about the 28F016XS, consult refer- 
ence documentation for a more comprehensive under- 
standing of device capabilities and design techniques. 


ADDITIONAL INFORMATION 


Order Number 

Document/Tool 

290532 

28F016XS Datasheet 

297500 

“Interfacing the 28F016XS to the i960® Microprocessor Family” 

297504 

“Interfacing the 28F016XS to the lntel486TM Microprocessor Family” 

292146 

AP-600, “Performance Benefits and Power/Energy Savings of 28F016XS 
Based System Designs” 

292126 

AP-377, “16-Mbit Flash Product Family Software Drivers, 28F016SA/ 
28F01 6SV/28F01 6XS/28F01 6XD” 

297372 

16-Mbit Flash Product Family User’s Manual, 28F016SA/28F016SV/ 
28F01 6XS/28F01 6XD 

287508 

FlashBuilder Utility 

Contact Intel/Distribution 
Sales Office 

28F016XS Benchmark Utility 

Contact Intel /Distribution 
Sales Office 

28F016XSiBIS Models 

Contact Intel/Distribution 
Sales Office 

28F01 6XS VHDL/Verilog Models 

Contact Intel/Distribution 
Sales Office 

28F016XS Timing Designer Library Files 

Contact Intel/Distribution 
Sales Office 

28F016XS Oread and ViewLogic Schematic Symbols 


REVISION HISTORY 


Number 

Description 

001 

Original Version 
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APPENDIX A 

PLD EQUATIONS FOR CLOCK GENERATION AND 
SYNCHRONIZATION 


Clock Generation and Synchronization Using a 2x Clock Input 


Title 

Pattern 

Revision 

Author 

Company Name 

Date 


lx Clock Generations & Synchronization 
PDS 
1 

Example 

Intel 

5/26/94 


CHIP Clock_Generation_Circuit 85C220 


;Input assignments 

PIN CLK ; 2x CLK input frequency 

PIN RESET ; System RESET 

PIN SYSCLK ; Synchronized lx CLK output 

EQUATIONS 

SYSCLK :=/SYSCLK * /RESET 
SYSCLK. CLKF = CLK 


Clock Generation and Synchronization Using a 4x Clock Input 


Title 

lx Clock Generation and Synchronization 

Pattern 

PDS 

Revision 

1 

Author 

Example 

Company Name 

Intel 

Date 

5/26/94 

CHIP Clock_Generation_Circuit 85C220 

; Input assignments 

PIN CLK ; 

4x CLK input frequency 

PIN RESET ; 

System RESET 

PIN CLK2 

2x CLK output 

PIN SYSCLK ; 

Synchronized lx CLK output 

EQUATIONS 


CLK2 := /CLK2 


CLK2.CLKF = CLK 


SYSCLK := CLK2 

SYSCLK * /RESET 

+ /CLK2 * /SYSCLK * /RESET 

SYSCLK. CLKF = CLK 
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1.0 INTRODUCTION 

This application note discusses comparisons between 
the 28F016XD and DRAM memories. It also offers 
recommendations for determining compatibility be- 
tween the 28F016XD and DRAM controllers, and pro- 
vides suggestions for designing DRAM controllers with 
the 28F016XD in mind. The 28F016XD, an Intel 
16-Mbit Flash memory component, retains full soft- 
ware backwards-compatibility with the 28F016SA and 
adds the following features: 

• Multiplexed address/address interface with RAS# 
and CAS# control inputs 

• SmartVoltage technology 

• Internal YqC detection (the 28F016SA’s 3/5# pin 
is no longer needed) 

The 28F016XD leverages the existing DRAM control- 
ler in system designs and thereby minimizes the glue 
logic required to interface to flash memory. It is a 
16-Mbit device, organized as 1 Mbyte x 16. The 
28F016XD has ten row addresses and ten column ad- 
dresses, multiplexed on inputs A 0 -A 9 . 

The 28F016XD is fully non-volatile, giving it signifi- 
cant power and performance advantages over the tradi- 
tional disk-plus-DRAM alternative. The 28F016XD 
does not lose data when power is removed from the 
device. By permanently storing and executing programs 
from the 28F016XD, the inherently slow disk drive-to- 
DRAM load delay is eliminated. The 28F016XD also 
does not require refresh cycles (although the 
28F016XD will properly ignore any refresh cycles that 
are issued to it). 
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2.0 28F016XD COMPARISONS TO 
DRAM 

The following sections discuss specific areas of compar- 
ison between the 28F016XD and 16-Mbit (1M x 16) 
DRAMs in 60 ns and 70 ns speed bins. Please reference 
the 28F016XD datasheet for a full description of the 
28F016XD. 


2.1 Voltage and Current 
Specifications 

One obvious difference between the 28F016XD and 
DRAMs is that flash memory specifications reference a 
Vpp voltage, used with Data Write and Erase opera- 
tions. All Vpp-related voltage and current specifica- 
tions are unique to the 28F016XD. Note that the 
28F016XD offers the option to connect Vpp either to 
12.0V ± 5% or to 5.0V ± 10% (which may also be the 
Vcc operating voltage). The 28F016XD includes V<x 
current specifications during Data Write, Erase and 
Erase Suspend operations. These operations are unique 
to flash memory; therefore, these specifications are not 
found in DRAM datasheets. 

The 28F016XD specifies a Vlko (lockout) voltage. 
This specification relates to circuitry within the flash 
memory that protects it from unwanted data alteration. 
The Vlko specification is not found in DRAM data- 
sheets. The 28F016XD also provides the deep power- 
down mode, not available on DRAMs. 28F016XD 
read, standby (CMOS), RAS# -only refresh and 
CAS#-before-RAS# refresh currents are lower than 
those seen with DRAMs. 

A comparison between the 28F016XD and representa- 
tive 16-Mbit DRAMs. (valid at the time this application 
note was written) is shown in Table 1. 
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Table 1. 28F016XD Read, Standby and Refresh Currents Compared to 60-70 ns 16-Mbit DRAM 


Parameter 

DRAM 

(3.3V) 

28F016XD 

(3.3V) 

DRAM 

(5.0V) 

28F016XD 

(5.0V) 

Vcc Read Current 

90-150 mA 

70 mA 

90-160 mA 

120 mA 

Vcc Fast Page Mode Read Current 

80 mA 

60 mA 

70-140 mA 

110 mA 

Vcc Standby Current (CMOS Inputs) 

400 jllA 

130 ix A 

300 jliA 

130 fxA 

Vcc Standby Current (TTL Inputs) 

2 mA 

4 mA 

2 mA 

4 mA 

VccCAS#-Before-RAS# Refresh 
Current 

90-160 mA 

55 mA 

90-150 mA 

65 mA 

Vcc RAS#-Only Refresh Current 

90-150 mA 

70 mA 

90-160 mA 

120 mA 

Vcc Standby Current 
(Self Refresh Mode) 

5 mA 

55 mA 

5 mA 

65 mA 


Tables 2 and 3 show added and revised (as compared to 16-Mbit DRAM) 28F016XD DC specifications. 


Table 2. 28F016XD Added/Revised DC Characteristics 

Vcc = 3.3V ± 0.3V, T a = 0°C to + 70°C 


EH 

Parameter 


Typ 

Max 

Unit 

Test Condition 

Ice 1 

Vcc Word Read Current 

1 

50 

70 

mA 

Vcc = Vcc Max 
RAS#, CAS# = V| L 

RAS#, CAS#, Addr. Cycling @tRc = min 

Iout = 0 mA 

Inputs = TTL or CMOS 

ICC2 

Vcc Standby Current 

■ 


■ 

mA 

Vcc = Vcc Max 
RAS#, CAS#, RP# = V| H 
WP# = V| L or V| H 

Icc3 

Vcc RAS#-Only Refresh 
Current 

1 

50 

70 

mA 

Vcc = Vcc Max 
CAS# = V| H 
RAS# = V| L 

RAS#, Addr. Cycling @tRc = min 
Inputs = TTL or CMOS 

lec 4 

Vcc Fast Page Mode 
Word Read Current 

1 

40 

60 

mA 

Vcc = Vcc Max 

RAS#, CAS# = V| L 

CAS#, Addr. Cycling @tpc = min 

•out = 0 m A 

Inputs = V^or V|h 

Icc5 

Vcc Standby Current 


70 

130 

julA 

Vcc = Vcc Max 

RAS# CAS# RP# = V C c — 0.2V 
WP# = V C c ± 0.2V or GND ± 0.2V 

Icc6 

V C c CAS # -Before-R AS # 
Refresh Current 


40 

55 

mA 

v cc “ v cc Max 

CAS#, RAS# = V| L 

CAS#, RAS#, Addr. Cycling @tRc = min 

Inputs = TTL or CMOS 
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Table 2. 28F016XD Added/Revised DC Characteristics (Continued) 

Vcc = 3.3V ± 0.3V, T a = 0°C to +70°C 


Sym 

Parameter 

Min 

Typ 

Max 

Unit 

Test Condition 

Icc7 

Vcc Standby Current 
(Self Refresh Mode) 


40 

55 


Vcc = Vcc Max 
RAS#, CAS# = V| L 
l0UT = 0 m A 
Inputs = Vil or V|h 

■CCD 

Vcc Deep Power-Down 
Current 


2 

5 


RP# = GND ± 0.2V 

>ccw 

Vcc Word Write Current 


8 

12 

mA 

Word Write in Progress 
Vpp = 12.0V ± 5% 


8 

17 

mA 

Word Write in Progress 
Vpp = 5.0V ± 10% 

ICCE 

Vcc Block Erase Current 


6 

12 

mA 

Block Erase in Progress 
Vpp = 12.0V ± 5% 

Bj 

9 

17 

mA 

Block Erase in Progress 
Vpp = 5.0V ± 10% 

ICCES 

Vcc Erase Suspend 
Current 



B 

mA 

RAS#, CAS# - V| H 
Block Erase Suspended 

Ipps 

Vpp Standby/Read 
Current 


± 1 

±10 

jmA 

Vpp ^ Vcc 


30 

50 

jxA 

Vpp > Vcc 

IPPD 

Vpp Deep Power-Down 
Current 


0.2 

5 

juA 

RP# = GND ± 0.2V 


Vpp Word Write Current 


10 

15 

mA 

Vpp = 12.0V ± 5% 
Word Write in Progress 


15 

25 

mA 

Vpp = 5.0V ± 10% 
Word Write in Progress 

IPPE 

Vpp Block Erase Current 


B 



Vpp = 12.0V ± 5% 
Block Erase in Progress 


14 

20 



IPPES 

Vpp Erase Suspend 
Current 


30 

50 

ju,A 

Block Erase Suspended 

VppLK 

Vpp Erase/Write Lock 
Voltage 

0.0 


1.5 

V 


Vpp H 1 

Vpp during Write/ Erase 
Operations 

B 

5.0 


V 


Vppin2 

Vpp during Write/Erase 
Operations 

11.4 


12.6 

V 


Vlko 

Vcc Erase/Write Lock 
Voltage 

2.0 



V 
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Table 3. 28F016XD Added/Revised DC Characteristics 

Vcc = 5.0V ± 0.5V, T a = 0°C to +70°C 


Sym 

Parameter 



Max 

Unit 

Test Condition 

Ice 1 

Vcc Word Read Current 

1 

90 

120 

mA 

Vcc = v cc Max 
RAS#, CAS# = V||_ 

RAS#, CAS#, Addr. Cycling @tRc = min 

Iout = 0 m A 

Inputs = TTL or CMOS 



■ 

2 

■ 

mA 

Vcc = v cc Max 
RAS#, CAS#, RP# = V| H 
WP# = V| L or V, H 

>CC3 

Vcc R AS# -Only 
Refresh Current 

1 

90 

120 

mA 

Vcc = v cc Max 
CAS# = V, H 
RAS# = V| L 

RAS#, Addr. Cycling @tRc = min 
Inputs = TTL or CMOS 

ICC* 

Vcc Fast Page Mode 
Word Read Current 

1 

80 

110 


v cc = v cc Max 

RAS#, CAS# = V, L 

CAS#, Addr. Cycling @tpc = min 

Iqut = 0 mA 

Inputs = Vil or Vih 

Icc5 

Vcc Standby Current 

1 

70 



Vcc = v cc Max 

RAS#, CAS#, RP# = V C c ± 0.2V 
WP# = V cc ± 0.2V or 
GND ± 0.2V 

icc® 

Vcc CAS # -Before-RAS # 
Refresh Current 

1 

50 

65 

mA 

Vcc = Vcc Max 

CAS#, RAS# = V, L 

CAS#, RAS#, Addr. Cycling @tRc = min 

Inputs = TTL or CMOS 

ICC7 

Vcc Standby Current 
(Self Refresh Mode) 

1 

50 

65 

mA 

Vcc ~ Vcc Max 
RAS#, CAS# = V| L 
•out = 0 mA 
Inputs = V^or Vih 

ICCD 

Vcc Dee P Power-Down 
Current 


2 

5 

fxA 

RP# = GND ± 0.2V 

•ccw 

Vcc Word Write Current 

■ 


35 

mA 

Word Write in Progress 
V P p = 12.0V ± 5% 


25 

40 

mA 

Word Write in Progress 
V PP = 5.0V ± 10% 

•CCE 

Vcc Block Erase Current 


18 

25 

mA 

Block Erase in Progress 
V PP = 12.0V ± 5% 


20 

30 

mA 

Block Erase in Progress 
V PP = 5.0V ± 10% 

ICCES 

Vcc Erase Suspend 
Current 


2 

H 

mA 

RAS#, CAS# = V| H 
Block Erase Suspended 
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Table 3. 28F016XD Added/Revised DC Characteristics (Continued) 
Vcc = 5.0V ± 0.5V, T a = 0°C to +70°C 


Sym 

Parameter 

Min 

Typ 

Max 

Unit 

Test Condition 

ipps 

Vpp Standby/ Read 
Current 


± 1 

± 10 

jutA 

Vpp ^ Vcc 


30 

50 


Vpp > Vcc 


Vpp Deep Power-Down 
Current 




julA 

RP# = GND ± 0.2V 

Ippw 

Vpp Word Write Current 


■ 

12 

mA 

Vpp = 12.0V ± 5% 
Word Write in Progress 


17 

22 

n 

Vpp = 5.0V ± 10% 
Word Write in Progress 

IPPE 

Vpp Block Erase Current 



10 


Vpp = 12.0V ± 5% 
Block Erase in Progress 

* 

16 

20 


Vpp = 5.0V ± 10% 
Block Erase in Progress 

•PPES 

Vpp Erase Suspend 
Current 


30 

50 

juA 

Block Erase Suspended 

Vpp|_K 

Vpp Erase/Write Lock 
Voltage 

0.0 


1.5 

V 


VppHl 

Vpp during Write/Erase 
Operations 

4.5 

5.0 

5.5 

V 


Vppn2 

Vpp during Write/Erase 
Operations 

11.4 

12.0 

12.6 

V 


V|_KO 

Vcc Erase/Write Lock 
Voltage 

2.0 



V 



2.2 Timing Specifications 

28F016XD timing specifications are divided into the 
following categories in the datasheet. 

• Common Parameters 

• Read Cycle 

• Write Cycle 

• Read-Modify-Write Cycle 

• Fast Page Mode Cycle (including fast page mode 
read-modify-write) 

• Refresh Cycle (including refresh period) 

• Miscellaneous 

Many 28F016XD specifications match or improve on 
those of 60 ns and 70 ns DRAMs. Programming addi- 
tional DRAM controller wait states will accommodate 
most slower 28F016XD specs. 


In some cases, specifications that have identical values 
for both reads and writes to DRAM (such as RAS# 
and CAS# pulse widths and hold times), have been 
differentiated (separate specs for read and write) on the 
28F016XD. This differentiation both accurately reflects 
28F016XD functionality and improves the DRAM 
controller interface to 28F016XD, in some cases. 

Common Parameters 

Table 4 compares 28F016XD common parameters to 
DRAM, with incompatible specifications shaded for 
emphasis. Areas where the 28F016XD improves upon 
DRAM specifications are outlined in bold. Notice that 
the 28F016XD’s RAS# precharge time specification is 
much shorter than that for DRAM, while the 
28F016XD’s CAS# precharge time specification is 
slightly longer. Also, the 28F016XD’s row address hold 
time after RAS#, column address hold time after 
CAS# and CAS#-to-RAS# precharge time are slight- 
ly longer than those for DRAM. 
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Table 4. 28F016XD Common Parameters Compared to 60-70 ns 16-Mbit DRAM 


Symbol 

Description 

DRAM 

(3.3V) 

28F016XD 

(3.3V) 

DRAM 

(5.0V) 

28F016XD 

(5.0V) 

I tRp 

RAS# Precharge Time (min) 

40 ns 

10 ns 

40-50 ns 

10 ns 

tcp 

CAS# Precharge Time (min) 

10 ns 

15 ns 

10 ns 


1 

Row Address Set-Up Time (min) 

0 ns 

0 ns 

0 ns 

0 ns 

tRAH 

Row Address Hold Time (min) 

10 ns 

15 ns 

10 ns 


*ASC 

Column Address Set-Up Time (min) 


0 ns 

MEM 

0 ns 


Column Address Hold Time (min) 

10-15 ns 

20 ns 




CAS# to RAS# Precharge Time 
(min) 

5 ns 

10 ns 

5 ns 

10 ns 

l DZO 

OE# Delay Time from Data-In (min) 

0 ns 



0 ns 

*DZC 

CAS# Delay Time from Data-In 
(min) 

0 ns 





Read Cycle Specifications 

28F016XD read cycle specification incompatibilities 
compared to DRAM can be summarized in the follow- 
ing three points: 

• The 28F016XD’s access time from column address 
is longer than that for DRAM 

• The 28F016XD’s access time from OE# and CAS# 
active is longer than that for DRAM 


• The 28F016XD , s data tri-state delay from OE#, 
RAS# or CAS# inactive is longer than that for 
DRAM 

Table 5 compares 28F016XD read cycle specifications 
to DRAM, with incompatible specifications shaded for 
emphasis. Areas where the 28F016XD improves upon 
DRAM specifications are outlined in bold. 
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Table 5. 28F016XD Read Cycle Specifications Compared to 60-70 ns 16-Mbit DRAM 


Sym 

Description 

DRAM 

(3.3V) 

28F016XD 

(3.3V) 

DRAM 

(5.0V) 

28F016XD 

(5.0V) 

| ' : ■ " 

Random Read Cycle Time (min) 

110 ns 

105 ns 

110-130 ns 

95 ns 

lRAS{R) 

RAS# Pulse Width (Reads) (min) 

70 ns 

95 ns 

60-70 ns 

85 ns 

*CAS(R) 

CAS# Pulse Width (Reads) (min) 

15 ns 

40 ns 

15-20 ns 

35 ns 

tRCD(R) 

RAS# to CAS# Delay Time (Reads) (min) 

15-20 ns 

15 ns 

15-20 ns 


HISS 

RAS* Hold Time (Reads) (min) 

15 ns 


15-20 ns 

30 ns 

tcSH(R) 

CAS# Hold Time (Reads) (min) 

70 ns 


60-70 ns 

85 ns 

<RAC 

Access Time from RAS# (max) 

70 ns 

95 ns 

60-70 ns 

85 ns 

tCAC 

Access Time from CAS# (max) 

15 ns 

40 ns 

15-20 ns 

35 ns 

tAA 

Access Time from Column Address (max) 

30 ns 

75 ns 

30-35 ns 


*OEA 

OE# Access Time (max) 


40 ns 

15-20 ns 


tRCS 

Read Command Set-Up Time (min) 

j| -rj%i ' 

5 ns 

0 ns 

5 ns 

*RCH 

Read Command Hold Time Referenced to 
CAS# (min) 

0 ns 

0 ns 

0 ns 

0 ns 

*RRH 

Read Command Hold Time Referenced to 
RAS# (min) 

0 ns 

0 ns 

0 ns 

0 ns 

Siiil 

Column Address to RAS# Lead Time (min) 

75 ns 

15ns 


15 ns 

*GAt 

Column Address to CAS# Lead Time (min) 

30 ns 


30-35 ns 

65 ns 

*CLZ 

CAS# to Output in Low-Z (min) 

0 ns 

0 ns 

0 ns 

0 ns 

tOH 

Output Data Hold Time (min) 

0 ns 

0 ns 

0 ns 


*OHO 

Output Data Hold Time from OE# (min) 

0 ns 

0 ns 

0 ns 


*OFF 

Output Buffer Turn-Off Delay (max) 

13-15 ns 


15 ns 

30 ns 

tOEZ 

Output Buffer Turn-Off Delay Time from 

13-15 ns 


15-20 ns 

30 ns 

tCDD 

GAS# to Data in Delay Time (min) 

13-15 n$ 

30 ns 

15-20 ns 

30 ns 


/ 
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Write Cycle Specifications 


Read-Modify-Write Cycle Specifications 


Most 28F016XD write cycle specification incompatibil- 
ities compared to DRAM can be summarized by the 
fact that the 28F016XD CAS# active pulse width dur- 
ing writes is longer than the DRAM requirement. The 
28F016XD’s data hold time and WE# hold time from 
CAS# are also longer than that specified for 3.3V 
DRAM. Table 6 compares 28F016XD write cycle spec- 
ifications to DRAM, with incompatible specifications 
shaded for emphasis. Areas where the 28F016XD im- 
proves upon DRAM specifications are outlined in bold. 


28F016XD read-modify- write cycle specification in- 
compatibilities compared to DRAM are caused by a 
combination of the read and write cycle incompatibili- 
ties described earlier. Read-modify-cycles are common- 
ly used to “flip bits” in DRAM data tables and video 
memory. Given the flash memory usage model (read 
mostly, alter data infrequently), read-modify-write cy- 
cles to the 28F016XD will not occur in most applica- 
tions. 

Table 7 compares 28F016XD read-modify-write cycle 
specifications to DRAM, with incompatible specifica- 
tions shaded for emphasis. 


Table 6. 28F016XD Write Cycle Specifications Compared to 60-70 ns 16-Mbit DRAM 


Sym 

Description 

DRAM 

(3.3V) 

28F016XD 

(3.3V) 

DRAM 

(5.0V) 

28F016XD 

(5.0V) 

tflCfWI 

Random Write Cycle Time (min) 

110 ns 

90 ns 

110-130 ns 

75 ns 

tRAS(W) 

RAS# Pulse Width (Writes) (min) 

70 ns 




tCAS(W) 

CAS# Pulse Width (Writes) (min) 


umai 

15-20 ns 


tRCD(W) 

RAS# to CAS# Delay Time (Writes) (min) 

15 ns 


15 ns 

15 ns 

tRSH(W) 

RAS# Hold Time (Writes) (min) 

15 ns 

S^PSif 

15-20 ns 


tcSH(W) 

CAS# Hold Time (Writes) (min) 

70 ns 

80 ns 

60-70 ns 

H 

twcs 

Write Command Set-Up Time (min) 



0 ns 

0 ns 

tWCH 

Write Command Hold Time (min) 

8-10 ns 

15 ns 




Write Command Hold Time Referenced to 
RAS# (min) 

30-55 ns 

30 ns 

45 ns 

30 ns 

twp 

Write Command Pulse Width (min) 

15 ns 

15 ns 

15 ns 


tRWL 

Write Command to RAS# Lead Time (min) 

15-20 ns 

65 ns 

15-20 ns 

50 ns 

tCWL 

Write Command to CAS# Lead Time (min) 

15 ns 

65 ns 

15-20 ns 

50 ns 

*DS 

Data-In Set-Up Time (min) 

0 ns 

0 ns 

0 ns 

0 ns 

tDH 

Data-In Hold Time (min) 

10 ns 

15 ns 

10-15 ns 

15 ns 


Table 7. 28F016XD Read-Modify-Write Cycle Specifications Compared to 60-70 ns 16-Mbit 


Sym 

Description 

DRAM 

(3.3V) 

28F016XD 

(3.3V) 

DRAM 

(5.0V) 

28F016XD 

(5.0V) 

*RWC 

Read-Modify-Write Cycle Time 

155-160 ns 

200 ns 

150-185 ns 

175 ns 

tCWD 

CAS# to WE# Delay Time 

38-40 ns 

70 ns 

35-50 ns 

65 ns 


Column Address to WE# Delay Time 

53-55 ns 

105 ns 

50-65 ns 

100 ns 


OE# Command Hold Time 

0-15 ns 

15 ns 

15-20 ns 

15 ns 
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Fast Page Mode Cycle Specifications 

28F016XD fast page mode cycle specification incom- 
patibilities compared to DRAM have the same root 
causes as the read and write cycle incompatibilities de- 
scribed earlier. Fast page mode read-modify-write cy- 
cles to the 28F016XD will not occur in the majority of 
applications. 

Table 8 compares 28F016XD fast page mode cycle 
specifications to DRAM, with incompatible specifica- 
tions shaded for emphasis. Areas where the 28F016XD 
improves upon DRAM specifications are outlined in 
bold. 


Refresh Cycle Specifications 

Flash memory does not require refresh to retain stored 
data contents. However, by interfacing to a DRAM 
controller, it will automatically receive the same refresh 
cycles that DRAM receives. The 28F016XD supports 
all common refresh cycles; CAS#-before-RAS#, 
RAS#-only, hidden and self-refresh. In these modes, it 
will either drive or float the data bus just as a DRAM 
would. Refresh cycles have no other effect on 
28F016XD stored data. 

Table 9 compares 28F016XD refresh cycle specifica- 
tions to DRAM, with incompatible specifications shad- 
ed for emphasis. Areas where the 28F016XD improves 
upon DRAM specifications are outlined in bold. 


Table 8. 28F016XD Fast Page Mode Cycle Specifications Compared to 60-70 ns 16-Mbit DRAM 


Sym 

Description 

DRAM 

(3.3V) 

28F016XD 

(3.3V) 

DRAM 

(5.0V) 

28F016XD 

(5.0V) 


Fast Page Mode Cycle Time (Reads) (min) 

35-45 ns 

75 ns 

35-45 ns 

H ns 

1 - •••"<* 

Fast Page Mode Cycle Time (Writes) (min) 

35-45 ns 

80 ns 

35-45 ns 

66 m 

tfiASP(R) 

RAS# Puls© Width (Reads) (min) 

60-70 ns 

96 ns 

60 ns 

■"./BS.m" 

tRASP(W) 

RAS# Pulse Width (Writes) (min) 

60-70 ns 

BOns ■ 

60 n$ 

rnm 

*CPA 

Access Time from CAS# Precharge (max) 

35-4008 

85 ns 

35—40 ns 

70 ns 

tCPW 

Wi * Delay Time from CAS # Precharge (min) 

10 ns 

0 ns 

10ns 

0 ns 

tCPRH(R) 

RAS# Hold Time from CAS# Precharge 
(reads) (min) 

35 ns 

75 ns 

35—45 US 

65 ns 

tCPRH(W) 

RAS# Hold Time from CAS# Precharge 
(writes) (min) 

35 ns 

80 ns 

35-45 ns 

65 ns 

IPRWC 

Fast Page Mode Read*Modify-Write Cycle 
Time (min) 

85 ns 

170 ns 

85-100 ns 

145 ns' 
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Table 9. 28F016XD Refresh Cycle Specifications Compared to 60-70 ns 16-Mbit DRAM 


Sym 

Description 

DRAM 

(3.3V) 

28F016XD 

(3.3V) 

DRAM 

(5.0V) 

28F016XD 

(5.0V) 

tCSR 

CAS# Set-Up Time (CAS #-before-RAS # 
: Refresh) (min) • 

6 ns 

10 ns 

10 ns 

10 ns 

*CHR 

CAS# Hold Time (CAS#-before-RAS# 
Refresh) (min) 

10-15 ns 

10 ns 

10-20 ns 

10 ns 

tWRP 

WE# Set-Up Time (CAS#-before-RAS# 
Refresh) (min) 

10 ns 

10 ns 

10 ns 

||BQ|| 

*WRH 

WE# Hold Time (CAS#-before-RAS# 
Refresh) (min) 




10 ns 

■HI 

RAS# Precharge to CAS# Hold Time (min) 

5 ns 

10 ns 

0-10 ns 

10 ns 

tRASS 

RAS# Pulse Width (Self-Refresh Mode) (min) 

100 julS 

0 ns 

100]as 

0 ns 

tRPS 

RAS# Precharge Time (Self-Refresh Mode) 
(min) 

40 ns 

10ns 

40-50 ns 

10 ns 

tCPN 

CAS# Precharge Time (Self-Refresh Mode) 
(min) 

10 ns 

10 ns 

10 ns 

10 ns 

B81I 

CAS# Hold Time (Self-Refresh Mode) (min) 

600 ns 

0 ns 

600 ns 

0 ns 

ItREF 

Refresh Period (max) 

16ms 

GO 

16 ms 

oo 


Miscellaneous Specifications 

The 28F016XD documentation contains timing specifi- 
cations not found in DRAM datasheets. These timings 
relate to the 28F016XD’s additional control inputs/ 


Table 10. 28F016XD Added/Revised AC Timings 

Vcc = 3.3V ± 0.3V, T a = 0°C to + 70°C 


Versions 

28F016XD-95 

Parameter 

Min 

Max 

Unit 

RP# High to RAS# going low 

480 


ns 

RP# Set-Up to WE# going low 

480 


ns 

Vpp Set-Up to CAS# high at end of write cycle 

100 


ns 

WE# High to RY/BY# going low 


100 

ns 

RP# Hold from Valid Status Register Data and RY/BY# high 

0 


ns 

Vpp Hold from Valid Status Register Data and RY/BY# high 

0 


ns 

Vcc at 3.0V (minimum) to RP# high 

2 


JLtS 


outputs and voltages (WP#, RP#, RY/BY#, Vpp) as 
well as minimum Data Write and Erase durations. Ta- 
bles 10 and 11 show these additional specifications, at 
3.3V Vcc an d 5.0V Vcc respectively. 


MKi 0MIF®Q3[Mr0®M 
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Table 10. 28F016XD Added/Revised AC Timings (Continued) 

Vcc = 3.3V ± 0.3V, Vpp = 5.0V ± 0.5V, T A = 0°C to + 70°C 


Sym 

Parameter 


Typ 




Page Buffer Word Write Time 

TBD 

12.1 


fXS 

tWHRHl 

Word Write Time 

TBD 

24.0 

TBD 

fXS 

*whrh3 

Block Write Time 

TBD 

0.8 

TBD 

sec 


Block Erase Time 


1.4 

TBD 

sec 


Full Chip Erase Time 


44.8 

TBD 

sec 


V cc = 3.3V + 0.3V, Vpp = 12.0V ± 0.6V, T A = 0°C to + 70°C 


Sym 

Parameter 

Min 

Typ 

Max 

Units 


Page Buffer Word Write Time 

TBD 

4.4 

TBD 

fXS 

tWHRH 1 

Word Write Time 

5 

9 

TBD 

fXS 

tWHRH 3 

Block Write Time 

TBD 

0.3 

1.0 

sec 


Block Erase Time 

0.3 

0.8 

10 

sec 


Full Chip Erase Time 

TBD 

25.6 

TBD 

sec 


Table 11. 28F016XD Added/Revised AC Timings 

V cc = 5.0V ± 0.5V, T a = 0°C to + 70°C 


Versions 

28F016XD-85 

Parameter 

Min 

Max 

Unit 

RP# High to RAS# going low 

300 


ns 

RP# Set-Up to WE# going low 

300 


ns 

Vpp Set-Up to CAS# high at end of write cycle 

100 


ns 

WE# High to RY/BY# going low 


100 

ns 

RP# Hold from Valid Status Register Data and RY/BY# High 

0 


ns 

Vpp Hold from Valid Status Register Data and RY/BY# High 

0 


ns 

Vcc ^ 4.5V (minimum) to RP# High 

2 


JJLS 
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Table 11. 28F016XD Added/Revised AC Timings (Continued) 
V cc = 5.0V ± 0.5V, V PP = 5.0V ± 0.5V, T A = 0°C to + 70°C 


Sym 

Parameter 

Min 

Typ 

Max 

Units 


Page Buffer Word Write Time 

TBD 

12.1 

TBD 

/AS 

twHRHl 

Word Write Time 

TBD 

16 

TBD 

/AS 

*WHRh3 

Block Write Time 

TBD 

0.6 

TBD 

sec 


Block Erase Time 

TBD 

1.0 

TBD 

sec 


Full Chip Erase Time 

TBD 

32.0 

TBD 

sec 


V C c = 5.0V ± 0.5V, V PP = 12.0V ± 0.6V, T A = 0°C to + 70°C 


Sym 

Parameter 

Min 

Typ 

Max 

Units 


Page Buffer Word Write Time 

TBD 

4.1 

TBD 

/AS 

tWHRH 1 

Word Write Time 

4.5 

6 

TBD 

/AS 

*WHRh3 

Block Write Time 

TBD 

0.2 

1.0 

sec 


Block Erase Time 

0.3 

0.6 

10 

sec 


Full Chip Erase Time 

TBD 

19.2 

TBD 

sec 


2.3 Package and Pinout 

Although the 28F016XD includes all necessary inputs 
and outputs for interfacing to DRAM controllers, its 
pinout and package do not match those of DRAMs but 
instead evolve from other 16-Mbit Intel flash memories. 
The 28F016XD uses a 56-lead TSOP package, with 
pinout shown in Figure 1 and package dimensions 
shown in Figure 2. 

Comparable 1M x 16 (16-Mbit) DRAMs use two pack- 
ages, a 42-lead SOJ and 44-lead TSOP. Examples of 
these DRJ\M pinouts are shown in Figures 3 and 4. 


Table 12 summarizes pinout comparisons between the 
28F016XD in 56-lead TSOP and various DRAM pack- 
age options. 

If compatibility between the 28F016XD and DRAM 
“footprints” is desired, 28F016XD flash memories can 
be placed on DRAM-compatible SIMMs. Please see 
the Additional Information section of this application 
note for documentation that covers this topic in more 
detail. 
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Figure 1. 28F016XD 56-Lead TSOP Type I Pinout Configuration 
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Table 12. 28F016XD Pinout Compared to 16-Mbit DRAM 


Pin Name 

42-Lead SOJ DRAM 
Pin Number 

44-Lead TSOP DRAM 
Pin Number 

56-Lead TSOP 
28F016XD Pin 
Number 

Vcc 

1,6,21 

1,6, 22 

9,31,37, 43 

Vpp 

— 

— 

15 

GND 

22, 37, 42 

23, 39, 44 


DQ 0 

2 

2 

33 

DQi 

3 

3 

35 

DQ2 

4 

4 

38 

dq 3 

5 

5 

40 

dq 4 

7 

7 

44 

dq 5 

8 

8 

46 

dq 6 

9 

9 

49 

DQy 

10 

10 

51 

dq 8 

33 

35 

34 

DQg 

34 

36 

36 

O 

O 

0 

35 

37 

39 

DQ11 

36 

38 

41 

DQ-|2 

38 

40 

45 

DQ13 

39 

41 

47 

DQ14 

40 

42 

50 

DQ15 

41 

43 

52 

A 0 

17 

18 

28 

A! 

18 

19 

27 

a 2 

19 

20 

26 

A 3 

20 

21 

25 

a 4 

23 

24 

24 

a 5 

24 

25 

8 

A 6 

25 

26 

7 

a 7 

26 

27 

6 

A 8 

27 

28 

5 

Ag 

28 

29 

4 

WE# 

13 

14 

55 


OMF@(^[iM]rO©M 
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Table 12. 28F016XD Pinout Compared to 16-Mbit DRAM (Continued) 


Pin Name 

42-Lead SOJ DRAM 
Pin Number 

44-Lead TSOP DRAM 
Pin Number 

56-Lead TSOP 
28F016XD Pin 
Number 

OE# 

29 

30 

54 

RAS# 

14 

15 

10 

CAS# 

— 

— 

11 

CASL# 

31 

32 

— 

CASH# 

30 

31 

— 

RP# 

— 

— 

16 

RY/BY# 

— 

— 

53 

WP# 

11 

— 

55 

NC 

11,12,15,16, 32 

11,12,13,33,34 

i 

1,3,12,13,17,18,19, 
20, 22, 23, 29, 30, 32 


2.4 Capacitance 

28F016XD input/output capacitance specifications 
compared to 16-Mbit DRAMs are shown in Table 13. 


Table 13. 28F016XD Capacitance Specifications Compared to 16-Mbit DRAM 


Symbol 

Description 

ES2I 

28F016XD 

(3.3V) 

DRAM 

(5.0V) 

28F016XD 

(5.0V) 

C|N 

Capacitance Looking into an Address Pin 

El 

8 pF 

5-6 pF 

8 pF 

CcTRL 

Capacitance Looking into a Control Pin 

EBB 

8 pF 

7 pF 

8 pF 

Gout 

Capacitance Looking into an Output Pin 


12 pF 

7-10 pF 

12 pF 


3.0 28F016XD INTERFACING TO 
DRAM CONTROLLERS 

Section 2.0 identified areas of compatibility and incom- 
patibility between the 28F016XD and DRAMs. This 
section, on the other hand, discusses how to determine 
the 28F016XD’s ability to interface with an already-de- 
signed DRAM controller. Section 3.0 is divided into 
three topics: 

• Configurable Specification Interfacing 

• Non-Configurable Specification Interfacing 

• Additional 28F016XD Interface Hardware 

Figure 5 shows an example interface between the 
28F016XD and system CPU via a standard DRAM 


3-160 


controller. This interface diagram will be used in the 
example calculations to follow. The DRAM controller 
provides no RD# output, so the 28F016XD’s OE# 
input is grounded. CAS# low in conjunction with ac- 
tive WR# is decoded as a write, overriding OE#. Pari- 
ty is disabled within the DRAM controller (at least for 
the banks in which the 28F016XD resides). 

Note that data buffering is done by the DRAM control- 
ler itself. In designs that do not provide this capability 
or in very high chip count arrays, transceivers can be 
used to minimize CPU local bus or DRAM bus loading 
by the DRAM/28F016XD memory subsystem. When 
determining the need for isolation transceivers, keep in 
mind that the 28F016XD input and output capacitance 
are higher than those for comparable DRAM (as ex- 
plained in Section 2.4). 
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Figure 5. Example DRAM Controller Interface to the 28F016XD 


Please reference Figures 6 and 7 for example DRAM 
controller waveforms, which will also be used in calcu- 
lations to follow. These diagrams show timings for a 
lx-clock driven (i.e., 25 or 33 MHz) system. For a 
2x-clock driven (i.e., 50 or 66 MHz) DRAM controller 
waveform, the main difference is in the clock period 
shown; CLK is halved within the DRAM controller to 
generate its signals. The X-Y-Y-Y format shows how 
many lx or 2x clock cycles are used for the first data 
access (including RAS# transitions) and subsequent 
accesses (toggling CAS# in fast page mode). 

The examples assume that both minimum and maxi- 
mum delays after CLK edges are provided for RAS#, 
CAS# and addresses. If minimum delays are not given 
in DRAM controller documentation, contact the ven- 
dor for more information. Alternatively, a 0 ns delay 
can be assumed, although this may impact interface to 
the 28F016XD. 

X-Y-Y-Y wait-state formats are often shown in con- 
junction with a clock frequency (i.e., 4-2-2-2 at 
33 MHz) in DRAM controller datasheets. This does 


not mean that this wait-state setting is unique to the 
CLK shown; wait-state settings are frequency-indepen- 
dent from the DRAM controller point of view. The 
wait-state format/clock frequency combination simply 
indicates a standard DRAM speed bin setting (i.e., 60 
or 70 ns DRAM). For DRAM controllers with mini- 
mal flexibility in wait-state configuration, the 
28F016XD may still be interface-compatible, albeit at a 
slower frequency. 

The following sections will make the assumptions listed 
below: 

• The DRAM controller will not generate read-modi- 
fy-write cycles to the 28F016XD. 

• Only areas in which 28F016XD specifications ex- 
ceed those for DRAM will be discussed. Compati- 
bility is assumed when 28F016XD specifications 
match or improve upon DRAM specifications. 

• Signal transition times (rise and fall) will not be in- 
cluded in example calculations. 




3-161 





AP-384 



3-162 


















AP-384 


iny 


3.1 Configurable Specification 
Interfacing 

Many 28F016XD specification incompatibilities (with 
respect to DRAM) can be resolved by programming 
the DRAM controller for additional wait states. Most 
DRAM controllers have a programmable CAS# low 
time (and some can be programmed with different set- 
tings for reads and writes). Additionally, some DRAM 


tCAC 

This specification gives the timing delay from CAS# 
active to valid data during memory reads. When calcu- 
lating the required tcAC setting needed to interface the 
28F016XD to the system CPU, include not only the 
raw memory access time but also the propagation delay 
of the DRAM controller buffers or transceiver logic, 
and the data set-up time to CLK of the CPU. 

The example shows that at 33 MHz, a 5-3-3-3 DRAM 
controller setting will accommodate the 28F016XD 
tcAC access time, buffer/transceiver propagation delay 
and CPU set-up time requirements. 


controllers also allow the RAS#-to-CAS# delay to be 
programmed. Both of these settings automatically ex- 
tend the RAS# low time. 

Focus on the following specifications when determining 
proper DRAM controller configuration for the 
28F016XD. With the exception of specifications dis- 
cussed in Section 3.2, all other specification incompati- 
bilities between the 28F016XD and DRAM will be sat- 
isfied if these four requirements are met. 

Example: 

t 4 = 5 ns (max) 

tCLK = 30 ns (33 MHz CLK) 

tpROP = 8 ns (max) 

tSETUP = 2 ns (min) 

tCAC (required) = (tcLK ~ 4) ~ t PRO p “ tsETUP 
+ (wait states) 


DRAM Controller 

DRAM Controller 

28F016XD t C AC 

28F016XD t C AC 

tcAC Requirement 

*cac Requirement 

Specification 

Specification 

# (4-2-2-2) 

(5-S-3-3) 

(5.0V V CC ) 

(3.3V V CC ) 

15 ns 

45 ns 

35 ns 

40 ns 


*AA 

This specification gives the timing delay from column 
address stable to valid data during memory reads. The 
28F016XD is an enhanced fast page mode memory; a 
read access begins when column address is stable versus 
waiting to begin until CAS# transitions low. DRAM 
controllers that can provide a stable address in advance 
of CAS#*s active transition will interface to the 
28F016XD with minimal additional wait states. 

The example shows that at 33 MHz, a 5-3-3-3 DRAM 
controller setting will accommodate the 28F016XD 
tAA access time, buffer/transceiver propagation delay 
and CPU set-up time requirements. 


Example: 

t 3 = 5 ns (max) 

tCLK = 30 ns (33 MHz CLK) 

tpROP = 8 ns (max) 

tsETUP = 2 ns (min) 

tAA (required) = (tcLK + tcLK t 3 ) - t PRO p 
— tsETUP + ( wa it states) 


DRAM Controller tAA 


28F016XD tAA 

28F016XD t AA 

Requirement 


Specification 

Specification 

(4-2-2-2) 


(5.0V V CC ) 

(3.3V V CC ) 

45 ns 

75 ns 

65 ns 

75 ns 


\ 
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*RAC 

This specification gives the timing delay from RAS# 
active to valid data during memory reads. 

The example shows that at 33 MHz, a 5-3-3-3 DRAM 
controller setting will accommodate the 28F016XD 
tRAC access time, buffer/transceiver propagation delay 
and CPU set-up time requirements. 


*CAS(W) 

This specification defines the minimum CAS# -active 
time required to successfully write a command to the 
28F016XD or to write data to 28F016XD’s Page Buff- 
er. 

The example shows that at 33 MHz, a 5-3-3-3 DRAM 
controller setting will accommodate the 28F016XD 
tcAS(W) time at 5.0V Vco but that a 6-4-4-4 setting or 
lower CLK frequency will be required at 3.3V Vco 


3.2 Non-Configurable Specification 
Interfacing 

Some 28F016XD specification incompatibilities (with 
respect to DRAM) cannot be resolved by configuring 
DRAM controller wait states. Determining DRAM 
controller compatibility with these specifications is cru- 
cial for ensuring the ability to interface to the 
28F016XD. 


Example: 

t 2 = 5 ns (max) 

tCLK = 30 ns (33 MHz CLK) 

tpROP = 8 ns (max) 

tSETUP = 2 ns (min) 

tRAC (required) = (t C LK + tcLK + tcLK “ t 2 ) 
— tpRQp — tsETUP + (wait states) 


Example: 

t 4 = 5 ns (max) 

ts = 2 ns (min) 

tCLK = 30 ns (33 MHz CLK) 

tCAC(W) (required) = (t C LK + t 5 - t 4 ) + (wait 
states) 


Focus on the following non-configurable specifications 
when determining proper DRAM controller configura- 
tion for 28F016XD. In combination with the configura- 
ble specifications discussed in Section 3.1, all other 
specification incompatibilities between the 28F016XD 
and DRAM will be satisfied if these requirements are 
met. 


DRAM Controller 

DRAM Controller 

28F016XD t RA c 

28F016XD t RA c 

tRAC Requirement 

tRAC Requirement 

Specification 

Specification 

(4-2-2-2J 

(5-3-3-3) 

(5.0V V CC ) 

(3.3V V CC ) 

75 ns 

105 ns 

85 ns 

95 ns 


DRAM Controller 
tcAS(W) Requirement 
(4-2-2-2) 

DRAM Controller 
tcAS(W) Requirement 
(5-3-3-3) 

28F016XD t C AS(W) 
Specification 
(5.0VVcc) 

28F016XD tcAS(W) 
Specification 
(3.3V V CC ) 

27 ns 

57 ns 

50 ns 

65 ns 
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t C AH Example: 

t 4 = 5 ns (max) 

This specification describes the minimum column ad- t 8 = 2 ns (min) 

dress hold after CAS# active transitions. tcLK = 30 ns (33 MHz CLK) 

tCAH (required) = t C LK + t 8 - t 4 

In this example, the 28F016XD successfully interfaces 
to the DRAM controller. 


DRAM Controller tcAH 
Requirement 

28F016XD tcAH Specification 
(5.0V V CC ) 

28F016XD tcAH Specification 
(3.3V V CC ) 

27 ns 

20 ns 

20 ns 


t C p 

This specification describes the minimum CAS# -high 
(inactive) time requirement between consecutive access- 
es to the 28F016XD. 


Example: 

t 4 = 2 ns (min) 

ts = 5 ns (max) 

tcLK = 30 ns (33 MHz CLK) 

t C p (required) = tcLK + t 4 - t 5 


In this example, the 28F016XD successfully interfaces 
to the DRAM controller. 


DRAM Controller top 
Requirement 

28F016XD tcp Specification 
(5.0V V CC ) 

28F016XD tcp Specification 
(3.3V V CC ) 

27 ns 

15 ns 

1 5 ns 


*CRP 

This specification describes the minimum CAS# -high 
(inactive) to RAS#-low (active) precharge time re- 
quirement between consecutive accesses to the 
28F016XD. 


Example: 

t 2 = 2 ns (min) 

ts = 5 ns (max) 

tCLK = 30 ns (33 MHz CLK) 

tCRP (required) = tcLK + *2 - 


In this example, the 28F016XD successfully interfaces 
to the DRAM controller. 


DRAM Controller tcRP 
Requirement 

28F016XD tcRP Specification 
(5.0V V CC ) 

28F016XD t C RP Specification 
(3.3V V CC ) 

27 ns 

10 ns 

10 ns 
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tRAH 

This specification describes the minimum row address 
hold after RAS# active transitions. 

In this example, the 28F016XD successfully interfaces 
to the DRAM controller. 


Example: 

t 2 = 5 ns (max) 

t 3 = 2 ns (min) 

tCLK = 30 ns (33 MHz CLK) 

tRAH (required) = t C LK + t 3 - t 2 


DRAM Controller tRAH 
Requirement 

28F016XD tRAH Specification 
(5.0V V CC ) 

28F016XD tRAH Specification 
(3.3V V CC ) 

27 ns 

15 ns 

15 ns 


*RCS 

This specification describes the minimum WE# inac- 
tive setup time to CAS# for reads. 

Most DRAM controllers available today include a 
RD# output and support early write cycles. In these 

tOFF» t()EX and l CDD 

toFF specifies the maximum delay from CAS# inactive 
until the 28F016XD outputs transition to high-Z. toEX 
is similar, and specifies delay from OE# inactive. tcDD 
specifies the minimum delay from CAS# inactive until 
the DRAM controller can drive the data bus (for writes 
to memory). These specifications are closely related to 
each other. 

‘WCH 

This specification defines the minimum WE# hold 
time after CAS# active transitions. The vast majority 
of DRAM controllers will hold WE# active through- 
out the CAS# -low interval, automatically satisfying 
twcH- F° r those that do not, the example below shows 
how to calculate the timing relationship between 
CAS# and WE#. When determining specification t$, 
ensure that it is being specified from the same CLK 
edge as t 4 , or add appropriate t<xK periods to adjust t$ 
appropriately. 

In this example, the 28F016XD successfully interfaces 
to the DRAM controller. 


cases, WE# is transitioned inactive within a write, as 
soon as CAS# is activated “low”, or at the conclusion 
of a write. This guarantees that WE# will be inactive 
“high” in advance of subsequent reads. 


The simplest method of ensuring that system designs 
accommodate these specifications is to insert a software 
delay between a read from the 28F016XD and a write 
to memory in the same bank. This gives the 28F016XD 
adequate time to disable its outputs and avoids data bus 
contention. Alternatively, transceivers (with faster out- 
put float times) can be placed between 28F016XD data 
outputs and the DRAM controller data bus. 


Example: 

t 4 — 5 ns (max) 

t6 = 20 ns (min) 

tCLK = 30 ns (33 MHz CLK) 

twCH (required) = t 6 - t 4 


DRAM Controller twcH 
Requirement 

28F016XD twcH Specification 
(5.0V V CC ) 

28F016XD twcH Specification 
(3.3V V CC ) 

15 ns 

15 ns 

15 ns 
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tDH 

This specification defines the minimum data hold time 
after CAS# active transitions. The example below 
shows how to calculate the timing relationship between 
CAS# and WE#. When determining specification t7, 
ensure that it is being specified from the same CLK 
edge as 1 4, or add appropriate tcLK periods to adjust t7 
appropriately. 


Example: 

t4 = 5 ns (max) 

t7 = 20 ns (min) 

tCLK = 30 ns (33 MHz CLK) 

tDH (required) = X-j — 


In this example, the 28F016XD successfully interfaces 
to the DRAM controller. 


DRAM Controller tpH 
Requirement 

28F016XD tpH Specification 
(5.0V V CC ) 

28F016XD tcH Specification 
(3.3V V CC ) 

15 ns 

15 ns 

15 ns 


3.3 Additional Circuitry Required to 
Interface to the 28F016XD 

A properly-designed system requires minimal circuitry 
beyond the DRAM controller to interface to the 
28F016XD. The following sections discuss this circuit- 
ry, much of which is optional. 

Vpp Generation 

As discussed in Section 2.1, the 28F016XD requires a 
Vpp voltage for Data Write and Erase operations. Valid 
Vpp voltage ranges are 5.0V ± 10% (Vppnl) and 
12.0V ± 5% (Vppjj2). In a 5.0V system design, the 
Vpp voltage can be supplied by the same power supply 
that provides Vcc and switched for write protection 
purposes. Alternatively, Figure 8 shows an example cir- 
cuit that generates 12.0V from a 5.0V or 3.3V input. 

See the Additional Information section of this docu- 
ment for information on AP-357, which covers the 
topic of 12.0V generation in great detail. 


RP# Input 

RP# (Reset/Power-Down) has several functions: 

• Resets internal automation 

• Transitions the 28F016XD to deep power-down 
mode 

• Provides write protection during system power tran- 
sitions 

Circuitry like that shown in Figure 9 should be used to 
control RP#. Application Note AP-374 covers the 
topic of flash memory write protection in great detail; 
see the Additional Information section of this docu- 
ment. GPIO general purpose input/output (for power 
management) and system RESET # control are option- 
al depending on the application. 
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Figure 9. RP# Control for the 28F016XD 
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WP# Input 

WP# allows selective lock of blocks within the 
28F016XD to prevent unwanted data alteration. If this 
functionality is desired, it can be implemented via 
GPIO control. Otherwise, WP# can be disabled by 
connecting it to Vco 

RY/BY# Output 

RY/BY # provides hardware indication of the status of 
internal 28F016XD automation, and can be connected 
to a system interrupt input if desired. Alternatively, 


the 28F016XD Status Registers provide identical infor- 
mation and can be read by system software to deter- 
mine completion of Data Write and/or Erase. 

Parity 

The 28F016XD, unlike some DRAMs, does not pro- 
vide parity information. If parity is required for the 
DRAM subsystem and the DRAM controller provides 
only global parity enable/disable (or requires parity), 
external circuitry such as a PAL or dedicated logic chip 
can supply parity bits during 28F016XD reads. See 
Figure 10 for an example. 



Figure 10. External Parity Generation 
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4.0 DESIGNING 28F016XD 
COMPATIBILITY AND 
OPTIMIZATION INTO DRAM 
CONTROLLERS 

Timing Analysis 

Section 2.2 discussed areas of timing incompatibility 
between the 28F016XD and 16-Mbit DRAMs. DRAM 
controllers should provide a range of wait state configu- 
rations to ensure that they operate with the 28F016XD 
at all required GLK frequencies. Additionally, the non- 
configurable specifications of Section 3.2 should be 
closely reviewed. Finally, for reads, DRAM controllers 
that provide the column address in advance of CAS# 
will interface to the 28F016XD with a minimum of 
additional wait states. 


Per-Bank Parity and Wait State Control 

The 28F016XD is not subject to the same alpha particle 
“soft errors’* that affect DRAM, so it does not provide 
parity data bits. If parity checking is desired for the 
DRAM subsystem, per-bank parity control allows the 
28F016XD and DRAM to be placed in separate con- 
troller banks. Parity can be enabled for those banks 
containing DRAM and disabled for banks containing 
the 28F016XD. 


intel 

Section 2.2 also revealed that read and write timings for 
the 28F016XD are slower than those for DRAM at 
high CLK frequencies. Per-bank wait state control al- 
lows the 28F016XD and DRAM to be placed in sepa- 
rate banks and individually configured to optimize per- 
formance of each. 

Fast RAS# Precharge 

The 28F016XD does not require precharge between ac- 
cesses when RAS# is toggled. Therefore, its tRp 
(RAS# precharge time) specification is much shorter 
than that required for DRAM (10 ns for the 
28F016XD vs. 40-50 ns for DRAM). A DRAM con- 
troller with configurable RAS# precharge delay can 
exploit this 28F016XD advantage. 

Refresh Disable 

The 28F016XD also does not require refresh to retain 
stored data contents. Per-bank refresh enable/disable 
or refresh enable/disable on an address range basis will 
eliminate unnecessary cycles to the 28F016XD, opti- 
mizing performance and lowering power consumption. 
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5.0 CONCLUSION 

This application note has discussed comparisons be- 
tween the 28F016XD and DRAM, compatibility 
between the 28F016XD and DRAM controllers, and 
optimization of new DRAM controllers for the 


28F016XD. Consult reference documentation for a 
more complete understanding of compatibility and de- 
vice capabilities. Please contact your local Intel or dis- 
tribution sales office for more information on Intel’s 
flash memory products. 


ADDITIONAL INFORMATION 


Order Number 

Document/Tool 

290533 

28F016XD DRAM-Interface Flash Memory Datasheet 

297372 

“16-Mbit Flash Product Family User’s Manual, 
28F01 6SA/28F01 6SV/28F01 6XS/28F01 6XD” 

292152 

AB-58 “28F016XD-Based SIMM Designs” 

292092 

AP-357 “Power Supply Solutions for Flash Memory” 

292123 

AP-374 “Flash Memory Write Protection Techniques” 

292126 

AP-377 “16-Mbit Flash Product Family Software Drivers, 
28F01 6SA/28F01 6SV/28F01 6XS/28F01 6XD” 

297508 

FlashBuilder Utility 

Contact Intel/ Distribution 
Sales Office 

28F016XD Benchmarking Utility 

Contact Intel/Distribution 
Sales Office 

28F016XD iBIS Models 

Contact Intel/ Distribution 
Sales Office 

28F016XD VHDL/Verilog Models 

Contact Intel/Distribution 
Sales Office 

28F016XD Timing Designer Library Files 

Contact Intel/Distribution 
Sales Office 

28F016XD Oread and ViewLogic Schematic Symbols 
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1.0 INTRODUCTION 




Figure 1. High System Performance Depends on Optimized Operation of All Sub-Systems 


Microprocessors today have achieved tremendous lev- 
els of performance, with year-to-year gains more expo- 
nential than linear in nature. Unfortunately, computer 
systems have not achieved similar performance leaps. 
Their performance ties not only to the CPU, but is a 
composite of all computing subsystems; memory, mass 
storage, video, networking, etc. See Figure 1 for a block 
diagram of the traditional Von Neumann-based com- 
puting architecture. 


Memory, the first-line link between the CPU and the 
mass storage subsystem, feeds the microprocessor with 
code and data necessary to do useful work. In this ca- 
pacity, memory directly impacts system performance. 
Until the CPU receives the code or data it needs, the 
system stalls. 
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Figure 2. Microprocessor Performance Dramatically Improves with Each New Generation 


Figure 2 charts microprocessor performance gains over 
the last two decades, with Figure 3 showing compara- 
tive SRAM and DRAM read performance gains for 
the same time frame. The difference in the slopes of the 
three curves is obvious and striking. To optimize the 
CPU-memory interface and minimize CPU perfor- 


mance impact, system designers are resorting to more 
and more complex multi-memory architectures (see 
Figure 4 for an example). This complexity results in 
added system cost, higher power consumption, lower 
reliability and ruggedness, larger size and greater 
weight. 
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Figure 3. Memory Read Performance Improvements Lag behind Those of Microprocessors 


What can be done to solve this apparent paradox? How 
can a system designer address higher performance 
while simultaneously simplifying the memory architec- 
ture, lowering cost, reducing power consumption, in- 
creasing reliability and decreasing form factor/weight? 
The answer lies not in evolutionary, incremental 


improvements to existing system architectures, but in 
revolutionary new architectures based on an equally 
revolutionary memory alternative, high-density flash 
memory. Figure 5 shows an example of such a system 
architecture. 
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Figure 4. The Traditional System Memory Architecture 
Adds Complexity in Order to Optimize Performance 



Figure 5. A Flash Memory-Based System Memory Architecture 
Achieves Performance without Tradeoffs 


This application note compares the read performance 
and power consumption of Intel’s 28F016XS Flash 
memory to that of more traditional memory alterna- 
tives, based on specifications available at the time this 
document was published. The 28F016XS Flash memo- 
ry is a new member of the Intel 16-Mbit flash memory 
product family. This device retains full software back- 
wards-compatibility with the 28F016SA/SV. Signifi- 
cant 28F016XS enhancements compared to previous 
flash memories include: 

• A synchronous pipelined read interface that opti- 
mizes the performance of today’s leading-edge mi- 
croprocessors and buses, and 

• SmartVoltage technology 


This analysis focuses on the highest read performance 
versions of the highest-density products for each mem- 
ory technology. Also discussed, are 28F016XS-based 
system memory architecture advantages over tradition- 
al alternatives in terms of performance, complexity, 
cost, power consumption and reliability. For complete 
information on Intel’s 28F016XS flash memory, con- 
sult documentation listed in the Additional Informa- 
tion section. 
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2.0 MEMORY PERFORMANCE AND 
POWER/ENERGY COMPARISONS 

This section compares read performance and power/ 
energy consumption in various operating modes for the 
following memory technologies: 

• 28F016XS flash memory (xl6) 

• 16-Mbit DRAM (xl6) 

• 4-Mbit SRAM (two x8) 

• 1-Mbit cache SRAM (two x8) 

• 16-Mbit paged mask ROM (xl6) 

• 4-Mbit EPROM (xl6) 

• 1-Mbit EEPROM (xl6) 

• 1.8" HDD 

• 1.3" HDD 

In all cases, representative specifications drawn from a 
composite of multiple memory vendors (when possible) 
were used. 


2.1 Background 

The detailed analyses in the Appendix show read per- 
formance both in terms of number of clocks and num- 
ber of wait states, for a sequence of 256 sequential word 
(16 bit) reads at 33 MHz. This sequence length was 
chosen for compatibility with the 512 byte sector 


size of a HDD. Different sequence lengths will result in 
different analysis results. Performance calculations 
measure time from when the memory receives a valid 
address until it outputs desired data. They do not take 
into account any additional delays due to bus complexi- 
ty (address generation, parity checking, etc.) or glue 
logic (chip select decode, control signal generation, 
etc.). Read performance calculations also do not in- 
clude improvements from system design techniques 
such as multi-bank interleaving. 

Calculations show power consumption in three operat- 
ing modes, read, standby and sleep (if offered), using 
maximum current specifications and CMOS levels. 
Read power consumption calculations use the highest- 
specified read frequency. Read energy consumption cal- 
culations multiply read power consumption by the 
amount of time required to read the eight word se- 
quence. Therefore, the analysis focuses on read energy 
consumption, versus read power consumption, to com- 
pare relative battery drain for each memory technology 
during reads. 

2.2 The Results 

Tables 1-4 and Figures 6-9 summarize the results of 
these comparisons, with detailed analysis in the Appen- 
dix. Section 3 will translate the 28F016XS component 
strengths into system-level advantages. 
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Read Performance 28F016XS is significantly faster than any nonvolatile 

memory technology. Subsequent tables and figures 
As Figure 6 reveals, the 28F016XS read performance point out that this performance comes with minimal 

approaches that of cache SRAM and exceeds that of all power penalty compared to alternative memories, 

other memory technologies, including DRAM. The 

Table 1. Read Performance Comparisons (8-Word Transfers at 33 MHz) 


Memory Technology 

5.0V V CC Read 
Transfer Rate 
(Byte/sec) 

5.0V Read 
Transfer Rate 
Compared to 
the 28F018XS 

3-3V V C c Read 
Transfer Rate 
(Byte/sec) 

3.3V Read 
Transfer Rate 
Compared to 
the28F0ieXS 

28F016XS Flash Memory (x16) 

66.1 x 106 

lx 

44.3x106 

lx 

16-Mbit DRAM (xl 6) 

33.3x106 

G.SOx 

33.3x106 

0.75x 

4-Mbit SRAM (two x8) 

33.3x106 

G.SQx 


0.38x 

1-Mbit Cache SRAM (two x8) 

66.7x106 

I.OIx 


1 Six 

16-Mbit Paged Mask ROM (x16) 

19x106 

0 29x 

14x106 

0.32x 

4- Mbit EPROM (x16) 

13.3x106 

0.20x 

9.5x106 

0.21x 

1- Mbit EEPROM (x16) 

16.7x106 

0.25x 

9.5x106 

0,21 x 

1.8" HDD 

16.8x103 

<< 

N/A 

N/A 

1.3" HDD 

32.7x103 

< < 

N/A 

N/A 


70 

60 

50 

MBYTE/SEC 

40 

■ 30 
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Figure 6. 28F016XS 33 MHz Read Performance Exceeds DRAM, Approaches L2 Cache 
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Read Energy Consumption 

The 28F016XS’s high performance (how long it takes 
to read a sequence of data words), combined with its 
low power consumption (how much current is con- 
sumed at 5.0V/3.3V Vcc to complete the read) give it 
the lowest read energy consumption of any memory 
technology. 


Table 2. Read Energy Consumption Comparisons (8-Word Transfers at 33 MHz) 


Memory Technology 

5.0V V C c Read 
Energy 
Consumption 
(watt-sec) 

5.0V Vcc Read 
Energy 
Compared to 
the 28F016XS 

3.3V V C c Read 
Energy 
Consumption 
(watt-sec) 

3.3V Vcc Read 
Energy 
Compared to 
the 28F016XS 

28F016XS Flash Memory (x16) 

6.7x10-6 

lx 

3.2x10-6 


16-Mbit DRAM (x16) 

9.2x10-6 

1.4x 

4.6x10-6 


4-Mbit SRAM (two x8) 

38x10-6 

5.7x 

40x10-6 

12.Sx 

1-Mbit Cache SRAM (two x8) 

17x10-6 

2.5x 

10x10-6 

3.1 x 

16-Mbit Paged Mask ROM (x16) 

6.8x10-6 

I.OIx 

4.8x10-6 

1.5x 

4-Mbit EPROM (xl 6) 

9.6x10-6 


7.1 x 10-6 

2.2x 

1-Mbit EEPROM (x16) 

15x10-6 

:::: 2.2x Iff 

14x10-6 

4.4x 

1.8" HDD 


>> 

N/A 

N/A 

1.3" HDD 

23.5x10-3 

>> 

N/A 

N/A 



Result in the Lowest Read Energy of Any Memory Technology 


HDD was not included in Figure 7 due to its extraordi- 
narily high power and energy consumption. Unlike the 
28F016XS, cache SRAM has a poor power/perform- 
ance ratio. Its high read transfer rate comes at a signifi- 
cant power price and results in very large read energy 
consumption. 
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Standby Power Consumption 

The 28F016XS’s standby power is much lower than 
that of any other updateable memory and compares 
favorably with that of EPROM and mask ROM. 
DRAM refresh requirements cause their true standby 
power consumption to be a combination of the “data- 
sheet” standby power and much larger refresh power. 


The calculations that follow also do not include the 
power consumption of the DRAM controller refresh 
circuitry, which would result in even larger effective 
DRAM subsystem power draw. Figure 8 does not show 
cache SRAM and HDD due to their very high standby 
power consumption specifications. 


Table 3. 


Memory Technology 


28F016XS Flash Memory (x16) 


16-Mbit DRAM (x16) 


4-Mbit SRAM (two x8) 

1-Mbit Cache SRAM (two x8) 


16-Mbit Paged Mask ROM (x16) 


4-Mbit EPROM (x16) 


1-Mbit EEPROM (x16) 


1.8" HDD 


1.3" HDD 


Standby Power 
5.0V V CC 
Standby 
Power 

Consumption 

(watt) 

650x10-6 


50x10-3 


1 X 10~3 
400x10-3 


500x10-6 


500x10-6 


2.5x10-3 


750x10-3 


500x10-3 


Consumption Comparisons 


5.0V V C c 
Standby 
Power 

Compared to 
the 28F016XS 


3.3V V CC 
Standby 
Power 

Consumption 

(watt) 


429x10-6 




Figure 8. DRAM Refresh Requirements Significantly Impact Standby Power Consumption 
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Sleep Power Consumption 

The 28F016XS, DRAM and HDD are the only memo- 
ry technologies that offer a distinct sleep mode with 
lower power consumption compared to standby. The 
28F016XS in deep power-down mode has much lower 
power consumption than all other memories. DRAM 


Table 4. Sleep Power Consumption Comparisons 


Memory Technology 

5.0V V CC 
Sleep Power 
Consumption 
(watt) 

5.0V V CC 
Sleep Power 
Compared to 
the 28F016XS 

3.3V V CC 
Sleep Power 
Consumption 
(watt) 

3.3V Vcc 
Sleep Power 
Compared to 
the 28P016XS 

28F016XS Flash Memory (x16) 

25x10-6 


16.5x10-6 

lx 

16-Mbit DRAM (x16) 

2x10-3 

80x 

990x10-6 

60x 

4-Mbit SRAM (two x8) 

1 x 10-3 

{■IIS)';- 40x 

528x10-6 

32x 

1-Mbit Cache SRAM (two x8) 

400x10-3 

16,000x 

198x10-3 

12,000x 

16-Mbit Paged Mask ROM (x16) 

500x10-6 

20x 

330x10-6 

20x 

4-Mbit EPROM (xl 6) 


20x 

330x10-6 

20x 

1 -Mbit EEPROM (x16) 


100X 

990x10-6 

eox 

1.8" HDD 

25x10-3 

lOOOx 

N/A 

N/A 

1.3" HDD 

15x10-3 

600x 

N/A 

N/A 


28F016XS □ DRAM ■ SRAM ■ ROM ■ EPROM B EEPROM 

3.000 
2,500 

2.000 
pWATT 1 5QQ 

1,000 
500 
0 

Figure 9. The 28F016XS’s Deep Power-Down Mode 
Results in Extremely Low Sleep Power Consumption 



still requires refresh (the internal self-refresh opera- 
tion). The HDD motor is no longer spinning, but con- 
trol circuitry continues to draw power. Figure 9 does 
not include cache RAM or HDD due to their very high 
sleep power consumption specifications. 
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3.0 THE 28F0 1 6XS-B ASED MEMORY 
ARCHITECTURE AND ITS 
POSITIVE SYSTEM IMPACTS 


in a computer system to meet price and performance 
expectations. Many of today’s mainstream desktop 
PCs, for example, contain a 128-Kbyte cache and a 
240-MByte HDD, a ratio of almost 1:2,000! 


3.1 The Traditional Memory Model 
Has a Long History 

The memory architecture shown in Figure 4, with only 
minor variation, has appeared for decades in almost 
every area of computing. This model consists of four 
basic parts: 

• SRAM cache memory (very fast, very expensive, 
low density, volatile) 

• DRAM main memory (moderately fast, moderately 
expensive, moderate density, volatile) 

• ROM boot memory (moderately slow, moderately 
cheap, low or high density, nonvolatile) 

• Magnetic media archive memory (very slow, very 
cheap, high density, nonvolatile) 

Cost-per-bit fundamentally determines the percentage 
of total system memory budget devoted to each memo- 
ry type. SRAM delivers very fast reads and writes but 
achieves this performance through cell and manufac- 
turing process complexity, which impacts cost and den- 
sity. On the other end of the spectrum, magnetic media 
gives lower performance but provides very low media 
cost. Varying amounts of each memory type combine 


Volatility provides another important consideration 
when choosing memories. Volatile memories (RAM) 
historically have provided higher performance, but lose 
all data when power is removed. They therefore, must 
remain powered-up the entire time the system is opera- 
tional. DRAM additionally must be refreshed periodi- 
cally to preserve stored data. Lower-performance, non- 
volatile memories (ROM and magnetic media) retain 
their contents on power loss, and are needed in a com- 
puter to store the operating software between uses. 

ROM gives faster read performance than magnetic me- 
dia (although slower than RAM), but its contents can- 
not be changed once stored. Systems that contain a rel- 
atively small amount of resident code (several mega- 
bytes) often keep it in ROM. As resident software size 
grows, code stability becomes a significantly greater 
concern. As a result, in these systems ROM often con- 
tains only a small kernel of system boot code that will, 
hopefully, remain usable over the life of the system. 
The vast majority of software resides on slower, update- 
able magnetic media. Regardless of the nonvolatile 
memory chosen, the system copies code and files to 
DRAM for execution, and the most-commonly ac- 
cessed data and code execute out of the fast SRAM 
cache (see Figure 10). 
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The staying power of the traditional memory model is 
impressive, given the blistering pace and rigorous re- 
quirements of the electronics industry. In fact, it is pre- 
cisely the evolution and innovation of memory technol- 
ogy that has ensured the continued domination of tradi- 
tional memory types in everything from mainframes to 
mobile computers to embedded computing systems of 
all types. However, as microprocessor performance ac- 
celerates exponentially and emerging computing mod- 
els make stringent new demands, the traditional memo- 
ry model is being challenged. 


3.2 The Traditional Memory Model 
Hits a Brick Wall 

Users expect next-generation computing systems to im- 
prove performance and add features while simulta- 
neously lowering cost, minimizing power consumption, 
increasing reliability and shrinking form factor and 
weight. The traditional memory model was not intend- 
ed for systems with these constraints, and continued 
innovation within this model produce diminishing re- 
turns. 

Poor System Performance 

The performance of the traditional memory hierarchy 
(where software is copied from nonvolatile media to 
DRAM and then to SRAM) doesn’t optimize the per- 
formance of today’s fast microprocessors, especially 
when performance is measured in MIPS-per-watt rath- 
er than raw MIPS. Both system boot time and applica- 
tion task switching response slow down because of 
NVM-to-RAM file load delays, and disk drive spin-up 
time hinders recovery time from system power savings 
modes to full operation. Even assuming an aggressive 
HDD-to-DRAM transfer rate, operating system load 
delays can take many seconds (or tens or seconds), be- 
fore execution out of DRAM even begins! 

Redundant Memory Cost 

Component cost alone does not provide adequate crite- 
ria for selecting the proper memory subsystem. Memo- 
ry selection requires first identifying the key-user re- 
quirements that the system must satisfy, and then 
choosing the memory technology that meets or exceeds 
these requirements at the lowest cost. Unnecessary 
memory duplication translates to unnecessary addition- 
al system cost. When evaluating memory subsystem 
cost alternatives, remember to include ALL memory in 
calculations (i.e., not only HDD and/or ROM but also 
DRAM and SRAM) plus any system control logic 
needed to interface to the memory. 


Short Battery Life 

DRAMs must be constantly refreshed by the memory 
controller to preserve their stored data. The HDD 
draws current with every motor rotation and may actu- 
ally draw more average current if it is “parked” too 
frequently, since spin-up causes high current draw. As 
the power draw of other computer subsystems (CPU, 
screen, etc.) drops with continued innovation, memory 
subsystem power consumption becomes a greater per- 
centage of the total system drain and significantly im- 
pacts battery life. 

Low Reliability and Unacceptable Ruggedness 

Magnetic media alternatives (floppy disk drive, hard 
disk drive, etc.) contain moving parts, relatively fragile 
media and narrow operating temperature ranges. These 
products, though improving, have unacceptably low 
tolerance to shock, vibration and movement during 
read/write. A mass storage approach based on a disk 
rotating at high RPM with a read/write head microme- 
ters above it, capable of colliding at the slightest shock 
and permanently destroying data, is fundamentally in- 
compatible with the vision of a fully mobile computing 
machine. 

Multiple levels of memory mean multiple levels of po- 
tential component failure. Excessive heat generation 
also impacts system lifetime, and the large number of 
board traces required is a significant manufacturing 
challenge and reliability headache. 

Large Form Factor and Excessive Weight 

The traditional memory model contains unnecessary 
memory duplication. A large portion of DRAM in the 
system is used only to provide the CPU with access to 
programs that already exist on ROM or the hard disk 
or floppy drive. The traditional memory model needs 
redundant DRAM and magnetic media or ROM be- 
cause DRAM satisfies the performance needs of the 
processor while ROM or HDD provides the non-vola- 
tility the system requires. This duplication takes up ex- 
cessive space within the system, impacting its footprint 
and thickness. The added power consumption requires 
larger system batteries and power supplies, which make 
the system unacceptably and unnecessarily heavy. 


0K)[P©[fiJGMflA¥0©M 


3-184 



AP-600 


intel. 

3.3 The 28F016XS Flash Memory 
Architecture Alternative 

Just as today’s system designs are revolutionary, so too 
are their memory architectures. Incremental improve- 
ments to the traditional approach no longer measure up 
to the revolutionary potential of a 28F016XS-based al- 
ternative (see Figure 5). 

Optimized System Performance 

The 28F016XS provides both high performance, like 
DRAM and SRAM, and non-volatility, like ROM and 
HHD. It combines the best qualities of both memory 
types in one technology. Lengthy software load over- 
head and task switching delays are eliminated. Code 
runs as fast or faster than that in DRAM with much 
less system hardware complexity, and the 28F016XS 
read transfer rate approaches that of cache SRAM! 

Low Cost and Flexible 

A 28F016XS flash memory array is competitively 
priced to a DRAM/ROM or DRAM/small HDD 
combination, especially when the costs of associated 
memory interface and control circuitry are considered. 
Unlike ROM, flash memory is in-system updateable. 
This allows easy code upgrade even after the system is 
in a customer’s hands, to enhance capabilities or cor- 
rect unintended system shortcomings. This flexibility 
keeps system costs low both initially and throughout 
system lifetime. 

Minimal Power Consumption 

Flash memory, being nonvolatile, requires no periodic 
refresh and no constant power to be applied to it in 
order to retain stored information. The 28F016XS’s 
read energy is the lowest of any memory technology 
analyzed in this application note. The 28F016XS’s 
standby and sleep power also compare very favorably 
with alternative approaches. The redundancy of multi- 




pie memory technologies in the traditional memory ar- 
chitecture results in multiple sources of power con- 
sumption. These multiple memories must be summed 
to determine the true memory subsystem power draw. 
With 28F016XS, there is only one very efficient memo- 
ry technology, consuming very little system power. 

High Reliability, Solid-State Ruggedness 

Solid-state memories such as the 28F016XS are inher- 
ently more rugged and shock-resistant than alternatives 
containing moving parts, like HDDs. The 28F016XS- 
based memory architecture, being simpler and more in- 
tegrated than the traditional alternative, also exhibits 
much higher system reliability. Data reliability studies 
point to the longevity of data stored in flash memory. 

Small Form Factor, Light Weight 

The 28F016XS’s compact TSOP package provides 9.2 
MByte/in 2 density capability, with components mount- 
ed on both sides of the system board. The 28F016XS 
memory subsystem architecture minimizes or elimi- 
nates memory duplication, leading to substantial board 
space savings. 28F016XS’s very low power consump- 
tion reduces the size and weight of system batteries and 
power supplies. 


4.0 CONCLUSION 

This application note has discussed performance and 
power/energy comparisons between the 28F016XS and 
other memory technologies, and the positive 28F016XS 
impacts on system performance and power consump- 
tion. Consult reference documentation for a more com- 
plete understanding of device capabilities and design 
techniques. Please contact your local Intel or distribu- 
tion sales office for more information on Intel’s flash 
memory products. 
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ADDITIONAL INFORM 

AATION 

Order Number 

Document/Tool 

290532 

28F016XS Datasheet 

297500 

“Interfacing 28F016XS to the i960® Microprocessor Family” 

297504 

“Interfacing 28F016XS to the lntel486TM Microprocessor Family” 

292147 

“Designing with the 28F01 6XS” 

292127 

AP-378, “System Optimization Using the Enhanced Features of the 
28F016SA” 

297372 

1 6-Mbit Flash Product Family User’s Manual, 
28F01 6SA/28F01 6SV/28F01 6XSs/28F01 6XD 

297508 

FlashBuilder Utility 

Contact Intel/ Distribution 
Sales Office 

28F01 6XS Benchmark Utility 

Contact Intel/Distribution 
Sales Office 

28F016XS iBIS Models 

Contact Intel/Distribution 
Sales Office 

28F016XS VHDL/Verilog Models 

Contact Intel/Distribution 
Sales Office 

28F01 6XS Timing Designer Library Files 

Contact Intel/Distribution 
Sales Office 

28F016XS Oread and ViewLogic Schematic Symbols 


REVISION HISTORY 


Number 

Description 

001 

Original Version 
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APPENDIX A 


28F016XS FLASH MEMORY 

The following sections provide detailed analysis of the 
memory performance and power/energy consumption 
comparisons discussed in Section 2.0 of this application 
note. 

Read Performance (5.0V Vcc) 

The 28F016XS-15 is capable of 3-1-1-1-1-1-1-1.... read 
performance at 5.0V Vcc an d 33 MHz (2-0-0-0-0- 
0-0-0.... in terms of wait states). This results in a 
66.1 MByte/sec read transfer rate, as shown by the cal- 
culation below: 

512 bytes/(258 clocks x 30 ns/clock) = x MByte/sec 
x = 66.1 MByte/sec 

Read Performance (3.3V Vcc) 

The 28F016XS-15 is capable of 3-1-2-1-2-1-2-1.... read 
performance at 3.3V Vcc an d 33 MHz (2-0-1-0-1- 
0-1-0.... in terms of wait states). This results in a 
44.3 MByte/sec read transfer rate, as shown by the cal- 
culation below: 

512 bytes/(385 clocks x 30 ns/clock) = x MByte/sec 
x = 44.3 MByte/sec 


Power and Energy Consumption (5.0V Vcc) 

Read mode power consumption is 875 mW (5.0V x 
175 mA). Read mode energy consumption is 
6.7 jjl Joules (875 mW x 258 clocks x 30 ns/clock). 

Standby power consumption is 650 p,W (5.0V x 
130 ju,A). Deep power-down (sleep) power consumption 
is 25 jxW (5.0V x 5 pA). 

Power and Energy Consumption (3.3V Vcc) 

Read mode power consumption is 280 mW (3.3V x 
85 mA). Read mode energy consumption is 3.2 juJoules 
(280 mW x 385 clocks x 30 ns/clock). 

Standby power consumption is 429 jxW (3.3V x 
130 julA). Deep power-down (sleep) power consumption 
is 16.5 jxW (3.3V x 5 fiA). 
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16-Mbit ORAM 

16-Mbit DRAMs were, at the time this application note 
was published, only beginning to ramp into production. 
Only advance information for the wider xl6 16-Mbit 
DRAMs was available for use in the calculations that 
follow. 

Read Performance (5.0V and 3.3V V^ 

Sequential reads allow use of the DRAM fast page 
mode. Assumed DRAM specifications are shown be- 
low: 

• 70 ns tRAo 35 ns t^A (5.0V V cc ) 

• 80 ns tRAC* 45 ns tAA (3.3V Vcc) 

• 256- word (512-byte) page buffer 

Therefore, 16-Mbit DRAMs are capable of 3-2-2-2-2-2- 
2-2.... read performance at 33 MHz (2-1- 1-1-1- 1-1- 1 in 
terms of wait states....). This results in a 33.3 MByte/ 
sec read transfer rate, as shown by the calculation be- 
low: 

512 bytes/(513 clocks x 30 ns/clock) = x MByte/sec 
x = 33.3 MByte/sec 


Power and Energy Consumption (5.0V Vcc) 

Read mode power consumption is 600 mW (5.0V x 
120 mA). Read mode energy consumption is 
9.2 jitJoules (600 mW x 513 clocks x 30 ns/clock). 

The standby mode power calculation combines both the 
DRAM standby current and refresh current specifica- 
tions, in proportion relative to percentage of time in 
each mode. Standby power consumption is 50 mW 
(5.0V x 10 mA). Sleep power calculations use the 
DRAM self-refresh current specification. Sleep power 
consumption is 2 mW (5.0V x 400 jllA). 

Power and Energy Consumption (3.3V Vcc) 

Read mode power consumption is 297 mW (3.3V x 
90 mA). Read mode energy consumption is 4.6 juJoules 
(297 mW x 513 clocks x 30 ns/clock). 

Standby power consumption is 26.4 mW (3.3V x 
8 mA). Sleep power consumption is 990 »’,W (3.3V x 
300 jmA). 
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4-Mbit SRAM 

4-Mbit SRAMs were, at the time this application note 
was published, only beginning to ramp into production. 
Only advance information for the wide x8 4-Mbit 
SRAMs was available for use in the calculations that 
follow. This analysis used two 4-Mbit (x8) SRAMs to 
create the assumed 16-bit system interface. 

Read Performance (5.0V Vcc) 

The assumed 5.0V Vcc 4-Mbit SRAM access time is 
55 ns. Therefore, 4-Mbit SRAMs are capable of 2-2-2- 
2-2-2-2-2.... read performance at 5.0V Vcc an d 

33 MHz (l-l-l-l-l-l-l-l in terms of wait states). 

This results in a 33.3 MByte/sec read transfer rate, as 
shown by the calculation below: 

512 bytes/(512 clocks x 30 ns/clock) = x MByte/sec 
x = 33.3 MByte/sec 

Read Performance (3.3V Vcc) 

The assumed 3.3V Vcc 4-Mbit SRAM access time is 
100 ns. Therefore, 4-Mbit SRAMs are capable of 4-4-4- 
4-4-4-4~4.... read performance at 3.3V Vcc an d 

33 MHz (3-3-3-3-3-3-3-3.... in terms of wait states). 
This results in a 16.7 MByte/sec read transfer rate, as 
shown by the calculation below: 

512 bytes/(1024 clocks x 30 ns/clock) = x MByte/sec 
x = 16.7 MByte/sec 


Power and Energy Consumption (5.0V Vcc) 

Read mode power consumption is 2.5W (5.0V x 
250 mA x 2 devices). Read mode energy consumption 
is 38 juJoules (2.5W x 512 clocks x 30 ns/clock). 

Standby power consumption is 1 mW (5.0V x 100 jlaA x 
2 devices). Data retention current at 5.0V Vcc is the 
same as standby current, therefore data retention 
(sleep) power consumption is 1 mW. 

Power and Energy Consumption (3.3V Vcc) 

Read mode power consumption is 1.3W (3.3V x 
200 mA x 2 devices). Read mode energy consumption 
is 40 jLiJoules (1.3W x 1024 clocks x 30 ns/clock). 

Standby power consumption is 528 /llW (3.3V x 80 jliA 
x 2 devices). Data retention current at 3.3V Vcc is the 
same as standby current, therefore data retention 
(sleep) power consumption is 528 fxW. 
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1-Mbit CACHE SRAM 

The majority of memories analyzed in this application 
note were high density. 1-Mbit cache SRAMs were in- 
cluded, however, to compare the read performance and 
power/energy consumption of 28F016XS with that of 
L2 cache memory. This analysis used two 1-Mbit (x8) 
cache SRAMs to create the assumed 16-bit system in- 
terface. 

Read Performance (5.0V Vcc and 3.3V Vcc) 

Assumed 1-Mbit cache SRAM specifications are shown 
below: 

• 15 ns t ACC (5.0V V CC ) 

• 20 ns t A cc (3.3V Vcc) 

Therefore, 1-Mbit cache SRAMs are capable of l-l-l-l- 
l-l-l-l — read performance at 33 MHz (0-0-0-0-0- 
0-0-0.... in terms of wait states). This results in a 
66.7 MByte/sec read transfer rate, as shown by the cal- 
culation below: 

512 bytes/(256 clocks x 30 ns/clock) = x MByte/sec 
x = 66.7 MByte/sec 


Power and Energy Consumption (5.0V Vcc) 

Read mode power consumption is 2.2W (5.0V x 
220 mA x 2 devices). Read mode energy consumption 
is 17 pJoules (2.2W x 256 clocks x 30 ns/clock). 

Standby power consumption is 400 mW (5.0V x 40 mA 
x 2 devices). Data retention current at 5.0V Vcc is the 
same as standby current, therefore data retention 
(sleep) power consumption is 400 mW. 

Power and Energy Consumption (3.3V Vcc) 

Read mode power consumption is 1.3W (3.3V x 
200 mA x 2 devices). Read mode energy consumption 
is 10 juJoules (1.3W x 256 clocks x 30 ns/clock). 

Standby power consumption is 198 mW (3.3V x 30 mA 
x 2 devices). Data retention current at 3.3V Vcc is. the 
same as standby current, therefore data retention 
(sleep) power consumption is 198 mW. 
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16-Mbit PAGED MASK ROM 

Calculations that follow used the xl6 version of the 
16-Mbit paged mask ROM, which is not yet widely 
available from multiple vendors. The x8 16-Mbit paged 
mask ROM is the more common version today. 

Read Performance (5.0V Vcc) 

Sequential reads allow use of the mask ROM page 
mode. The assumed 5.0V Vcc 16-Mbit mask ROM 
random access time is 150 ns, with 75 ns accesses in 
page mode (4-word page). Therefore, 16-Mbit mask 
ROMs are capable of 5-3-3-3-5-3-3-3.... read perform- 
ance at 5.0V V C c and 33 MHz (4-2-2-2-4-2-2-2.... in 
terms of wait states). This results in a 19 MByte/sec 
read transfer rate, as shown by the calculation below: 

512 bytes/(900 clocks x 30 ns/clock) = x MByte/sec 
x = 19 MByte/sec 

Read Performance (3.3V Vcc) 

The assumed 3.3V Vcc 16-Mbit mask ROM random 
access time is 200 ns, with 100 ns accesses in page mode 
(4-word page). Therefore, 16-Mbit mask ROMs are ca- 
pable of 7-4-4-4-7-4-4-4.... read performance at 3.3V 

Vcc and 33 MHz (6-3-3-3-6-3-3-3 in terms of wait 

states). This results in a 14 MByte/sec read transfer 
rate, as shown by the calculation below: 

512 bytes/(1216 clocks x 30 ns/clock) = x MByte/sec 
x = 14 MByte/sec 


Power and Energy Consumption (5.0V Vcc) 

Read mode power consumption is 250 mW (5.0V x 
50 mA). Read mode energy consumption is 6.8 jut Joules 
(250 mW x 900 clocks x 30 ns/clock). 

Standby power consumption is 500 jxW (5.0V 
xlOO fi A). 16-Mbit mask ROM does not provide a 
sleep mode, so sleep current is equal to standby current, 
or 500 jxW. 

Power and Energy Consumption (3.3V Vcc) 

Read mode power consumption is 132 mW (3.3V x 
40 mA). Read mode energy consumption is 4.8 /a J oules 
(132 mW x 1216 clocks x 30 ns/clock). 

Standby power consumption is 330 /aW (3.3V x 
100 jaA). 16-Mbit mask ROM does not provide a sleep 
mode, so sleep current is equal to standby current, or 
330 jaW. 
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4-Mbit EPROM 

Calculations that follow used the xl6 version of the 
4-Mbit EPROM (Intel 27C400 or equivalent). 

Read Performance (5.0V Vcc> 

The assumed 5.0V Vcc 4-Mbit EPROM random ac- 
cess time is 150 ns. Therefore, 4-Mbit EPROMs are 
capable of 5-5-5-5-5-5-5-5.... read performance at 5.0V 
Vcc and 33 MHz (4-4-4-4-4-4-4-4.... in terms of wait 
states). This results in a 13.3 MByte/sec read transfer 
rate, as shown by the calculation below: 

512 bytes/(1280 clocks x 30 ns/clock) = x MByte/sec 
x = 13.3 MByte/sec 

Read Performance (3.3V V<x) 

The assumed 3.3V Vcc 4-Mbit EPROM random ac- 
cess time is 200 ns. Therefore, 4-Mbit EPROMs are 
capable of 7-7-7-7-7-7-7-7.... read performance at 3.3V 
Vcc and 33 MHz (6-6-6-6-6-6-6-6.... in terms of wait 
states). This results in a 9.5 MByte/sec read transfer 
rate, as shown by the calculation below: 

512 bytes/( 1792 clocks x 30 ns/clock) = x MByte/sec 
x = 9.5 MByte/sec 


Power and Energy Consumption (5.0V Vcc) 

Read mode power consumption is 250 mW (5.0V x 
50 mA). Read mode energy consumption is 9.6 pJoules 
(250 mW x 1280 clocks x 30 ns/clock). 

Standby power consumption is 500 p,W (5.0V x 
100 fi A). 4-Mbit EPROM does not provide a sleep 
mode, so sleep current is equal to standby current, or 
500 p,W. 

Power and Energy Consumption (3.3V Vcc) 

Read mode power consumption is 132 mW (3.3V x 
40 mA). Read mode energy consumption is 7.1 pJoules 
(132 mW x 1792 clocks x 30 ns/clock). 

Standby power consumption is 330 pW (3.3V x 
100 pA). 4-Mbit EPROM does not provide a sleep 
mode, so sleep current is equal to standby current, or 
330 pW. 
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1-Mbit EEPROM 

This analysis used two 1-Mbit (x8) EEPROMs to cre- 
ate the assumed 16-bit system interface. 

Read Performance (5.0V Vcc) 

The assumed 5.0V Vcc 1-Mbit EEPROM random ac- 
cess time is 120 ns. Therefore, 1-Mbit EEPROMs are 
capable of 4-4-4-4-4-4-4-4.... read performance at 5.0V 
Vcc and 33 MHz (3-3-3-3-3-3-3-3.... in terms of wait 
states). This results in a 16.7 MByte/sec read transfer 
rate, as shown by the calculation below: 

512 bytes/(1024 clocks x 30 ns/clock) = x MByte/sec 
x = 16.7 MByte/sec 

Read Performance (3.3V Vcc) 

The assumed 3.3V Vcc 1-Mbit EEPROM random ac- 
cess time is 200 ns. Therefore, 1-Mbit EEPROMs are 
capable of 7-7-7-7-7-7-7-7.... read performance at 3.3V 
Vcc and 33 MHz (6-6-6-6-6-6-6-6.... in terms of wait 
states). This results in a 9.5 MByte/sec read transfer 
rate, as shown by the calculation below: 

512 bytes/(1792 clocks x 30 ns/clock) = x MByte/sec 
x = 9.5 MByte/sec 


Power and Energy Consumption (5.0V Vcc) 

Read mode power consumption is 500 mW (5.0V x 
100 mA). Read mode energy consumption is 
15 p. Joules (500 mW x 1024 clocks x 30 ns/clock). 

Standby power consumption is 2.5 mW (5.0V x 
500 jliA). 1-Mbit EEPROM does not provide a sleep 
mode, so sleep current is equal to standby current, or 
2.5 mW. 

Power and Energy Consumption (3.3V Vcc) 

Read mode power consumption is 264 mW (3.3V x 
80 mA). Read mode energy consumption is 14 pJoules 
(264 mW x 1792 clocks x 30 ns/clock). 

Standby power consumption is 990 jxW (3.3V x 
300 jxA). 1-Mbit EEPROM does not provide a sleep 
mode, so sleep current is equal to standby current, or 
990 ]llW. 
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1.8" HDD 

Only information for 5.0V Vcc 1-8" HDDs was used 
in the calculations that follow; 3.3V Vcc 1*8" HDDs 
were not yet available. 

Read Performance (5.0V Vcc) 

The HDD must first locate data stored on its platter(s) 
and transfer it to the sector buffer before the system can 
read it. The assumed 5.0V Vcc 1-8" HDD seek access 
time (including rotational latency) is 30 ms. The as- 
sumed peak media transfer rate is 2 MByte/sec or 
477 ns/byte, and the peak interface transfer rate is 
3 MByte/sec or 318 ns/byte. Therefore, 1.8" HDD at 
5.0V Vcc can access 256 words (512 bytes) of data in 
30.4 ms (1 x 10 6 33 MHz clocks), resulting in a 
16.8 Kbyte/sec read transfer rate, as shown by the cal- 
culations below: 

Access time = 30 ms + (477 ns/byte x 512 bytes) + 
(318 ns/byte x 512 bytes) = 30.4 ms 
(1 clock/30 ns) x (30.4 ms) = 1 x 10 6 33 MHz clocks 
512 bytes/30.4 ms = x MByte/sec 
x = 16.8 Kbyte/sec 


Effective read transfer rate is highly dependent on 
length of read sequence. 

Power and Energy Consumption (5.0V Vcc) 

Read mode power consumption is 1.9 W (5.0V x 
380 mA). Read mode energy consumption is 
57.8 mJoules ((1.9 W) x (1 x 10* clocks) x (30 ns/ 
clock)). 

Standby power consumption is 750 mW (5.0V x 
150 mA). Sleep power consumption is 25 mW (5.0V x 
5 mA). 
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1.3" HDD 

Only information for 5.0V Vcc 1-3" HDDs was used 
in the calculations that follow; 3.3V Vcc 1-3" HDDs 
were not yet available. 

Read Performance (5.0V Vcc) 

The HDD must first locate data stored on its platter(s) 
and transfer it to the sector buffer before the system can 
read it. The assumed 5.0V Vcc 1-3" HDD seek access 
time (including rotational latency) is 15 ms. The as- 
sumed peak media transfer rate is 1.5 MByte/sec or 
636 ns/byte, and the peak interface transfer rate is also 
1.5 MByte/sec or 636 ns/byte. Therefore, 1.3" HDD at 
5.0V Vcc can access 256 words (512 bytes) of data in 

15.7 ms (522 x 10 3 33 MHz clocks), resulting in a 

32.7 Kbyte/sec read transfer rate, as shown by the cal- 
culations below: 

Access time = 15 ms + (636 ns/byte x 512 bytes) + 
(636 ns/byte x 512 bytes) = 15.7 ms 
(1 clock/30 ns) x (15.7 ms) = 522 x 10 3 33 MHz 
clocks 

512 bytes/15.7 ms = x MByte/sec 
x = 32.7 Kbyte/sec 


Effective read transfer rate is highly dependent on 
length of read sequence. 

Power and Energy Consumption (5.0V Vcc) 

Read mode power consumption is 1.5W (5.0V x 
300 mA). Read mode energy consumption is 
23.5 mJoules ((1.5W) x (522 x 10 3 clocks) x (30 ns/ 
clock)). 

Standby power consumption is 500 mW (5.0V x 
100 mA). Sleep power consumption is 15 mW (5V x 
3 mA). 




3-195 


iny 

TECHNICAL 

PAPER 


Interfacing the 
28F016XS to the i960® 
Microprocessor Family 


KEN MC KEE 

TECHNICAL MARKETING ENGINEER 

TIM KELLY 
ENGINEER 

RANNA PRAJAPATI 
ENGINEER 


November 1994 




Order Number: 297500-001 



INTERFACING THE 28F016XS TO THE 
i960® MICROPROCESSOR FAMILY 


CONTENTS page 

1.0 INTRODUCTION 3-198 

2.0 i960® CA-33 MICROPROCESSOR 

INTERFACE 3-199 

2.1 Circuit Description 3-199 

2.2 Software Interface 

Considerations — 3-201 

2.3 Single and Burst Read Cycle 

Description at 33 MHz 3-202 

2.4 Single Burst Write Cycle 

Description at 33 MHz 3-206 

3.0 i960® JF-33 MICROPROCESSOR 

INTERFACE 3-209 

3.1 Circuit Description 3-209 

3.2 Software Interface 

Considerations 3-210 

3.3 Burst Read Cycle Description at 

33 MHz 3-211 

3.4 Burst Write Cycle Description at 

33 MHz 3-215 


CONTENTS page 

4.0 i960® KB-25 MICROPROCESSOR 

INTERFACE 3-217 

4.1 Circuit Description 3-217 

4.2 Software Interface 

Considerations 3-219 

4.3 Read Burst Cycle Description at 

25 MHz 3-219 

4.4 Write Burst Cycle Configuration at 

25 MHz 3-223 

5.0 INTERFACING TO OTHER i960® 

MICROPROCESSORS 3-225 

6.0 CONCLUSION 3-225 

ADDITIONAL INFORMATION 3-226 

REVISION HISTORY 3-226 

APPENDIX A: PLD FILES . . 3-227 

APPENDIX B: BENCHMARK 
PERFORMANCE ANALYSIS 3-236 


3-197 


28F0 1 6XS/i960® Interface 


1.0 INTRODUCTION 

This technical paper describes several designs interfac- 
ing the high-performance 28F016XS Flash memory to 
the i960® microprocessor family. All designs are based 
on preliminary 28F016XS specifications. These designs 
have been fully simulated but no yet taken to lab proto- 
type. Please contact your Intel or distribution sales of- 
fice for up-to-date information. Do not finalize a design 
based on the specifications in this document. 

The 28F016XS is a 16-Mbit flash memory with a high- 
performance synchronous pipelined read interface. The 
28F016XS combines ROM-like non-volatility, DRAM- 
like read performance and in-system update ability in 
one memory technology. These characteristics enable 
code execution directly from the 28F016XS memory 
space, replacing the costly practice of shadowing code 
from HDD or ROM to DRAM for increased perform- 
ance. The 28F016XS improves system performance, 
ruggedness and cost of any burst microprocessor, such 
as the i960 microprocessor, base design. The i960 mi- 
croprocessor family sees widespread use in various ap- 
plications, including imaging and data communica- 
tions. 

The 28F016XS performs synchronous pipelined reads. 
Up to three accesses can be initiated before reading 
data output from the initial cycle. This pipelined struc- 
ture is ideal for use with the i960 microprocessor’s 
burst transfer mechanism. The 28F016XS brings signif- 
icant system performance enhancements to an i960 mi- 
croprocessor-based environment. This technical paper 
describes processor-to-memory interfaces that exploit 
these capabilities to achieve maximum system perform- 
ance. Figures 1 and 2 illustrate relative system perform- 
ance enhancements that the 28F016XS brings to an 
i960 microprocessor-based environment, compared to 
other memory technologies. The benchmark parame- 
ters are documented in Appendix B. 


iny 



Figure 1. Relative System Performance 
Enhancement of the 28F016XS Compared to 
Other Memory Technologies in an i960® KB-25 
Microprocessor-Based Design 



Figure 2. Relative System Performance 
Enhancement of the 28F016XS Compared to 
Other Memory Technologies in an i960® CA-33 
Processor-Based Design 
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2.0 i960® CA-33 MICROPROCESSOR INTERFACE 



Switched 5V 
or 12V 
5V 

GPIO 

0V 

INT 

RESET# 


297500-3 


Figure 3. Minimal Logic Required Interfacing the 28F016XS-15 to the i960 CA-33 Microprocessor 


Using this interface, the 28F016XS-15/i960 CA-33 mi- 
croprocessor system achieves 3-0-0-0-2-0-0-0 . . . wait- 
state read performance, supporting burst transfers and 
address pipelining. 

2.1 Circuit Description 

This section describes the 28F016XS-15/i960 CA-33 
microprocessor interface block diagram in Figure 3. 

Memory Configuration 

This design uses two 28F016XS-15s, in xl 6 mode, to 
match the i960 CA microprocessor’s 32-bit data bus, 
providing 4 Mbytes of flash memory. Signals A 21.4 
from the i960 CA microprocessor and CTRi_o from the 
PLD select locations within the 28F016XS memory 
space, arranged as 1-Meg double words. The two-bit 
counter implemented in the PLD loads addresses A 3.2 
at the beginning of each memory cycle and generates 
the lower two bits of the burst addresses on its outputs 


CTRi_o. The counter feeds burst addresses to the 
28F016XS, so that they do not stall waiting for the 
processor to supply the next address. 

Chip Select Logic 

Chip select decode logic may use A 3 1.22 to generate an 
active low chip select signal, CS#, for the 28F016XS- 
15 memory space and other system peripherals. The 
chip select drives CEo# on each 28F016XS-15 and a 
control input to the PLD. The 28F016XS-15’s CEj# 
input is grounded. 

In support of address pipelining, the chip select logic 
latches CS#, holding it active throughout the duration 
of the memory access. This will prevent potential CS# 
problems caused by using combinatorial logic when uti- 
lizing the address pipelining capability of i960 CA mi- 
croprocessor. 

If address pipelining functionality is not implemented, 
simple combinatorial logic can be utilized in generating 
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the system CS# for the 28F016XS memory space, and 
the chip select logic shown in Figure 3 does not exam- 
ine BLAST# and ADS#. For many systems using the 
upper address bits in a linear selection scheme may pro- 
vide a sufficient number of chip select signals, thus 
eliminating system chip select decode logic. (See 


Figure 4 for an example of using linear selection for 
chip selects.) When using a linear chip select scheme 
however, the software must avoid using addresses that 
may select more than one device, which could result in 
bus contention. 


Separate Address Bus 



Multiplexed Address / Data Bus 



Chip Select 1 
Chip Select 2 
Chip Select 3 


Address Space 

01800000 - 01 BFFFFFH 
01400000 - 017FFFFF H 
00C00000 - OOFFFFFF H 
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Figure 4. Example of Using Linear Chip Selection 



Figure 5. Example RESET Generation Circuitry 
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CLK Option 

A 33 MHz clock signal drives the i960 CA microproc- 
essor CLKIN input. Driving CLKMODE to “1” con- 
figures the i960 CA microprocessor for a xl CLK in- 
put. The i960 CA microprocessor outputs an internally- 
referenced 33 MHz clock on its PCLK1 and PCLK2 
pins (the signals on PCLK1 and PCLK2 are identical), 
which drives the CLK inputs of the PLD and the 
28F016XS-15s. 

Reset ' 

An active-low reset signal, RESET#, connects to the 
RESET# inputs of the i960 CA microprocessor, and 
the PLD, and to the RP# input of the 28F016XS-15s. 
Figure 5 illustrates a suggested logic configuration for 
generating RESET # . 

Interface Control Signals 

The i960 CA-33 microprocessor external bus signals, 
BLAST#, ADS# and W/R#, serve as inputs to the 
state machine, which controls the two-bit counter and 
generates OE#, WE# and ADV#. The counter is 
loaded at the beginning of the memory access, generat- 
ing the burst addresses to the 28F016XS-15s. ADV# 
indicates that a valid address is available to the 
28F016XS-15. Addresses are latched and a read cycle is 
initiated on a rising CLK edge. WE# controls writes to 
the 28F016XS-15, latching data into the 28F016XS-15 
on its rising edge if the applicable timing requirements 
are satisfied. (Data is latched on the falling edge of 
WE# during page buffer writes.) 

Configuration Signal 

A general purpose input/output (GPIO) generates the 
configuration signal input to the state machine. The 
configuration signal must reset to logic “0” on power- 
up and system reset to ensure that the operation of the 
state machine matches the initial configurations of the 
28F016XS-15s and the i960 CA microprocessor. After 
optimizing the 28F016XS-15s and i960 CA microproc- 
essor, the configuration signal must switch to logic “1.” 

Additional 28F016XS Control Signals 

The BYTE# input to the 28F016XS-15s is tied to 5.0V 
to configure the 28F016XS-15s for xl6 mode, and Aq is 
tied to GND (Ao is only used for byte addressing). 
A GPIO controls the write protect input, WP#, 
to the 28F016XS-15s. As shown in Figure 3, the 
28F016XS-15 is compatible with either a 5.0V or 


a 12.0V Vpp voltage and is completely write protected 
by switching Vpp to GND. When Vpp voltage drops 
below VppLio the 28F016XS-15 will not successfully 
complete Program and Erase operations. Figure 3 also 
illustrates the 28F016XS-15 RY/BY# output connect- 
ed to a system interrupt for background erase opera- 
tion. RY/BY#, WP#, and Vpp implementation are 
application dependent. See the Additional Information 
section of this technical paper for documentation that 
cover these topics in more detail. 


2.2 Software Interface Considerations 

Boot-up Capability / Configuration 

This interface supports processor boot from the 
28F016XS memory space after power-up or reset. 
However, the boot code must follow some restrictions 
until it has properly configured the 28F016XS-15s, the 
i960 CA microprocessor and the CFG state machine 
input valve. In the default configuration state, the i960 
CA microprocessor supports only non-burst reads and 
writes. Program control should jump to an area of 
RAM to execute the configuration sequence. The code 
must configure the 28F016XS-15s and all necessary 
i960 CA microprocessor programmable attributes be- 
fore setting the CFG input to logic “1.” Table 1 illus- 
trates the required configuration settings for both the 
28F016XS-15s and the i960 CA-33 microprocessor. 


Table 1. Configuration Settings for the 
28F016XS-15 and i960 CA-33 Microprocessor 
Employing Address Pipelining at 33 MHz 


Part 

Parameter 

Setting 

28F016XS-15 

(5VV CC ) 

SFI Configuration 

2 

i960 CA-33 
Microprocessor 

Ready Inputs 

OFF 


Byte Ordering 

LITTLE 

ENDIAN 


Bus Width 

32-BIT 


Wait States: 
Nrad 

3 


Nrdd 

0 


Nwad 

2 


Nwdd 

2 


Nxda 

0 


Address Pipelining 

ON 


Burst mode 

ON 


APMlgl 0@1M 
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2.3 Single and Burst Read Cycle 
Description at 33 MHz 

Refer to the read cycle timing diagrams (Figures 7 and 
8) and the state diagram (Figure 6) for the following 
read cycle discussion. 



Figure 6. Read State Diagram of Single and Address Pipelined Burst Control Interface 

Shown in Figure 3 
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Initial Configuration 

Figure 7 illustrates a read cycle with the 28F016XS-15s 
and i960 CA microprocessor in a reset/power-up con- 
figuration state. The initial configuration permits only 
non-burst transfers. The i960 CA microprocessor initi- 
ates a read cycle by asserting ADS# with W/R# = 
“ 0 ,” presenting the valid address and control signals. 
At N = 1, the two-bit counter loads the values on 
address bits A 3 . 2 . The state machine asserts ADV # for 
the next clock edge (N = 2), where the 28F016XS-15 
will clock in the address if CS# is asserted. If CS# is 
not asserted, the state machine returns to inactive state 
at N = 2. The state machine asserts ADV # for only 


one clock edge before entering a hold state to await the 
assertion of BLAST# by the i960 C A microprocessor. 
The state machine asserts OE# (to meet timing re- 
quirements OE# is falling-edge triggered) on the fall- 
ing edge between N = 2 and N = 3 to enable the 
28F016XS-15 data output buffers. With SFI Configura- 
tion = 4, the data will be valid at the N = 7. The 
28F016XS-15s will hold data on the bus until the i960 
CA microprocessor asserts BLAST # . During the clock 
period following N = y, the state machine returns to 
its inactive state, de-asserting OE# to tri-state the 
28F016XS-15 data outputs. 
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Optimized Configuration 

Figure 8 illustrates a two double-word burst read fol- 
lowed by a four double-word burst read with the 
28F016XS-15s, i960 CA microprocessor and state ma- 
chine configured for optimum read performance. With 
CFG = 1, the counter increments the two lower bits of 
the address at N = 2, N = 3 and N = 4, and ADV # 
remains asserted so that the 28F016XS-15 latches in 
four successive addresses at N = 2 through 5. With 
SFI Configuration = 2, the first data will be valid at 
N = 5. If a second read cycle follows the current read 
cycle, the i960 CA microprocessor will assert ADS# 
one clock after asserting BLAST # . The state machine 
will respond by immediately re-entering the read 


cycle. After detecting the assertion of BLAST#, the 
state machine will return to its inactive state waiting for 
a new access targeting the 28F016XS memory space. 

When implementing the i960 CA microprocessor ad- 
dress pipelining capability, the state machine control- 
ling CS# monitors the upper address lines, ADS# and 
BLAST#. CS# is held active upon detecting an access 
targeting the flash memory space until BLAST# is as- 
serted with ADS# de-asserted. When BLAST# and 
ADS# are active at the same time, a pipelined read 
access is in progress. The CS# state machine examines 
the upper address lines to determine whether or not the 
current pipelined access is aimed at the 28F016XS 
memory space. 



Figure 8. Example Two Double-Word Burst Read Followed by Pipelined Four Double Word Burst Read 
Showing Key Specifications Requiring Consideration 
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Critical Timings 

Table 2 describes the critical timings illustrated in Fig- 
ures 7 and 8. One particularly critical timing in this 
designs, is the data hold time. The i960 CA-33 micro- 
processor requires a 5 ns hold time after the clock edge. 
The 28F016XS-15 guarantees a 5 ns data hold after 
clock, meeting the processor’s hold requirement with 0 
ns of margin. 

This design provides 7 ns of margin in meeting the 3 ns 
setup time of the i960 CA-33 microprocessor data in- 
puts, outputting data tcHQV after a rising CLK edge. 

Another critical area concerns CS# during pipelined 
read accesses. Since the 28F016XS-15 specifies zero 


data hold from CE# going high, the chip select state 
machine must hold CS# active for 5 ns to satisfy the 
i960 CA-33 microprocessor data input hold specifica- 
tion of 5 ns. Hence, the chip select state machine holds 
CS # active for an additional clock period after detect- 
ing BLAST # active. 

The i960 CA-33 microprocessor control outputs 
ADS# and W/R# have 3 ns of margin and BLAST# 
has 5 ns of margin to meeting the 85C22V10-15 input 
setup requirement. 

Consult the appropriate datasheets for full timing infor- 
mation. 


Table 2. Example Read Cycle Timing Specifications at 5V Vqc 


Part 

Symbol 

Parameter 

Minimum Specified 
Value (ns) 

85C22V10-15 

*SU1 

Input Setup Time to CLK 

9 

i960 CA-33 Microprocessor 

T|S 1 

Input Setup D 31.0 

3 

T|H1 

Input Hold D 31.0 

5 

28F016XS-15 

*ELCH 

CE# Setup to CLK 

25 

tVLCH 

ADV# Setup to CLK 

15 

UVCH 

Address Setup to CLK 

15 

<GLCH 

OE# Setup to CLK 

15 


NOTE: 

Consult appropriate datasheets for up-to-date specifications. 
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2.4 Single Burst Write Cycle 
Description at 33 MHz 

Refer to the write cycle timing diagrams and the state 
diagram (Figure 9) for the following write cycle discus- 
sion. 



Figure 9. Write State Diagram of Control 
Interface Shown in Figure 3 


Initial Configuration 

Figure 10 illustrates a write cycle. In the reset/power- 
up configuration state, the interface supports only non- 
burst writes. The i960 CA microprocessor initiates a 
write cycle by asserting ADS# with W/R# — “1,” 
presenting a valid address and control signals. At N = 
1 , the. two-bit counter loads the values on address bits 
A 3 . 2 . The state machine asserts WE# (to meet timing 
requirements, WE# is falling-edge triggered) on the 
falling edge between N — 1 and N = 2. WE# remains 
asserted for two clock periods, in order to meet the 
28F016XS-15 timing requirements. The state machine 
then enters a holding state until the processor asserts 
BLAST # , after which time the interface state machine 
will return to SO. 

Optimized Configuration 

Figure 11 illustrates a two double-word burst write 
with CFG = “1.” When the first data write is complete 
at N = 4, the counter increments the two lower 
address bits, and the state machine asserts WE# on 
the next falling clock edge to begin the next the 
28F016XS-15 data write. The i960 CA microprocessor 
must provide the next data during the clock period fol- 
lowing N = 4. The data writes continue to the next 
consecutive addresses until the i960 CA microprocessor 
asserts BLAST#, indicating the end of the burst write 
cycle. 
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Figure 10. Example Write Cycle, Initial Configuration, 
Showing Key Specifications Requiring Consideration 



Figure 11. Example Two Double-Word Burst Write Illustrating 
Key Specifications Requiring Considerations 


I 
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Critical Timings 

Table 3 describes the critical timings illustrated in Fig- 
ures 10 and 11. 

One critical hold time to notice is twHAX- WE# is 
guaranteed to transition within 8 ns from the falling 
clock edge. Therefore, the twHAX requirement has 2 ns 
of margin on CTRj.o, and 5 ns of margin on A314. 


Also notice that CTRi_o must be valid before WE# is 
asserted. CTRi_o are guaranteed valid 8 ns after the 
rising clock edge, providing 9 ns of margin. 

Consult the appropriate datasheets for full timing infor- 
mation. 


Table 3. Example Write Cycle Timing Parameters at 5V Vqc 


Part 

Symbol 

Parameter 

Minimum Specified 
Value (ns) 

85C22V10-15 

tsui 

Input Setup Time to CLK 

9 

28F016XS-15 

tELWL 

CE# Setup to WE# Going Low 

0 


*AVWL 

Address Setup to WE# Going Low 

0 


tWLWH 

WE# Pulse Width 

50 


Idvwh 

Data Setup to WE# Going High 

50 


tWHDX 

Data Hold from WE# High 

0 


*WHAX 

Address Hold from WE # High 

5 


tWHEH 

CE# Hold from WE# High 

5 


NOTE: 

Consult appropriate datasheets for up-to-date specifications. 
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3.0 i960® JF-33 MICROPROCESSOR INTERFACE 



Figure 12. Minimal Interface Logic Required in Interfacing the 28F016XS-15 to the 
i960 JF-33 Microprocessor 


Using this interface, the 28F016XS-15/i960 JF-33 mi- 
croprocessor system can achieve 3-0-0-0 wait state read 
performance, supporting burst transfers. 

3.1 Circuit Description 

This design (Figure 12) uses two 28F016XS-15s to 
match the 32-bit data bus of the i960 JF microproces- 
sor, providing 4 Mbytes of flash memory. Four octal 
latches, enabled by the ALE signal, de-multiplex the 
32-bit address from the AD bus. The latched address 
bits QAD 21-4 and the counter outputs CTRi_o from the 
PLD select locations within the 28F016XS memory 
space. The two-bit counter implemented in the PLD 
loads the address bits on A 3 . 2 , at the beginning of each 
memory cycle, and generates the lower two bits of the 
burst addresses on its outputs CTRi_o to the 
28F016XS-15. 


CLK Option 

A 33 MHz clock signal drives the i960 JF microproces- 
sor CLKIN input and the PLD and 28F016XS-15s 
CLK input. 

Reset 

An active-low reset signal, RESET#, connects to the 
RESET# inputs of the i960 JF microprocessor and 
PLD and to the RP# input of the 28F016XS-15. Fig- 
ure 5 illustrates a suggested logic configuration for gen- 
erating RESET # . 

Interface Control Signals 

ADS# and W/R# i960 JF microprocessor signals, just 
as in the i960 CA microprocessor design, serve as in- 
puts to the state machine, which controls the two-bit 
counter and generates the OE#, WE# and ADV # sig- 
nals for the 28F016XS-15s. The state machine also gen- 
erates the RDYRCV# signal for the i960 JF micro- 
processor to control the insertion of wait states during 
data transfers. 
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Configuration Signal 

A general purpose input/output (GPIO) generates the 
configuration signal for input to the state machine. The 
configuration signal must be reset to logic “0” on pow- 
er-up and system reset to ensure that the operation of 
the state machine matches the 28F016XS-15s. After 
optimizing the 28F016XS-15s, the reconfiguration sig- 
nal must switch to a logic “1” to take advantage of the 
new configuration. 

Additional Control Signals 

For information regarding BYTE#, WP#, RY/BY# 
and Vpp, see Section 2.1. 


3.2 Software Interface 
Considerations 

Boot-up Capability 

This interface supports processor boot-up from the 
28F016XS-15 memory space after power-up or reset. 
Burst reads and writes may commence with no configu- 
ration. However, read wait state performance will be 
5- 1-1-1 until the SFI Configuration is set to 2 and the 
CFG input is set to logic “1.” Program control should 
jump to an area of RAM to execute the configuration 
sequence. A pseudocode flow for this configuration se- 
quence is shown below. 

Execute Device Configuration command sequence 

Activate CFG signal 

End 

The SFI Configuration must be set to 2 before the CFG 
input is set to logic “1.” Thereafter, burst read wait 
state performance will improve to 3 -0-0-0. 
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3.3 Burst Read Cycle Description at 
33 MHz 

Refer to the read cycle timing diagrams and state dia- 
gram (Figure 13) for the following discussions of the 
read cycle. 
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Figure 13. Read State Diagram of Burst Control Interface Shown in Figure 12 
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Showing Key Specifications Requiring Consideration 


Initial Configuration 

Figure 14 illustrates a four double- word burst read cy- 
cle with the 28F016XS-15s and the state machine in the 
reset/power-up configuration state. The i960 JF micro- 
processor initiates a read cycle by asserting ADS # with 
W/R# = “0”, presenting a valid address and control 
signals. At N = 1 with ADS# = “0”, the two-bit 
counter loads the values on the address bits A 3 . 2 . 

The state machine asserts ADV # after clock edge N = 
1 where the 28F016XS-15s will clock in the first ad- 
dress at the next rising clock edge (N = 2), if CS# is 
asserted. If CS# is not asserted, the state machine will 
return to its inactive state at N = 2. 

The state machine deactivates ADV# at N = 2. The 
state machine then asserts ADV # at N = 3 to load the 
next read address into the 28F016XS-15s. De-asserting 
ADV# for one clock cycle (at N = 2, 4, 6 and 8 ) 
between accesses forces the 28F016XS-15s to hold data 
output for two clock cycles (access stretching), which 
allows time for the data to stabilize and meet the timing 
requirements of the i960 JF microprocessor bus. 


The counter increments the two lower bits of the ad- 
dress at N = 3, 5 and 7 to provide the four successive 
burst addresses. The state machine asserts OE# (to 
meet timing requirements OE# is falling-edge trig- 
gered) on the falling edge between N = 4 and N = 5 
to enable the 28F016XS-15 data output buffers. With 
the SFI Configuration = 4, the data will be valid at the 
i960 JF microprocessor data inputs at N = 7. 

The state machine asserts RDYRCV# to inform the 
i960 JF microprocessor that the data is valid. 
RDYRCV# is returned active at N = 7, 9, 11 and 12. 
The interface will follow this methodology until the 
processor asserts BLAST#, which identifies the end of 
the burst transaction. BLAST # is examined at N = 7, 
9, 1 1 and 13. The interface will transition to its inactive 
state, SO, after the assertion of BLAST#. 
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Optimized Configuration will be valid for transfer at N = 5. Subsequent data 

will be valid at N = 6, 7 and 8. This interface and 
Figure 15 illustrates a four double- word burst read with 28F016XS-15 configuration improve read wait-state 

the 28F016XS- 15s and state machine configured for op- performance to 3-0-0-0. All other signal monitoring 

timum read performance. With the SFI Configuration and generation are identical to the reset/power-up con- 

= 2, ADV # is held active and the counter increments figuration read cycle documented in the preceding sec- 

at N = 2, 3 and 4, supplying the 28F016XS-15s with tion. 

four consecutive accesses. Data from the initial access 



Figure 15. Example Four Double-Word Burst Read Illustrating 
Important Timing Parameters Requiring Consideration 


ADVANCE OMIF@KMAirO®N 


3-213 











28F0 1 6XS/i960® Interface 


irvtel 


Critical Timings 

Table 4 describes the critical timings illustrated in Fig- 
ures 14 and 15. One particularly critical timing in this 
design is the data hold time, which the 28F016XS-15 
meets with 0 ns margin. The 28F016XS holds data for 
5 ns after a rising clock. 

The 28F016XS-15 will provide data 10 ns before the 
rising edge of the system clock, which satisfies the i960 
JF-33 microprocessor’s data input requirement. 


ADV# and CTRj.o are guaranteed valid 8 ns after the 
rising clock edge. Setup times for these inputs to 
28F016XS-15 are each 15 ns. Since the clock period is 
30 ns, this allows 7 ns margin for these timings. 

RDYRCV# is guaranteed valid 8 ns after the rising 
clock edge to met the microprocessor’s setup time to 
rising clock edge. 

Consult the appropriate datasheets for full timing infor- 
mation. 


Table 4. Example Write Cycle Timing Parameters at 5V Vcc 


Part 

Symbol 

Parameter 

Minimum Specified 
Value (ns) 

85C22V10-15 

tsui 

Input Setup Time to CLK 

9 

28F016XS-15 

*ELCH 

CE# Setup to CLK 

25 

*VLCH 

ADV# Setup to CLK 

15 

tAVCH 

Address Setup to CLK 

15 

tQLCH 

OE# Setup to CLK 

15 


NOTE: 

Consult appropriate datasheets for up-to-date specifications. 
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3.4 Burst Write Cycle Description at 
33 MHz 



Figure 16. Write State Diagram of Burst Control 
Interface Shown in Figure 12 


Write Configuration 

Figure 17 illustrates a two double-word burst write cy- 
cle. The i960 JF microprocessor initiates a write cycle 
by asserting ADS# with W/R# = 1 and presenting a 
valid address and control signals. At N = 1 with 
ADS# = 0, the two-bit counter loads the values on the 
address bits A 3 . 2 . The state machine asserts WE# (to 
meet timing requirements, WE# is falling-edge trig- 
gered) on the falling edge between N = 1 and N = 2. 
WE# remains asserted for four clock periods, in order 
to meet 28F016XS-15 timing requirements. The state 
machine asserts RDYRCV # for N = 4 to inform the 
i960 JF microprocessor to supply the next data. At N 
= 4, the counter increments the two lower address bits, 
and the state machine asserts WE# on the next falling 
clock edge to begin the next data write to the 
28F016XS-15s. The data writes continue until the proc- 
essor asserts BLAST#, noting the end of the current 
write transaction. The SFI Configuration has no effect 
on the write cycle. 
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Figure 17. Two Double- Word Burst Write 
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Critical Timings Consult the appropriate datasheets for full timing infor- 

mation. 

Table 5 describes the critical timings illustrated in Fig- 
ure 17. 

Notice that CTRj.o, and CS# must be valid before 
WE# is asserted. CTRi_o are guaranteed valid 8 ns 
after the rising clock edge, providing 12 ns of margin. 


Table 5. Example Write Cycle Timing Parameters at 5V Vqc 


Part 

Symbol 

Parameter 

Minimum Specified 
Value (ns) 

85C22V10-15 

tsui 

Input Setup Time to CLK 

9 

28F016XS-15 

tELWL 

CE# Setup to WE# Going Low 

0 

tAVWL 

Address Setup to WE# Going Low 

0 

tWLWH 

WE# Pulse Width 

50 

tDVWH 

Data Setup to WE# Going High 

50 

tWHDX 

Data Hold from WE# High 

0 


Address Hold from WE# High 

5 


CE# Hold from WE# High 

5 


NOTES: 

Consult appropriate datasheets for up-to-date specifications. 
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4.0 i960 KB-25 MICROPROCESSOR INTERFACE 
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Figure 18. Minimal Logic Required in Interfacing 28F016XS-20 to the 
i960 KB-25 Microprocessor 


Using this interface, the 28F016XS-20/i960 KB-25 mi- 
croprocessor system can achieve 3-0-0-0 wait state read 
performance (5- 1-1-1 read performance) in terms of the 
CPU’s internal 25 MHz CLK, supporting burst cycles. 
This design operates the logic and 28F016XS-20s at 
25 MHz. 


4.1 Circuit Description 

This interface uses two 28F016XS-20s to match the 
32-bit data bus of the i960 KB microprocessor, provid- 
ing access to 4 Mbytes of flash memory. Like the 
28F016XS-20 interface to the i960 JF microprocessor, 
four octal latches de-multiples the 32-bit address from 
the LAD bus. The latches are enabled by an inverted 
ALE# signal from the microprocessor. The latched ad- 
dress and two-bit counter integrated into the PLD se- 
lect locations with the flash memory space. The two-bit 
counter loads the address bits on LAD 3.2 at the begin- 
ning of each memory cycle, and generates the lower 
two bits of the burst addresses on its outputs CTRi_o. 


CLK Option 

In this interface, a 50 MHz clock signal drives the i960 
KB microprocessor CLK2 input, and an external 
25 MHz clock signal, synchronized to the i960 KB mi- 
croprocessor internal 25 MHz clock, drives the CLK 
inputs for the 28F016XS-20s and the PLD. The re- 
duced clocking frequency places a less stringent de- 
mand on the PLD to meet setup times, thereby allow- 
ing the usage of a slower PLD. 

External 25 MHz CLK generation and synchronization 
can be accomplished using simple flip-flop logic. The 
i960 KB microprocessor synchronizes its internal 
25 MHz clock on the falling edge of RESET. 

Two different methods for generating a 25 MHz CLK 
are illustrated in Figure 19, and the PLD equations are 
located in the Appendix A. 
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The two IX clock generation methods in Figure 19 will a maximum skew of Tcoi» while method (B) will have 

produce a different amount of clock skew between the little to no clock skew because the 2x and lx CLKs are 

2x and lx CLK. Clock generation method (A) will have exposed to the same PLD delay (see Figure 20). 



Figure 20. CLK Skew Produced by the Two Different CLK Generation Methods Illustrated in Figure 19 
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4.2 Software Interface 
Considerations 

Boot-up Capability 

This interface supports processor boot-up from the 
28F016XS-20 memory space after power-up or reset. 
Burst reads and writes may commence with no configu- 
ration. However, read wait-state performance will be 
5-0-2-0 until the SFI Configuration is set to 2 and the 
CFG input is set to logic “1.” Thereafter, burst trans- 
fers will improve to 3-0-0-0 wait state perform- 


ance. Program control should jump to an area of RAM 
to execute the configuration sequence. The code must 
set the SFI Configuration to 2 before setting the CFG 
input to logic “1.” 


4.3 Read Burst Cycle Description at 
25 MHz 

Refer to the read cycle timing diagrams and the state 
diagram (Figure 21) for the following discussion of the 
read cycle. 


RESET 
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Figure 21. Read State Diagram of Burst Control Interface Logic Shown in Figure 18 
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Figure 22. Example Four Double-Word Burst Read in Initial Configuration Showing Key 
Specifications Requiring Consideration 


Initial Configuration into 28F016XS-20. The state machine asserts OE# (to 

meet timing requirements OE# is falling-edge trig- 
Figure 22 illustrates a four double-word burst read cy- gered) on the falling edge between N = 4 and N = 5 

cle with the 28F016XS-20s and state machine in the to enable the 28F016XS-20 data output buffers. Data 

reset/power-up configuration state. The i960 KB mi- will be valid at the i960 KB microprocessor data inputs 

croprocessor initiates a read cycle by asserting ADS# at N = 7. . 

with W/R# = “0,” presenting valid address and con- 
trol signals. The state machine asserts READY # to inform the 

i960 KB microprocessor that the data is valid. To com- 
At N = 1, the two-bit counter loads the values on pensate for the delayed third and fourth burst address- 

address bits A 3 . 2 . The state machine asserts ADV # at es, the state machine must de-assert READY # for N 

the next clock edge (N = 2), where 28F016XS-20 will third and fourth addresses, respectively, N=9 and 

latch in the address if CS# is asserted. If CS# is not N= 10 before again asserting READY# for N= 11 

asserted, the state machine will return to its inactive and N= 12, when the third and fourth data, respective- 

state at N = 2. The counter increments the two lower ly, become valid, 

bits of the address at N = 2 and ADV # remains as- 
serted so that the 28F016XS-20 clocks in the first two The i960 KB microprocessor encodes the length of the 
burst addresses at N = 2 and 3. burst transfer onto the two lowest bits of the initial 

address. Therefore, the state machine decodes QADi_o 
With the SFI Configuration = 4, the state machine to determine the end of the burst transfer. At this point, 

must wait 4 clock periods between loading two even or the state machine will return to its inactive state, SO, 

two odd addresses into 28F016XS-20. Therefore, the de-asserting OE# to tri-state the 28F016XS-20’s data 

state machine asserts ADV# at N = 6 and N=7 to outputs, 

latch the third and fourth addresses, respectively, 
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Figure 23. Example Four Double-Word Burst Read Illustrating 
Key Specifications Requiring Consideration 


Optimized Configuration 

Figure 23 illustrates a four double-word burst read with 
the 28F016XS-20s and state machine configured for op- 
timum read performance. With the SFI Configuration 
= 2, 28F016XS-20 can accept addresses with only two 
clock periods between each even address and two clock 
periods between each odd address. Therefore, the four 
burst addresses flow into SFI on successive rising clock 
edges and the four data become valid for transfer on 
successive rising clock edges with the first data valid by 
N = 5. Otherwise, the transaction is similar to the 
reset/power-up configuration read cycle. 

Critical Timings 

Table 6 describes the critical timings illustrated in Fig- 
ures 22 and 23. One particularly critical timing in this 
design is the data hold time. The i960 KB-25 micro- 
processor requires a 5 ns hold time after the clock edge. 
The 28F016XS-20 guarantees a 5 ns data hold after 


clock, meeting the setup requirement with 0 ns of mar- 
gin. This design provides: 

1/25 MHz - t 10 = 7 ns 

of margin to meeting the 3 ns setup time of the i960 
KB-25 microprocessor data inputs. 

Another critical area concerns CS# and QA21-4 setup 
time to 28F016XS-20. This design allows two clock pe- 
riods (80 ns) for these signals to stabilize and meet the 
28F016XS-20 setup time. Since the i960 KB-25 micro- 
processor guarantees ALE# and LAD31.0 18 ns after 
the rising clock edge and the 28F016XS-20 setup time 
is 30 ns, this leaves: 

2 * 1/25 MHz - t 6 - t ELCH = 32 ns 

for the propagation delays of the inverter plus the latch 
plus the chip select decode logic (if applicable, for 
CS#). 
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READY# is guaranteed valid 8 ns after the falling Consult the appropriate datasheets for full timing infor- 
clock edge, providing 5 ns of margin on the 7 ns setup . mation. 
required by the i960 KB-25 microprocessor. 

OE# is also guaranteed valid 8 ns after the falling 
clock edge, providing 0 ns Of margin on the 12 ns setup 
requirement. 


Table 6. Example Read Burst Cycle Timing Parameters at 5V Vcc 


Part 

Symbol 

Parameter 

Minimum Specified 
Value (ns) 

85C22V10-15 

*SU1 

Input Setup Time to CLK 

9 

i960 KB-25 Microprocessor 

Ti0 

Input Setup 1 

3 


Til 

Input Hold 

5 


Tl2 

Input Setup 2 

7 

28F016XS-20 

tELCH 

CE# Setup to CLK 

30 


tVLCH 

ADV# Setup to CLK 

20 



Address Setup to CLK 

20 


| 

OE# Setup to CLK 

20 
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4.4 Write Burst Cycle Configuration at 25 MHz 
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Figure 24. Write State Diagram of Burst Control Interface Logic in Figure 18 


JMWANCE DMIF®KGM'0®M 





Figure 25. Example Two Double-Word Burst Write Showing Key Timing Parameters Requiring 

Consideration 


Write Considerations 

The i960 KB microprocessor initiates a write cycle by 
asserting ADS# with W/R# = 1 and presenting a 
valid address and control signals. At N = 1 with 
ADS# = 0, the two-bit counter loads the values on the 
address bits LAD 3 . 2 . The state machine asserts WE# 
(to meet timing requirements, WE# is falling-edge trig- 
gered) on the falling edge between N = 1 and N = 2. 
WE# remains asserted for two clock periods, in order 
to meet the 28F016XS-20 timing requirements. The 
state machine asserts READY # for N = 4 to inform 
the i960 KB microprocessor to supply the next data. At 
N = 4, the counter increments the two lower address 
bits, and the state machine asserts WE# on the next 
falling clock edge to begin the next data write to the 
28F016XS-20s. The data writes continue until the burst 
cycle is complete. The state machine determines the 
length of the burst cycle by decoding QADi_q. The 
28F016XS-20 Configuration has no effect on the write 
cycle. 


Critical Timings 

Table 7 describes the critical timings illustrated in Fig- 
ure 25. 

One critical hold time to notice is twHAX- WE# is 
guaranteed to transition with 8 ns from the falling clock 
edge. Therefore, the twnAX requirement has 7 ns of 
margin on CTRj.o and 9 ns of margin on A 3 1 . 4 . 

Also notice that CTRj_o must be valid before WE# is 
asserted. CTRi_o are guaranteed valid 8 ns after the 
rising clock edge, providing 12 ns of margin. 

Consult the appropriate datasheets for full timing infor- 
mation. 
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Table 7. Example Write Burst Cycle Timing Parameters at 5V Vcc 


Part 


Parameter 

Minimum Specified 
Value (ns) 


tsui 

Input Setup Time to CLK 

9 

i960 KB-25 
Microprocessor 

Tii 

Input Hold 

5 


Input Setup 2 

7 

28F016XS-20 

*ELWL 

CE# Setup to WE# Going Low 

0 


Address Setup to WE# Going Low 

0 

tWLWH 

WE# Pulse Width 

50 

*DVWH 

Data Setup to WE# Going High 

50 

tWHDX 

Data Hold from WE# High 

0 

*WHAX 

Address Hold from WE# High 

5 

tWHEH 

CE# Hold from WE# High 

5 


5.0 INTERFACING TO OTHER i960 
MICROPROCESSORS 

i960®CF-16, i960®CF-25 and i960®CF-33 
Microprocessors 

The i960 CF microprocessor bus interface is completely 
compatible with the i960 CA microprocessor bus inter- 
face. Therefore, the 28F016XS-15 interfaces described 
above for the i960 CA-33 microprocessor work equally 
well with the i960 CF-25 and 33 MHz microprocessors. 

At 16 MHz, the interface requires a slight modification 
because the SFI Configuration value at 16 MHz equals 
1. The 28F016XS-15 will begin driving the data pin 1 
CLK period after initiating a read access. The interface 
returns READY # to the i960 CF-16 microprocessor, 1 
CLK cycle earlier. Therefore, the 28F016XS-15 inter- 
face to the i960 CF-16 microprocessor will deliver 
3-0-0-0 wait-state read performance. 

i960® SA Microprocessor, i960® SB Microprocessor 

The 28F016XS’s interface to the i960® Sx microproces- 
sor series will be similar to the i960 KB microprocessor 
interfaces, with the following differences: 

• The i960 Sx microprocessor series has a 16-bit data 
bus multiplexed with the lower 16 of 32 address bits. 
Therefore, a single 28F016XS will match the width 
of the data bus. 


• Two octal latches will de-multiplex the address/data 
bus, and the ALE signal, without inversion, will 
properly enable the latches. 

• The i960 Sx microprocessor series supports eight 
double-word burst transfers. Therefore, the 
28F016XS interface will require a three-bit counter 
to generate the lower three bits of the burst address- 
es. 

• The interface state machine must use the i960 Sx 
microprocessor BLAST# signal to recognize the 
end of a burst cycle (see the i960 CA microprocessor 
state diagrams). 


6.0 CONCLUSION 

This technical paper has described the interface be- 
tween the 28F016XS 16-Mbit Flash memory compo- 
nent and the i960 microprocessor family. This simple 
design has been implemented with a minimal number of 
components and achieves exceptional read perform- 
ance. The 28F016XS provides the microprocessor with 
the non-volatility and update ability of flash memory 
and the performance of DRAM. For further informa- 
tion about 28F016XS, consult reference documentation 
for a more comprehensive understanding of device ca- 
pabilities and design techniques. Please contact your 
local Intel or distribution sales office for more informa- 
tion on Intel’s flash memory products. 
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ADDITIONAL INFORMATION 


Order Number 

Document/Toole 

290532 

28F016XS Datasheet 

297500 

“Interfacing 28F016XS to the Intel 486 ™ Microprocessor Family” 

292147 

AP-398, “Designing with the 28F01 6XS” i 

292146 

AP-600, “Performance Benefits and Power/Energy Savings of 28F016XS 
Based System Designs” 

297372 

16-Mbit Flash Product Family User’s Manual, 
28F01 6SA/28F01 6SV/28F01 6XS/28F01 6XD 

297508 

FlashBuilder Utility 

Contact Intel/Distribution 
Sales Office 

28F016XS Benchmark Utility 

Contact Intel/Distribution 
Sales Office 

28F016XS IBIS Models 

Contact Intel/Distribution 
Sales Office 

28F016XS VHDL/Verilog Models 

■ 

Contact Intel/Distribution 
Sales Office 

28F01 6XS Timing Designer Library Files 

Contact Intel/Distribution 
Sales Office 

28F016XS Oread and ViewLogic Schematic Symbols 


REVISION HISTORY 


Number 

Description 

001 

Original Version 
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APPENDIX A 
PLD FILES 


PLD File for the 28F016xs Interface to the i960 CA-33 Microprocessor 


Title 

28F016XS/ i960 CA Microprocessor Interface State Machine 

Pattern 

PDS 


Revision 

l 


Authors 

Example 


Company 

Intel Corporation 

- Folsom, California 

Date 

1-25-94 


CHIP 

STATEMACHINE 

85C22V10 

; inputs 
PIN 1 

CLK . 


PIN 

ADS_n 

; address status - i960 CA microprocessor 

PIN 

W_R_n 

; W/R# - i960 CA microprocessor 

PIN 

BLAST_n 

; burst last - i960 CA microprocessor 

PIN 

CS_n 

; chip select -28F016XS 

PIN 

CFG 

; 28F016XS/i960 CA microprocessor config status set input 

PIN 

A2 

; LAO bit 2 

PIN 

A3 

; LAD bit 3 

PIN 

RESET 

; resets all FFs in device 

PIN 25 

GLOBAL 

; virtual pin to implement reset 

; outputs 
PIN 

CTRO 

; burst counter out - 28F016XS- A 1 

PIN 

CTR1 

; burst counter out - 28F016XS-A2 

PIN 

/WE 

; write enable -28F016XS 

PIN 

/OE 

; output enable - 28F016XS 

PIN 

QO 

; state variables 

PIN 

Q1 


PIN 

/ADV 

; state variable and address valid - 28F016XS 

PIN 

Q3 


; burst counter control signals 
STRING LD '(/ADS_n)‘ 


; load 

STRING INC (ADV * /Q1 * /QO 



+ Q3*ADV*/Q1 
+ Q3*/Q1*/Q0)’ 

; increment 

STATE 



MOORE.MACHINE 

default_branch so 
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; state assignments 

S0= /Q3*/ADV*/Q1*/Q0 
Sl= /Q3* ADV*/Q1»/Q0 

52 = Q3* ADV*/Ql*/QO 

53 = Q3 * ADV * /Q1 * QO 
S4= /Q3 * ADV * /Q1 * QO 
S5= /Q3 * /ADV * /Q1 * QO 
S6= /Q3 * /ADV * Ql */Q0 
S7= Q3 * /ADV * Ql • /QO 
S8= Q3 * /ADV * /Ql * /QO 


; state transitions 


SO := 

(/ADS_n * /W_R_n) ->S1 

; READ cycle 

+ 

(/ADS_n * W_R_n) -> S6 

; WRITE cycle 


+*> SO 

; else, stay 

SI := 

(/CS_n * /CFG) ->S5 

; 28F016XS selected, initial configurations 

+ 

(/CS_n * CFG) -> S2 

; 28F016XS selected, 28F016XS and i960 CA microprocessor configured 


+-> SO 

; else, return to idle state 

S2 := 

VCC -> S3 

- 

S3 := 

VCC -> S4 

; 28F016XS is configured to wait 4 clocks 

S4 := 

(/BLAST n * ADS_n) -> SO 

; 1 double word read 

+ 

(/BLAST n */ADS_n) -> SI 

; pipelined read 


+-> S5 

; else, continue 

S5:= 

(/BLAST_n * ADS_n) -> SO 

; burst read finished 

+ 

(/BLAST n * /ADS_n) -> SI 

; pipelined read 


+-> S5 

; else, continue 

S6 := 

/CSn -> S7 

; 28F016XS selected, continue 


+-> SO ; else, return to idle state 

S7:= 

VCC -> S8 


S8 := 

(BLAST_n * CFG) -> S6 

; continue burst 

+ 

(BLAST_n * /CFG) ->S8 

; pre-config write 


+-> SO 

; write is finished 


; transition outputs 
SO.OUTF := /OE * /WE 

Sl.OUTF := /OE * /WE 

S2.0UTF := OE • /WE 

S3.0UTF := OE * /WE 

S4.0UTF := OE * /WE 

S5-OUTF := OE • /WE 

S6.0UTF := OE * /WE 

S7-OUTF := /OE* WE 

S8.0UTF := /OE* WE 

S9.0UTF := /OE*/WE 

EQUATIONS 
; implement RESET 

GLOBAL.RSTF = /RESET 

; implement 2-bit burst counter • registered counter equations 
CTR1 := (LD * A3) + (/LD • INC * CTRO * /CTR1) 

+ (/LD * INC * /CTRO • CTR1) + (/LD * /INC * CTR1) 
CTRO := (LD * A2) + (/LD * INC • /CTRO) + (/LD * /INC * CTRO) 

; flop OE and WE on falling edge 
OE.CLKF = /CLK 
WE.CLKF = /CLK 
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intel. 

PLD File for the 28F016XS Interface to the i960 JF-33 Microprocessor 


Tide 

28F0l6XS/i960 JF Microprocessor Interface State Machine 

Pattern 

PDS 


Revision 

1 


Authors 

Example 


Company 

Intel Corporation - Folsom, California 

Date 

8-16-94 


CHIP 

STATEMACHINE 85C22V 10 

; inputs 
PIN 1 

CLK 


PIN 

ADS 

address status - i960 FJ microprocessor 

PIN 

W_R 

W/R# - i960 FJ microprocessor 

PIN 

BLAST 

burst last - i960 JF microprocessor 

PIN 

CS 

chip setect 

PIN 

CFG 

28F016XS/i960 JF microprocessor config status set input 

PIN 

A2 

A bit 2 

PIN 

A3 

A bit 3 

PIN 

RESET 

resets all FFs in device 

PIN 25 

GLOBAL 

virtual pin to implement reset 

; outputs 
PIN 

CTRO 

burst counter out - 28F016XS-A1 

PIN 

CTR1 

burst counter out - 28F016XS-A2 

PIN 

/WE 

write enable - 28F016XS 

PIN 

/OE 

; output enable - 28F016XS 

PIN 

/RDYRCV 

; wait-state control 

PIN 

QO 

; state variables 

PIN 

Q1 


PIN 

/ADV 

; state variable and address valid - 28F016XS 

PIN 

Q3 


; burst counter control signals 
STRING LD '(/ADS) 1 
STRING INC (ADV 

;load 


+ RDYRCV * Q3 * Q1 * QO)' ; increment 

STATE 



MOORE_MACHINE 
DEFAULT_BRANCH SO 
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; state assignments 

50 = /RDYRCV */Q3 */ADV */Ql */QO 

51 = /RDYRCV */Q3 * ADV */Ql * /QO 

52 = /RDYRCV * /Q3 * ADV * /Q1 * QO 

53 = /RDYRCV * /Q3 * ADV * Q1 * /QO 

54 = RDYRCV * /Q3 * ADV * Q1 * QO 

55 = RDYRCV * /Q3 * /ADV * /Q1 * QO 

56 = /RDYRCV * /Q3 * /ADV * Q1 * /QO 

57 = /RDYRCV * Q3 * ADV * /Q1 * /QO 

58 = /RDYRCV */Q3 * /ADV * Q1 * QO 

59 = /RDYRCV * Q3 * ADV */Ql * QO 
S10 = RDYRCV • Q3 * /ADV * /Q1 * /QO 
SI 1 = /RDYRCV * Q3 * ADV * Q1 * /QO 

512 = /RDYRCV * Q3 * /ADV * /Q1 * QO 

513 = /RDYRCV * Q3 * /ADV * Q1 * /QO 

514 = /RDYRCV * Q3 * /ADV * Q1 * QO 

515 = RDYRCV * Q3 * /ADV * Q1 * QO 

; state transitions 


SO := 

(/ADS * /W_R) 

-> SI ; READ cycle 

+ 

(/ADS * W_R) 

->S13 

WRITE cycle 



+-> SO 

else, stay 

SI := 

(/CS * /CFG) 

->S6 

28F016XS selected, init configurations 

+ 

(/CS * CFG) 

-> S2 

28F016XS selected, optimized configured 



+-> SO ; else, return to idle state 

S2 := 

vcc 

-> S3 


S3 := 

vcc 

-> S4 

28F016XS is configured to wait 4 clocks 

S4 := 

(/BLAST * ADS) 

->S0 

1 double word read 



+•> S3 

else, continue 

S5 := 

/BLAST 

-> SO 

burst read finished 

+ 

(BLAST * CFG) 

-> S3 

continue, optimized configuration 

+ 

(BLAST* /CFG) 

-> S12 

continue, initial configuration 

S6:= 

vcc 

-> S7 


S7:= 

VCC 

-> S8 


S8 := 

VCC 

-> S9 


S9 := 

VCC 

->S10 


S10:= 

/BLAST 

->S0 

BLAST - end of the burst read transaction 

+ 

BLAST 

->S11 


Sll:= 

VCC 

-> S3 


S12:= 

VCC 

-> S5 


S13:= 

CS 

->so 

; write cycle control 

+ 

/CS 

-> S14 


S 14:= 

vcc 

-> S15 


S15:= 

BLAST 

-> S13 

; BLAST - end of burst write transaction 

+ 

/BLAST 

->S0 



; transition outputs 

SO.OUTF := 

/OE * /WE 

Sl.OUTF := 

/OE*/WE 

S2.0UTF := 

OE * /WE 

S3.0UTF := 

OE * /WE 

S4.0UTF := 

OE * /WE 

S5.0UTF := 

OE */WE 

S6.0UTF := 

/OE * /WE 

S7.0UTF := 

/OE * /WE 

S8.0UTF := 

OE * /WE 

S9.0UTF := 

OE * /WE 
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SIO.OUTF :» OE * /WE 

Sll.OUTF .s OE * /WE 

S12.0UTF OE*/WE 
S13.0UTF:* /OE* WE 

S14.0UTF :» /OE* WE 

S15.0UTF := /OE*/WE 

EQUATIONS 
; implement RESET 

GLOB AL.RSTF • /RESET 

; implement 2-bit burst counter - registered counter equations 
CTRl := (LD * A3) + (/LD * INC * CTRO * /CTR1) 

+ (/LD * INC * /CTRO * CTRl) ♦ (/LD * /INC * CTRl) 

CTRO .a (LD * A2) + (/LD * INC * /CTRO) + (/LD • /INC * CTRO) 

; flop OE and WE on falling edge 
OE.CLKF = /CLK 
WE.CLKF = /CLK 
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PLD File for the 28F016XS Interface to the i960 KB-25 Microprocessor 


Title 

28F016XS/i960 KB Microprocessor Interface State Machine - 25MHz Version 1 

Pattern 

PDS 


Revision 

1 


Authors 

Example 


Company 

Intel Corporation - Folsom, California | 

Date 

1-18-94 


CHIP 

STATEMACHINE 85C22V10 

; inputs 
PIN 1 

CLK 


PIN 

ADS 

address status - i960 KB microprocessor 

PIN 

QAO 

latched LAD bit 0 

PIN 

QA1 

latched LAD bit 1 

PIN 

W_R 

W/R# - i960 KB microprocessor 

PIN 

CS 

chip select - 28F016XS 

PIN 

CFG 

28F016XS config status input 

CFG=0 => 28F016XS config=4 (initial config) 

CFG=l => 28F016XS config=2 

PIN 

A2 

LAD bit 2 

PIN 

A3 

LAD bit 3 

PIN 

RESET 

resets all FFs in device 

PIN 25 

GLOBAL 

virtual pin to implement reset 

; outputs 
PIN 

CTRO 

burst counter out - 28F016XS-A1 

PIN 

CTR1 

burst counter out - 28F016XS-A2 

PIN 

/OE 

output enable - 28F016XS 

PIN 

/WE 

write enable - 28F016XS 

PIN 

/READY 

; i960 KB microprocessor 

PIN 

/ADV 

; state register and address valid - 28F016XS 

PIN 

QO 

; state registers 

PIN 

Q1 


PIN 

Q2 


PIN 

Q3 


; burst counter control signals 
STRING LD ’(SO* /ADS)’ 
STRING INC '(SI + S2 + S3 

; load 


+ S9 + S13 + S16 + S19)’ 

; increment 


STATE 

MOORE_MACHINE 
DEFAULT.BRANCH SO 


; state assignments 

50 = /ADV*/Q3*/Q2*/Ql */Q0 

51 = ADV*/Q3*/Q2*/Ql*/Q0 

52 = ADV*/Q3*/Q2*/Q1 * QO 

53 = ADV */Q3 */Q2 * Ql * QO 

54 = ADV*/Q3*/Q2* Q1 */Q0 

55 = /ADV*/Q3*/Q2* Q1 */Q0 

56 = ADV * Q3 * /Q2 * Q1 * /QO 

57 = /ADV */Q3 */Q2*/Ql * QO 

58 =/ADV * /Q3 * Q2 * Q1 * QO 
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S9 = ADV * 

/Q3 * Q2 • Q1 

* QO 



S10= ADV*/Q3* Q2 * Q1 

*/Q0 



Sll = /ADV* 

Q3*/Q2*/Q1 

* /QO 



S12 = /ADV * 

Q3 * /Q2 * /Q1 

* QO 



S13 =/ADV * 

Q3 * /Q2 * Q1 

* QO . 



S14 = /ADV * 

Q3 * /Q2 * Q1 

* /QO 



S15 =/ADV * 

Q3 * Q2 * Qi 

* /QO 



S16 = /ADV * 

Q3 * Q2 * Ql 

* QO 



S17 =/ADV * 

Q3 * Q2 * /Ql 

* QO 



S18 = ADV* 

Q3 * Q2 * /Ql 

* QO 



S19 = /ADV * 

Q3 * Q2 * /Ql 

* /QO 



S20 = /ADV * 

/Q3 * Q2 * /Ql 

* /QO 



S21 = ADV * 

/Q3 * Q2 * /Ql 

* /QO 



S22 = /ADV * 

/Q3 * Q2 * /Ql 

* QO 



S23 = /ADV * 

/Q3 * Q2 * Ql 

* /QO 



S24 = /ADV * 

/Q3*/Q2* Ql 

* QO 



S25 = ADV * 

Q3 * Q2 * Ql 

* /QO 


; state transitions 




SO := 

(/ADS * /W JLn) 

->S1 

READ cycle 


+ 

(/ADS * W_R_n) 

->S11 

WRITE cycle 




+-> SO 

else, stay 


SI := 

/cs 

->S2 

continue if 28F016XS is selected 




+-> SO 

else, return to idle state 


S2 := 

/CFG 

-> S24 

28F016XS is configured to wait 4 clocks 




+-> S3 

else, continue 


S3 := 

VCC 

-> S4 

else, continue 


S4 := 

(/QAl » /QAO) 

-> SO 

1 double word read 




+-> S5 

else, continue 


S5 := 

(/QA1 * QAO) 

-> SO 

2 double word burst read 


+ 

(QAl * /CFG) 

-> S23 

SFI Configuration = 4 




+-> S6 

else, continue 


S6 := 

(QAl * /QAO) 

->so 

3 double word burst read 




+->S7 

else, continue 


S7 := 

VCC 

-> SO 

4 double word burst read 


S8 := 

VCC 

-> S9 



S9 := 

VCC 

+-> S5 

; else, continue 


Sll := 

/CS 

-> S12 

; continue if 28F016XS is selected 




+-> SO 

; else, return to idle state 


S12 := 

VCC 

-> S13 



S13 := 

(/QAl * /QAO) 

->S0 

; 1 double word write 




+-> S14 

; else, continue 


S14 := 

VCC 

-> S15 



S15 := 

VCC 

-> S16 



S16 := 

(/QAl * QAO) 

->SO 

; 2 double word burst write 




+-> S17 

i else, continue 


S17 := 

VCC 

-> S18 



S18 := 

VCC 

-> S19 



S19 := 

(QAl * /QAO) 

->S0 

; 3 double word burst write 




+-> S20 

; else, continue 


S20 := 

VCC 

-> S21 



S21 := 

VCC 

-> S22 



S22 := 

VCC 

->S0 

; 4 double word burst write 


S23 := 

VCC 

-> S25 



S24 := 

VCC 

-> S8 



S25 := 

VCC 

-> S6 
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; transition outputs 



SO.OUTF := 

/WE * /OE * /READY 



Sl.OUTF := 

/WE * /OE * /READY 



S2.0UTF := 

/WE * /OE * /READY 



S3.0UTF :■ 

/WE* OE* /READY 



S4.0UTF := 

/WE * OE * READY 



S5.0UTF := 

/WE * OE * READY 



S6.0UTF := 

/WE * OE * READY 



S7.0UTF := 

/WE * OE * READY 



S8.0UTF := 

/WE * OE * /READY 



S9-OUTF :=* 

/WE * OE * /READY 



S10 OUTF :« 

/WE * OE * READY 



Sll.OUTF := 

WE * /OE * /READY 



S12.0UTF := 

WE */OE* /READY 



SI 3. OUTF := 

/WE * /OE * READY 



S14.0UTF := 

WE */OE* /READY 



SI 5. OUTF := 

WE * /OE • /READY 



SI 6. OUTF := 

/WE */OE* READY 



SI 7. OUTF := 

WE */OE* /READY 



SI 8. OUTF := 

WE */OE* /READY 



SI 9. OUTF := 

/WE * /OE * READY 



S20.OUTF := 

WE */OE* /READY 



S21.0UTF := 

WE */OE* /READY 



S22.0UTF := 

/WE * /OE * READY 



S23.0UTF := 

/WE * OE * /READY 

1 


S24.0UTF := 

/WE */OE* /READY 



S25.0UTF := 

/WE* OE* /READY 

- 


EQUATIONS 




; implement RESET 



GLOBAL.RSTF = RESET 



; implement 2-bit bunt counter - registered counter equations 



CTR1 :■ 

(LD * A3) + (/LD * INC * CTRO * /CTR1) 




-»• (/LD * INC * /CTRO * CTR1) + (/LD • /INC * CTR1) 



CTRO:: 

= (LD * A2) + (/LD • INC * /CTRO) ♦ (/LD * /INC * CTRO) 



; flop WE, OE and READY on falling edge 



WE.CLKF = /CLK 



OE.CLKF s /CLK 



READY.CLKF = /CLK 
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PLD File for the lx CLK Generation and Synchronization 


Tide 

lx Clock Generations & Sychronization 


Pattern 

PDS 


Revision 

1 


Author 

Example 


Company Name 

Intel 


Date 

5/26/94 


CHIP Clock_Generation_Circuit 85C220 


; input pins 

PIN 

CLK ; elk frequency 33MHz 


PIN 

RESET 


; output pins 

PIN 

SYSCLK 


EQUATIONS 

SYSCLK 

:= /SYSCLK* /RESET 


SYSCLK.CLKF = CLK 
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Title 

Pattern 

Revision 

Author 

Company Name 
Date 


lx and 2x Clock Generation and Synchronization 
PDS 
1 

Example 

Intel 

5/26/94 


CHIP Clock_Gcneration_Circuit 85C220 


; input pins 
PIN 

CLK 

; elk frequency 4x 

PIN 

RESET 

; System RESET 

; output pins 
PIN 

CLK2 

; 2x CLK output 

PIN 

SYSCLK 

; Sychronized lx CLK output 

EQUATIONS 




CLK2 := /CLK2 
CLK2.CLKF = CLK 


SYSCLK := CLK2 * SYSCLK * /RESET 
+ /CLK2 * /SYSCLK * /RESET 
SYSCLK.CLKF = CLK 
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APPENDIX B 

BENCHMARK PERFORMANCE ANALYSIS 


The following section provides detailed memory technology information used in the performance analysis (UDP/IP 
Networking and Imaging Benchmarks) contained in the introduction. The performance analysis was based on actual 
memory component performance in an i960 processor-based environment. System interface delay between micro- 
processor and memory was not included in the analysis. The two benchmarks illustrate relative system memory 
performance. 

A. 28F016XS Flash Memory 


28F016XS is capable of 3-1-1-1-1-1-1-1 . . . read performance at 5.0V V C c and 33 MHz or 25 MHz (2-0-0-0-0-0-0-0 
... in terms of wait states). The benchmarking analysis is shown below: 



UDP/IP Networking Benchmark 

Imaging Benchmark 

Time (sec) 

Time (sec) 

i960 KB-25 
Microprocessor 

1.30 

1.64 

i960 CA-33 
Microprocessor 

.89 

.89 

i960 CF-33 
Microprocessor 

.53 

.59 


B. 16-Mbit DRAM 

16-Mbit DRAMs were, at the time this technical paper was published, only beginning to ramp into production. Only 
advance information for the wider xl6, 16-Mbit DRAMs was available for use in the calculations that follow. 

Sequential reads allow use of the DRAM fast page mode. Assumed DRAM specifications are shown below: 

• 80 ns tRAo 40 ns tAA (5.0V V C c) 

• 256 word (512 byte) page buffer 


Therefore, 16-Mbit DRAMs are capable of 3-2-2-2-2-2-2-2 . . . read performance at 33 MHz and 25 MHz (2-1-1-1-1- 
1-1-1 in terms of wait states . . . ). The benchmarking analysis is shown below: 



UDP/IP Networking Benchmark 

Imaging Benchmark 

Time (sec) 

Time (sec) 

i960 KB-25 
Microprocessor 

1.88 

1.89 

i960 CA-33 
Microprocessor 

1.06 

1.03 

i960 CF-33 
Microprocessor 

.59 

.64 


3-236 


AEWMO©! 0M1F@K0!51AY0@N] 































28F016XS/i960® Interface 

C. 4-Mbit EPROM 

Calculations that follow used the xl6 version of the 4-Mbit EPROM (Intel 27C400 or equivalent). 


The assumed 5.0V Vcc 4-Mbit EPROM random access time is 150 ns. Therefore, 4-Mbit EPROMs are capable of 5- 
5-5-5-5-5-5-5 . . . read performance at 5.0V Vcc anc * 33 MHz (4-4-4-4-4-4-4-4 ... in terms of wait states). The 
benchmarking analysis is shown below: 



UDP/IP Networking Benchmark 

Imaging Benchmark 

Time (sec) 

Time (sec) 

i960 KB-25 
Microprocessor 

NA 

NA 

i960 CA-33 
Microprocessor 

1.56 

1.49 

i960 CF-33 
Microprocessor 

.78 

.81 



D. 16-Mbit PAGED MASK ROM 

Calculations that follow used the xl6 version of the 16-Mbit paged mask ROM, which is not yet widely available 
from multiple vendors. The x8, 16-Mbit paged mask ROM is the more common version today. 

Sequential reads allow use of the mask ROM page mode. The assumed 5.0V Vcc 16-Mbit mask ROM random 
access time is 150 ns, with 75 ns accesses in page mode (4- word page). Therefore, 16-Mbit mask ROMs are capable 
of 5-3-3-3-5-3-3-3 . . . read performance at 5.0V Vcc and 33 MHz (4-2-2-2-4-2-2-2 ... in terms of wait states). The 
benchmarking analysis is shown below: 



UDP/IP Networking Benchmark 

Imaging Benchmark 

Time (sec) 

Time (sec) 

i960 KB-25 
Microprocessor 

NA 

NA 

i960 CA-33 
Microprocessor 

1.35 

1.30 

i960 CF-33 
Microprocessor 

.71 

.73 
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1.0 INTRODUCTION 

This technical paper describes designs interfacing the 
high performance 28F016XS flash memory to the 
Intel486™ microprocessor. These designs are based on 
preliminary 28F016XS specifications. Please contact 
your Intel or distribution sales office for up-to-date in- 
formation. Do not finalize a design based on the specifi- 
cations in this document. These designs have been fully 
simulated by not yet taken to lab prototype. 

The 28F016XS is a 16-Mbit flash memory with a syn- 
chronous pipelined read interface. This enhanced flash 
memory interface delivers equivalent or better read per- 
formance compared to DRAM. The 28F016XS com- 
bines ROM-like non-volatility, D RAM-like read per- 
formance and in-system updateability into one memory 
technology. These inherent capabilities will improve 
performance and lower the over-all system cost of a 
burst microprocessor, such as the Intel486 microproc- 
essor based design. The Intel486 microprocessor sees 
widespread use in a variety of applications ranging 
from the PC to numerous embedded products, while 
providing code compatibility with thousands of com- 
mercially available software packages and the perform- 
ance necessary for today’s leading-edge systems. The 
Intel486 microprocessor’s bus interface provides a burst 
transfer mechanism whereby four consecutive data 
items are fetched in one access sequence. The 
28F016XS’s synchronous pipelined read interface 
makes special use of the burst transfer mechanism to 
achieve extremely high read performance. 

When interfacing the 28F016XS to a processor that ex- 
ecutes an Intel or linear burst cycle, up to three simul- 
taneous read accesses can be piped into the 28F016XS. 
At 33 MHz, the 28F016XS-15 delivers zero wait-state 
performance after the initial pipeline fill. This enhanced 


intel. 

read performance eliminates the costly expense of shad- 
owing code from slow non-volatile memory (ROM, 
hard disk drive, etc.) to fast DRAM for increased sys- 
tem performance. The 28F016XS enables direct code 
execution out of the flash memory array, eliminating 
unnecessary software and hardware overhead involved 
in shadowing code. 

In an Intel486 microprocessor-based environment, 
BAPCo benchmarking analysis revealed a 13 % system 
performance improvement using the 28F016XS-15 over 
70 ns DRAM. 

In addition to the increased read performance, the 
28F016XS offers an Intel486 microprocessor-based sys- 
tem a low power, non-volatile memory that is electri- 
cally updateable via local processor control. The 
28F016XS’s low power consumption reduces system 
power dissipation and heat emission, and its updateabil- 
ity increases code flexibility and system reliability. 
Combined, the 28F016XS and the Intel486 microproc- 
essor deliver a high performance, low power and cost- 
effective system solution. 

The Intel486 interface to the 28F016XS requires mini- 
mal logic while offering significant system enhance- 
ments. One programmable logic device (PLD), a 
85C22V10-15, generates and monitors all 28F016XS 
and Intel486 microprocessor control signals. This tech- 
nical paper explores the interface between the 
28F016XS-15 and the Intel486 SX-33, describing the 
interface circuitry, explaining the read and write cycles 
and providing the interfacing PLD equations. It also 
provides detailed design suggestions for interfacing the 
28F016XS to other Intel486 microprocessors. 
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Figure 1 . Minimal Glue Logic in Interfacing the 28F016XS-15/lntel486TM SX -33 


2.0 INTERFACE CIRCUITRY 
DESCRIPTION 

The 28F016XS-15 interface to the Intel486 SX-33 illus- 
trated in Figures 1 delivers 3-0-0-0 wait-state read per- 
formance. 

Memory Configuration 

This design uses two 28F016XS-15s, each configured in 
xl6 mode and arranged in parallel to match the In- 
tel486 SX’s 32-bit data bus, providing 4 MBytes of flash 
memory. Signals A 2 i _4 from the Intel486 SX and 
CTRj_o from the PLD select locations within the 


28F016XS memory space, arranged as 1 Meg double 
words. The two-bit counter implemented in the PLD 
loads addresses A 3_2 at the beginning of each memory 
cycle and increments through the Intel burst order, 
feeding consecutive addresses to the 28F016XSs. 

Reset 

The Intel486 SX requires an active high reset signal, 
while the 28F016XSs use an active low RESET#. Fig- 
ure 2 illustrates a suggested logic configuration for gen- 
erating both an active high and low reset signal. The 
active high RESET controls the Intel486 SX and PLD 
RESET inputs, while the active low RESET# drives 
the 28F016XS RP# input. 
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Figure 2. RESET Generation Method 


Chip Select Logic 

Chip select decode logic may use A 21-22 to generate 
active low chip select signals, CEx#, for the 28F016XS 
memory space and other system peripherals. The chip 
select addressing the 28F016XS memory space drives 
CEq# on each 28F016XS-15 and a control input to the 
PLD. The 28F016XS-15s’ CEj# inputs are grounded. 
For many systems, using the upper address bits in a 
linear selection scheme may provide a sufficient num- 
ber of chip select signals, thus eliminating chip select 
decode logic. (See Figure 3 for an example of using 
linear selection for chip selects.) When using a linear 
chip select scheme however, software must avoid using 
addresses that may select more than one device, which 
could result in bus contention. For example, addresses 
01000000H through 010FFFFFH drive both A22 and 
A23 to a logic “0,” which inadvertently selects two pe- 
ripheral devices. 



Figure 3. Example of Using Linear Chip Selection 
with Active Low Chip Select Signals 
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CLK Option 

A 33 MHz CLK drives the Intel486 SX, the PLD and 
the 28F016XS-15s. Position the PLD and the 
28F016XS-15s within close proximity to the micro- 
processor to minimize CLK skew between CPU, inter- 
face logic and flush memory components. 

Interface Control Signals 

The interfacing state machine monitors the Intel486 
SX’s external bus signals to control the twp-bit counter 
and generate OE#, WE# and ADV# signals to the 
28F016XS-15s. At the beginning of the burst cycle, the 
interface logic loads the two-bit counter and generates 
burst addresses to the 28F016XS-15s. The state ma- 
chine also generates KEN#, BRDY # and RDY # sig- 
nals, informing the Intel486 SX of the nature of the bus 
cycle. 

Configuration Signal 

A general purpose input/output (GPIO) generates the 
configuration signal input to the state machine. The 
configuration signal must reset to logic “0” on power- 
up and system reset to ensure that the operation of the 
state machine matches the initial SFI Configuration of 
the 28F016XS-15s. After optimizing the SFI Configu- 
ration, the GPIO must switch to logic “1.” See Section 
4 for more information regarding the configuration sig- 
nal. 


Additional 28F016XS Control Signals 

The BYTE# input to the 28F016XS-15s is tied to 5.0V 
to configure the 28F016XS-15s for xl6 mode, and Aq is 
tied to GND (Ao is only used for byte addressing). A 
GPIO controls the write protect input, WP#, to the 
28F016XS-15s. The 28F016XS is compatible with ei- 
ther a 5.0V or a 12.0V Vpp voltage and is completely 
protected from data alteration when Vpp is switched 
below V PPLK . With V PP <; V P p LK , the 28F016XS will 
not successfully complete Data Write and Erase opera- 
tions, resulting in absolute flash memory data protec- 
tion. Figure 1 also illustrates the 28F016XS-15’s RY/ 
BY # output connecting directly to a system interrupt, 
which enables background Write/Erase operations. 
RY/BY#, WP#, and Vpp implementations are appli- 
cation dependent. Consult the Additional Information 
section of this technical paper for documentation cover- 
ing these topics in more detail. 


3.0 INTERFACING SIGNAL 
DEFINITIONS 

The interface logic that controls the 28F016XS-15 
Intel486 SX-33 interface monitors and regulates specif- 
ic signals. The next two sections describe these signals. 

3.1 28F016XS Signal Descriptions 

This section describes the 28F016XS signals that are 
pertinent to this design. 

ADV# — Address Valid (Input) 

This active low signal informs the 28F016XS that a 
valid address is present on its address pins. ADV#, in 
conjunction with a rising CLK edge, initiates a read 
access to the 28F016XS. This signal is ignored during 
write operations. 

CLK— Clock (Input) 

CLK provides the fundamental timing and internal op- 
erating read frequency for the 28F016XS. CLK initi- 
ates read accesses (in conjunction with ADV#), times 
out the SFI Configuration, and synchronizes device 
outputs. CLK can be slowed or stopped with no loss of 
data synchronization. This signal, like ADV#, is ig- 
nored during write operations. 

OE#— Output Enable (Input) 

This active low signal activates the 28F016XS’s output 
buffers when OE# equals “0”. The outputs tri-state 
when OE# is driven to “1”. 

WE#— Write Enable (Input) 

This active low signal controls access to the Control 
User Interface (CUI), Page Buffers, Data Queue Regis- 
ters and Address Queue Latches. Addresses (command 
or array) and data are latched on the rising edge of 
WE# during write cycles, while page buffer addresses 
are latched on the falling edge of WE#. 
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3.2 Intel486™ SX Signal Descriptions 

This section describes the Intel486 SX signals that are 
relevant to this interface. This interface assumes proces- 
sor inputs are driven by only one controlling device (the 
PLD). If more than one device drives a processor input, 
the PLD output should be configured as open drain to 
avoid signal contention. Many PLDs, FPGAs and AS- 
ICs provide output configuration capability. 

ADS#— Address Status (Output) 

This active low output signal from the Intel486 SX 
processor indicates the presence of valid bus cycle and 
address signals on the bus. ADS# is driven in the same 
clock as the address signals. Typically, external circuit- 
ry uses ADS# to indicate the beginning of a bus cycle. 

KEN#— Cache Enable (Input) 

This active low input to the Intel486 SX determines 
whether data being returned in the current bus cycle 
will be cached. In order for the current data to be cach- 
ed, KEN # must be returned active in the clock prior to 
the first RDY # or BRD Y # of the cycle and must also 
be returned active in the last clock of the data transfer. 

RDY#— Non-Burst Ready (Input) 

RDY # indicates the completion of the current bus cy- 
cle. During a read, the assertion of RDY # indicates to 
the microprocessor that valid data exists on the data 
bus. During a write, RDY # indicates that the external 
device has accepted the data being supplied by the mi- 
croprocessor. 

BRDY#— Burst Ready (Input) 

This active low input to the microprocessor performs 
the same function during a burst cycle as RDY # per- 
forms during a non-burst cycle. During a burst cycle, 
BRDY # is sampled on the rising edge of every clock. 
Upon sampling BRDY# active, the data on the data 
bus will be latched into the microprocessor (for burst 
reads). ADS# will be negated during the second trans- 
fer of the burst cycle; however, the lower address lines 
and byte enables may change to indicate the next data 
item requested by the processor. 
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BLAST# — Burst Last (Output) 

This active low output from the microprocessor signals 
the final transfer in a burst cycle. The next time 
BRDY# is returned, it will be treated the same as 
RDY# and thus terminate any multiple cycle trans- 
fers. 


4.0 SYSTEM INTERFACE 
REQUIREMENT 

The system logic controlling the 28F016XS-15/In- 
tel486 SX interface has both an initial and an optimized 
read configuration, correlating to specific SFI Configu- 
ration values. The interface read configuration is de- 
pendent upon the value of RECONFIG (PLD input), 
which informs the interface of the SFI Configuration 
status. Note, the SFI Configuration status does not af- 
fect Write operations. 

Initial Read Configuration 

Upon power-up/reset, the 28F016XS-15 defaults to a 
SFI Configuration value of 4, and the interface logic 
supports single read accesses to the 28F016XS-15 mem- 
ory space. The interface returns RDY # to inform the 
processor that the interface does not support burst cy- 
cles. A general purpose input/output (GPIO) informs 
the system interface of the status of the SFI Configura- 
tion. 

The GPIO, RECONFIG, must be set to logic “0” on 
power-up/reset. With RECONFIG driven low, the 
state machine correctly matches the 28F016XS-15’s de- 
fault configuration. 

Optimized Read Configuration 

At 33 MHz, the 28F016XS-15 operates at highest per- 
formance with a SFI Configuration value set to 2. Re- 
configuring the 28F016XS-15, program control should 
jump to an area of RAM to execute the configuration 
sequence. After reconfiguring the 28F016XS-15, the 
GPIO value must change to logic “1,” in order to take 
advantage of the 28F016XS-15’s optimized configura- 
tion. A pseudocode flow for this configuration sequence 
is shown below. 

Execute Device Configuration command sequence 

Activate RECONFIG signal 

End 

In the optimized read configuration, the system logic 
supports burst cycles by generating BRDY#, which 
informs the microprocessor that the memory subsystem 
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is capable of handling a burst transfer. The 28F016XS- 
15 memory array, when executing burst cycles, trans- 
fers data to the processor at a rate of 132 MBytes/sec. 


5.0 READ CYCLE CONTROL FOR 
SINGLE AND BURST 
TRANSACTIONS 

The read state machine (Figure 4) performs one of two 
different read cycles, initial or optimized configuration, 
depending upon the RECONFIG input value. 

Read Abort Condition 

A read cycle will abort only when an external system 
bus master asserts BOFF#, which forces the processor 
to give immediate bus control to the requester. When 
this situation occurs, the Intel486 SX floats the address 
bus, which will cause the address decode logic to de-se- 
lect the 28F016XS memory space. The interfacing log- 
ic, monitoring BOFF#, will transition to an idle state 
waiting for the processor to re-initiate the interrupted 
bus cycle after the bus master has relinquished the bus 
to the processor. OE# is immediately driven high, de- 
activating the 28F016XS-15’s output buffers, upon de- 
tecting BOFF # driven active. This BOFF # condition 
can occur in both the initial and optimized configura- 
tions described in the paragraphs that follow. 

Initial Configuration 

Refer to Figures 4 and 5 for the following read cycle 
discussion. 

With RECONFIG set to logic “0,” the interfacing read 
state machine executes single non-cacheable read cy- 
cles. This configuration occurs upon power-up and re- 
set. 

The microprocessor initiates a read access to the 
28F016XS memory space by providing an address, 
driving W/R# low and activating ADS#. Monitoring 
the external bus of the Intel486 SX, the state machine 
transitions into read control. 

If ADS# = Oand W/R # = 0 then 
READ CONTROL 


At this point, RECONFIG and CE# are examined to 
determine the configuration status of the 28F016XS- 
15s, and whether or not the current address targets the 
28F016SX memory space. If CE# = “1,” the state 
machine returns to an idle state waiting for a new ac- 
cess. In the initial configuration (RECONFIG = “ 0 ”), 
read control regulates ADV#, RDY# and OE#. 

At N = 1 (Figure 5), the counter loads address bits 
A 3.2 and transitions ADV # low. With ADV # at logic 
“ 0 ,” the interface initiates a read access to the 
28F016XS-15s at N = 2. After initiating the read ac- 
cess, ADV# immediately switches to a logic “1” at N 
= 2 and remains at this value throughout the rest of 
the access. 

In the default SFI Configuration (SFI Configuration = 
4), data will be accessible to the processor at N = 7. 
The 28F016XS-15’s output buffers are enabled at N = 
4 and RDY # is driven low at N = 6 . The processor 
will sample RDY# active and latch the information 
residing on the data bus at N = 7, marking the comple- 
tion of the read access. The Intel486 SX requires a 3 ns 
hold time after sampling RDY # active, therefore, the 
state machine transitions to a state where it holds OE# 
active to force the 28F016XS-15s to hold the data on 
their output pins. At N = 8 , the state machine tran- 
sitions to an idle state where it deactivates OE# and 
waits for the Intel486 SX to initiate a new bus cycle 
targeting the 28F016XS memory space. 

Initial Configuration Timing Consideration 

In the initial read configuration, CE# setup is a key 
system timing parameter. 

To satisfy the 28F016XS-15 setup requirement, CE# 
must be valid 25 ns prior to the first rising CLK edge 
with ADV# = “0.” Therefore, the maximum time al- 
lotted for the address decoding logic to generate CE# 
equals: 

2 * 1/33 MHz - t 6 - t ELC H = 19 ns 

Consult the appropriate datasheets for full timing infor- 
mation. 
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N=0 N=1 N=2 N=3 N=4 N=5 N=6 N=7 N=8 



Figure 5. Example Non-Burst Read Cycle Showing 
Key Timing Specifications Requiring Consideration 


Table 1. Example Initial Read Cycle Timing Specifications at 5V Vqc 


Symbol 

Description 

Min 

Max 

Unit 

t6 

ADS# Delay (Intel486™ SX-33) 

3 

16 

ns 

*16 

RDY# Setup Time (Intel486™ SX-33) 

5 


ns 

*22 

D 3 i_o Setup Time (lntel486TM SX-33) 

5 


ns 

tELCH 

CE X # Setup Time to CLK (28F01 6XS-1 5) 

25 


ns 

*VLCH 

ADV# Setup Time to CLK (28F01 6XS-1 5) 

15 


ns 

*GLCH 

OE# Setup Time to CLK (28F016XS-15) 

15 


ns 

*CHQV 

CLK to Data Delay (28F01 6XS-1 5) 


20 

ns 

*pzx 

CLK Output Delay (85C22V10-15) 

2 

8 

ns 


NOTE: 

Consult appropriate datasheets for up-to-date specifications. 
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Optimized Configuration 

Refer to Figures 4 and 6 for the following discussion: 


intel. 

At N = 3, the state machine drives KEN# active and 
holds it active until the end of the burst cycle, thereby 
executing a cache line fill. 


With the 28F016XS-15s in the optimized configuration 
(SFI Configuration = 2 at 33 MHz), and RECONFIG 
set to a logic “1” value, the system interface executes 
cacheable burst cycles. 

The Intel486 SX processor drives ADS # low, notifying 
the interface logic that a valid address is on the address 
bus. Monitoring the external bus of the Intel486 SX, 
the state machine then transitions into read control. 

If ADS* = Oand W/R* = 0 then 

READ CONTROL 

In optimized read control, the state machine drives 
OE#, KEN# and BRDY#. If CE# = “0,” the state 
machine at N = 1 loads the two-bit counter (A 3 _ 2 ) 
and activates ADV # (ADV # = “0”) for the next four 
consecutive clock periods (N = 1 through 5). While 
ADV # is driven low, the counter increments through 
the Intel burst order (Table 2), supplying the 
28F016XS-15s with a new address at N — 2, 3, 4 and 
5. If CE# = “1,” the state machine returns to an idle 
state waiting for a new memory access. 


Table 2 . Intel Burst Order (A3.2) 


First 

Address 

Second 

Address 

Third 

Address 

Fourth 

Address 

0 

4 

8 

C 

4 

0 

C 

8 

8 

C 

0 

4 

C 

8 

4 

0 


The state machine activates the 28F016XS-15 output 
buffers (OE# driven to a logic “0” value) at N = 3 
and holds them active throughout the burst read cycle. 

With the SFI Configuration value set to 2, new data 
will be available on the 28F016XS-15 output pins at 
N = 5, 6, 7 and 8. Driving BRDY # low at N = 4, the 
Intel486 SX microprocessor will sample BRDY# ac- 
tive at N = 5, which informs the processor of valid 
information on data pins D 3 i_o and that the 28F016XS 
memory space supports a burst read transfer. BRDY # 
is held low until the end of the burst cycle while the 
processor retrieves data on every rising clock edge. 
BRDY # is driven high upon sampling BLAST # low, 
marking the end of the burst cycle. 

The Intel486 SX requires a 3 ns hold time after sam- 
pling the last BRDY # active in a burst cycle. There- 
fore, the state machine transitions to a state where it 
holds OE# active, which forces the 28F016XS-15s to 
hold the data on their output pins. At N = 9, the state 
machine transitions to an idle state, where it deactivates 
OE# and waits for the Intel486 SX to initiate a new 
bus cycle targeting the 28F016XS memory space. 

Optimized Configuration Timing Considerations 

In the optimized configuration, CE# setup time is 
again a key system timing parameter. For information 
regarding the CE# setup time requirement, see the Ini- 
tial Configuration Timing Considerations Timing sec- 
tion. 
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Symbol 



Figure 6. Example Burst Read Cycle Showing 
Key Timing Specifications Requiring Consideration 

Table 3. Example Optimized Read Cycle Specifications at 5V Vqc 


Description 


ADS# Delay (lntel486TM SX-33) 


BLAST# Delay (lntel486TM SX-33) 


D31-0 Setup Time (lnte!486TM SX-33) 


CE X # Setup Time to CLK (28F01 6XS-1 5) 


ADV# Setup Time to CLK (28F016XS-15) 115 

OE# Setup Time to CLK (28F016XS-15) 15 

CLK to Data Delay (28F01 6XS-1 5) 20 


CLK Output Delay (85C22V1 0-1 5) 2 8 



NOTE: 

Consult appropriate datasheets for up-to-date specifications. 
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6.0 WRITE CYCLE CONTROL 

Refer to Figures 7 and 8 for the following write cycle 
discussion: 

Write Abort Condition 

A write cycle will abort only when an external system 
bus master asserts BOFF#, which forces the processor 
to give immediate bus control to the requester. When 
this situation occurs, the Intel486 SX will float the ad- 
dress bus, causing the address decode logic to de-select 
the 28F016XS memory space. The interfacing logic, 
monitoring BOFF#, will transition to an idle state 
waiting for the processor to re-initiate the interrupted 
bus cycle after the bus master has relinquished the bus 
to the processor. WE# is immediately deactivated 
upon sensing BOFF# low. 



Figure 7. Non-Burst Write State Diagram 
Controlling the Interface Shown in Figure 1 


int©l. 

Write Cycle Description 

The 28F016XS-15 executes asynchronous write cycles 
like traditional flash memory components such as the 
28F016SA/SV. The SFI Configuration does not influ- 
ence write operations; therefore, the interfacing state 
machine does not examine RECONFIG once detecting 
a write cycle. 

During the first clock period, the Intel486 SX micro- 
processor drives ADS# low and W/R# high. The 
state machine detects a write cycle, loads the two-bit 
counter, activates WE# and transitions to write con- 
trol at N = 1 (Figure 8). The counter only supplies the 
28F016XS-15 with one address. A write transaction 
must compete fully before issuing a second write opera- 
tion. 

If ADS# = 0 and W/R # = 1 then 
WRITE CONTROL 

In write control, the state machine performs WE#- 
Controlled Command Write operations to the 
28F016XS-15s. Data is written to the 28F016XS-15 
memory space via processor control. The interface only 
supports double word writes. 

For the next three clock periods, N = 2 through 4, the 
state machine holds WE# low to satisfy the 
28F016XS-15’s WE# active requirement. At N = 4, 
WE# transitions to a logic “1,” which latches the ad- 
dress and data into the 28F016XS-15s. 

RDY# is not returned to the processor at N=4 be- 
cause the Intel486 SX will only hold an address 3 ns 
after sampling RDY # low. Instead, the interface acti- 
vates RDY# after N = 4, causing the processor to 
hold the address valid for an additional clock cycle, 
which satisfies the 28F016XS-15’s address hold specifi- 
cation (twHAx)* The state machine then returns to an 
inactive state at N = 5, waiting for a new memory 
access. 


Write Timing Consideration 

When performing a write operation, CE# is a critical 
system timing parameter, which must satisfy the inter- 
face logic’s required setup time. The 85C22V10-15 re- 
quires a 9 ns setup time to CLK. Therefore, the system 
decode logic must generate a valid CE# to the inter- 
face within: 


2 * 1/33 MHz - t 6 - t S u = 35 ns 


Consult the appropriate datasheets for full timing infor- 
mation. 


DM(F©K(MlAirD©M 
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N=0 N=1 N=2 N=3 N=4 N=5 



Figure 8. Example Write Cycle Showing 
Key Timing Specifications Requiring Consideration 


Table 4. Example Write Cycle Timing Specifications at 5V Vcc 


Symbol 

Description 

Min 

Max 

Unit 

te 


3 

16 

ns 

tio 

Data Write Valid Delay (lntel 486 TM SX-33) 

3 

18 

ns 

til 

Data Write Float Delay (lntel 486 TM SX-33) 


20 

ns 

tWLWH 

WE# Pulse Width (28F016XS-15) 


50 

ns 

tDVWH 

Data Setup to WE# Going High (28F01 6XS-1 5) 


50 

ns 

tpzx 

CLK Output Delay (85C22V1 0-1 0) 

2 

8 

ns 


NOTE: 

Consult appropriate datasheets for up-to-date specifications. 
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7.0 INTERFACING TO OTHER 
INTEL486™ 

MICROPROCESSORS 

The Intel486 microprocessor family provides designers 
a large and diverse selection of CPUs, which offers de- 
signers different performance points to meet different 
market segment needs. Throughout the product family, 
the external bus architecture has remained consistent, 
which makes the 28F016XS interface to the entire In- 
tel486 microprocessor family similar, if not identical, to 
the Intel486 SX interface described in Sections 2 
through 6. The 28F016XS-15 Intel486 SX-33 interface 
works equally well for the following Intel486 micro- 
processors at 5.0V Vco 

• Intel486 SX-20, 25 

• Intel486 SX2 tm_50 

• Intel486 DX-25, 33 

• Intel486 DX2TM-40, 50, 66 

• IntelDX4 T M-75, 100 (I/O buffers configured for 
5.0V, V CC 5 = 5.0V) 

The 28F016XS-15 Intel486 SX-33 interface also works 
well for the following Intel486 microprocessors at 3.3V 
Vco The 3.3V V CC design utilizes a iPLD22V10-15 
low voltage PLD to control the interface between the 
28F016XS-15 (operating at 3.3V Vcc) an d the proces- 
sor. 

• Intel486 SX-20, 25 

• Intel486 DX-25 

• Intel486 DX2-40, 50 

• IntelDX4-75 

(I/O buffers configured for 3.3V, Vccs = 3.3V) 

When the external bus frequency falls outside the 16.7 
MHz through 33 MHz frequency range at 5.0V Vcc 
(12.5 MHz through 25 MHz at 3.3V V CC )> the opti- 
mized SFI Configuration value for the 28F016XS-15 
differs in respect to the Intel486 SX-33 design docu- 
mented earlier. The state machine, therefore, requires 
slight modifications to accommodate the different SFI 
Configuration. Note, the initial read configuration and 
write control state machine remains consistent 
throughout all designs because they are not affected by 
the optimized SFI Configuration. 

lntel486TM SX-16 Interface at 5.0V V C c 

The 28F016XS-15’s optimized SFI Configuration at 16 
MHz equals 1. Therefore, 28F016XS-15 will begin 
driving data one CLK period after initiating the first 
read access. The optimized state machine must drive 
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BRDY# and OE# active upon initiating the first ac- 
cess to the 28F016XS-15. BRDY# and OE# remain 
low throughout the burst cycle. At 16 MHz, this inter- 
face delivers 2-0-0-0 wait-state performance. 

Intel486™ DX-50 Interface at 5V V C c 

Operating at 50 MHz, the 28F016XS-15’s optimized 
SFI Configuration equals 3. The interface loads the 
two-bit counter and drives ADV# active at the first 
rising CLK edge after the processor initiates the read 
access. The optimized read state machine increments 
the two-bit counter and drives ADV # low every other 
CLK, thereby adhering to the Alternating-Aj and 
Same-A ] access rules (see Additional Information). The 
28F016XS-15 Intel486 DX-50 interface delivers 5- 1-1-1 
wait-state read performance. 

Intel486™ DX-33 and lntelDX4™-100 Interface 
at 3.3V V C c 

Operating at 33 MHz with 3.3V Vco the 
28F016XS-15*s optimized SFI Configuration equals 3. 
The interface loads the two-bit counter and drives 
ADV# active at the first rising CLK edge after the 
processor initiates the read access. The optimized read 
state machine increments the two-bit counter and 
drives ADV# low for two CLK periods and then 
strobes ADV# high for one CLK period. ADV# is 
again driven low for two CLK periods finishing the 
burst cycle. Refer to the Alternating-A / and Same-A j 
access rules (see Additional Information) for further 
information on consecutive accesses. The 28F016XS-15 
Intel486 DX-33 interface at 3.3V Vcc delivers 4-0-1-0 
wait-state read performance. 


8.0 CONCLUSION 

This technical paper has described the interface be- 
tween the 28F016XS 16-Mbit flash memory component 
and the Intel486 microprocessor. This simple design 
has been implemented with a minimal number of com- 
ponents and achieves exceptional read performance. 
The 28F016XS provides the microprocessor with the 
non-volatility and updateability of flash memory and 
the performance of DRAM. For further information 
about 28F016XS-15, consult reference documentation 
for a more comprehensive understanding of device ca- 
pabilities and design techniques. Please contact your 
local Intel or distribution sales office for more informa- 
tion on Intel’s flash memory products. 
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ADDITIONAL INFORMATION 


Order Number 

Document/Tools 

290532 

28F016XS Datasheet 

297500 

“Interfacing 28F01 6XS to the i960® Microprocessor 
Family” 

292147 

AP-398, “Designing with the 28F016XS” 

292146 

AP-600, “Performance Benefits and Power/ Energy Savings of 
28F016XS Based System Designs” 

297372 

16-Mbit Flash Product User’s Manual, 

28F01 6SA/28F01 6SV/28F01 6XS/28F01 6XD 

297508 

FlashBuilder Utility 

Contact Intel /Distribution 
Sales Office 

28F016XS Benchmark Utility 

Contact Intel/Distribution 
Sales Office 

28F016XS iBIS Models 

Contact Intel/ Distribution 
Sales Office 

28F016XS VHDL/Verilog Models 

Contact Intel/Distribution 
Sales Office 

28F016XS Timing Designer Library Files 

Contact Intel/Distribution 
Sales Office 

28F016XS Oread and ViewLogic Schematic Symbols 


REVISION HISTORY 


Number 

Description 

001 

Original Version 
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APPENDIX A 

PLD FILE FOR THE 28F016XS INTEL486™ INTERFACE 


Title 

28F01 6XS-1 5 / 486™ Interface 


Pattern 

PDS 



Revision 

1 



Author 

Example 



Company Name Intel Corporation 


Date 

2/14/94 



CHIP S Fl_486 J nterf ace 85C22V10 ;85C22V10-15 


; input pins 

1 


PIN 

CLK 

; elk frequency 33MHz 


PIN 

ADS 

; address strobe from 486 


PIN 

WR 

; multiplexed read/write strobe 


PIN 

BLAST 

; BLAST from the 486 


PIN 

CE 

; CE from the address decoding logic 


PIN 

RECONF 

; informs interface to changes to the SFI 




; Configuration 


PIN 

A2 

; lower address lines from the 486 used 


PIN 

A3 

; in loading the counter 


PIN 

RESET 

; system reset 


PIN 25 

GLOBAL 


.. 

; output pins 



PIN 

/ADV 

; address valid input to 28F01 6XS 


PIN 

/KEN 

; cache control 


PIN 

/AU 

; output enable input to 28F016XS 


PIN 

/WE 

; write enable input to 28F016XS 


PIN 

/BRDY 

; initiating a burst cycle, 486 input 


PIN 

/RDY 

; non-burst cycle ready, again 486 input 


PIN 

QO 

; state variable 


PIN 

Q1 

; state variable 


PIN 

CONTO 

; lower bit of the 2-bit counter 


PIN 

CONTI 

; higher bit of the 2-bit counter 


STATE MOORE MACHINE 



DEFAULT_BRANCH SO 
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; state assignments 

50 = /ADV * /KEN * /AU * /WE * /BRDY * /RDY * /QO * /Q1 

51 = ADV * /KEN * /AU * /WE * /BRDY * /RDY * /QO * /Q1 

52 = ADV * /KEN * /AU * /WE * /BRDY * /RDY * /QO * Q1 

53 = ADV* KEN* AU * /WE * /BRDY * /RDY * /QO * /Q1 

54 = ADV* KEN* AU*/WE* BRDY * /RDY * /QO * /Q1 

55 = /ADV * KEN* AU*/WE* BRDY * /RDY * /QO * /Q1 

56 = /ADV * /KEN * AU * /WE * /BRDY * /RDY * QO * Q1 

57 = /ADV * /KEN * /AU * /WE * /BRDY * /RDY * /QO * Q1 

58 = /ADV * /KEN * /AU * /WE * /BRDY * /RDY * QO * /Q1 

59 = /ADV * /KEN * AU * /WE * /BRDY * /RDY * /QO * /Q1 

510 = /ADV * /KEN * AU * /WE * /BRDY * /RDY * /QO * Q1 

511 = /ADV * /KEN * AU * /WE * /BRDY * RDY * /QO * /Q1 

512 = /ADV * /KEN * /AU * WE * /BRDY * /RDY * /QO * /Q1 

513 = /ADV * /KEN * /AU * WE * /BRDY * /RDY * /QO * Q1 

514 = /ADV * /KEN * /AU * WE * /BRDY * /RDY * QO * /Q1 

515 = /ADV * /KEN * /AU * /WE * /BRDY * RDY * /QO * /Q1 


; state transitions 
SO := ADS * BOFF 

-> SO 

; start of an access 

+ /ADS * /BOFF * /WR 

-> SI 


+ /ADS * /BOFF * WR 

-> SI 2 


SI := /RECONF * /CE 

-> S7 

; not reconfigured 

+ RECONF */CE 

-> S2 

; reconfig active low 

+ BOFF + CE 

-> so 


S2 := /BOFF 

-> S3 

; if BOFF is asserted, 

+ BOFF 

-> SO 

; quit the access and return 

S3 := /BOFF 

-> S4 

; to state SO. The 486 will 

+ BOFF 

->S0 

; re-initiate the access. 

S4 := /BOFF 

-> S5 


+ BOFF 

-> SO 


S5 := BLAST 

-> S5 

; continuos cycling until BLAST is 

+ /BLAST + BOFF 

-> S6 

; presented - end the burst cycle 

S6 := ADS * BOFF 

-> SO 

; holds OE# active for one additional 

+ /ADS * /BOFF * /WR 

-> SI 

; CLK to satisfy the 486's data hold 

+ /ADS * /BOFF * WR 

-> SI 2 

; time. 

S7 := /BOFF 

-> S8 


+ BOFF 

-> SO 


S8 := /BOFF 

-> S9 

; if BOFF is activated, 

+ BOFF 

-> SO 

; quit the access and return 

S9 := /BOFF 

-> S10 

; to state SO. The 486 will 

+ BOFF 

-> SO 

; re-initiate the access. 

S10 := /BOFF 

-> S11 


+ BOFF 

-> SO 


S11 := VCC 

-> S6 


S12 := /BOFF 

-> SI 3 

; write cycle 

+ BOFF 

-> SO 


SI 3 := /BOFF 

-> SI 4 


+ BOFF 

-> SO 


S14 := /BOFF 

-> SI 5 


+ BOFF 

-> SO 


SI 5 := VCC 

-> SO 



297504-10 
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EQUATIONS 

CONTI := (/ADS * /CE * A3) + (CONTI # SI) 

+ (/CONTI * S2) + (CONTI * S3) 

+ (CONTI * SI 2) + (CONTI * SI 3) + (CONTI * SI 4) 
CONTO := (/ADS * /CE * A2) + (/CONTO * SI) 

+ (/CONTO * S2) + (/CONTO * S3) 

+ (CONTO * SI 2) + (CONTO * S13) + (CONTO * S14) 


CONTO.CLKF 

CONTI .CLKF 

ADV.CLKF 

OE.CLKF 

WE.CLKF 

BRDY.CLKF 

RDY.CLKF 

KEN.CLKF 

QO.CLKF 

Q1.CLKF 

GLOBAL. RSTF 


« CLK 
=s CLK 
= CLK 
= CLK 
= CLK 
sb CLK 
= CLK 
= CLK 
= CLK 
= CLK 
= RESET 
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DD28F032SA 

32-MBIT (2 MBIT X 16, 4 MBIT X 8) 

FlashFile™ MEMORY 

■ User-Selectable 3.3V or 5V Vqc 

■ User-Configurable x8 or x16 Operation 

■ 70 ns Maximum Access Time 

■ 0.43 MB/sec Write Transfer Rate 

■ 1 Million Typical Erase Cycles per 
Block 

■ 56-Lead, 1.2 x 14 x 20mm Advanced 
Dual Die TSOP Package Technology 

■ 64 Independently Lockable Blocks 

Intel’s DD28F032SA 32-Mbit FlashFileTM memory is a revolutionary architecture which enables the design of 
truly mobile, high performance, personal computing and communication products. With innovative capabilities, 
low power operation and very high read/write performance, the DD28F032SA is also the ideal choice for 
designing embedded mass storage flash memory systems. 

The DD28F032SA is the result of highly advanced packaging innovation which encapsulates two 28F016SA 
die in a single Dual Die Thin Small Outline Package (DDTSOP). 

The DD28F032SA is the highest density, highest performance nonvolatile read/write solution for solid-state 
storage applications. Its symmetrically blocked architecture (100% compatible with the 28F016SA 16-Mbit 
FlashFile memory), very high cycling, low power 3.3V operation, very fast write and read performance and 
selective block locking provide a highly flexible memory component suitable for high density memory cards, 
Resident Flash Arrays and PCMCIA-ATA Flash Drives. The DD28F032SA’s dual read voltage enables the 
design of memory cards which can interchangeably be read/written in 3.3V and 5.0V systems. Its x8/x16 
architecture allows the optimization of memory to processor interface. The flexible block locking option en- 
ables bundling of executable application software in a Resident Flash Array or memory card. The 
DD28F032SA will be manufactured on Intel’s 0.6 jmm ETOX IV technology. 


■ Revolutionary Architecture 

— 100% Backwards-Compatible with 
Intel 28F016SA 

— Pipelined Command Execution 
— Write during Erase 

■ 2 mA Typical Iqc in Static Mode 

■ 2 jllA Typical Deep Power-Down 

■ State-of-the-Art 0.6 jum ETOXtm iv 
F lash Technology 
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1.0 PRODUCT OVERVIEW 

The DD28F032SA is a high-performance 32-Mbit 
(33,554,432-bit) block erasable nonvolatile random 
access memory organized as either 2 Mword x 16, 
or 4 Mbyte x 8. The DD28F032SA is built using two 
28F01 6SA chips encapsulated in a single 56L-TSOP 
Type I package. The DD28F032SA includes sixty- 
four 64-KB (65,536) blocks or sixty-four 32-KW 
(32,768) blocks. 

The DD28F032SA architecture allows operations to 
be performed on a single, 1 6-Mbit chip at a time. 

The implementation of a new architecture, with 
many enhanced features, will improve the device op- 
erating characteristics and results in greater product 
reliability and ease of use. 

Among the significant enhancements on the 
DD28F032SA: 

• 3.3V Low Power Capability 

• Improved Write Performance 

• Dedicated Block Write/ Erase Protection 

A 3/5# input pin reconfigures the device internally 
for optimized 3.3V or 5.0V Read/Write operation. 

The DD28F032SA will be available in a 56-lead, 
1.2mm thick, 14mm x 20mm Dual Die TSOP Type I 
package. This form factor and pinout allow for very 
high board layout densities. The DD28F032SA is 
pinout and footprint compatible with the 28F016SA. 

Two Command User Interfaces (CUI) serve as the 
system interface between the microprocessor or mi- 
crocontroller and the internal memory operation. 

Internal Algorithm Automation allows Word/Byte 
Writes and Block Erase operations to be executed 
using a Two-Write command sequence to the CUI in 
the same way as the 28F016SA 16-Mbit FlashFile 
memory. 

A super-set of commands has been added to the 
basic 28F008SA (8-Mbit FlashFile memory) com- 
mand-set to achieve higher write performance and 
provide additional capabilities. These new com- 
mands and features include: 

• Page Buffer Writes to Flash 

• Command Queueing Capability 

• Automatic Data Writes during Erase 


• Software Locking of Memory Blocks 

• Two-Byte Successive Writes in 8-bit Systems 

• Erase All Unlocked Blocks 

Note that these operations can only be performed 
on one 16-Mbit device at a time. If the WSM is busy 
performing an operation, the system should not at- 
tempt to select the other device. 

Writing of memory data is performed in either byte or 
word increments typically within 6 jlls, a 33% im- 
provement over the 28F008SA. A Block Erase oper- 
ation erases one of the 64 blocks in typically 0.6 sec, 
independent of the other blocks, which is about a 
65% improvement over the 28F008SA. 

Each block can be written and erased a minimum of 
1 00,000 cycles. Systems can achieve typically 1 mil- 
lion Block Erase Cycles by providing graceful block 
retirement. This technique is already employed in 
hard disk drive designs. Additionally, wear leveling of 
block erase cycles can be used to minimize the 
write/erase performance differences across blocks. 

The DD28F032SA incorporates two Page Buffers of 
256 Bytes (128 Words) on each 28F016SA to allow 
page data writes. This feature can improve a system 
write performance by up to 4.8 times over previous 
flash memory devices. 

All operations are started by a sequence of Write 
commands to the device. Three Status Registers 
(described in detail later) and a RY/BY# output pin 
provide information on the progress of the requested 
operation. 

The DD28F032SA allows queueing of the next oper- 
ation while the memory executes the current opera- 
tion. This eliminates system overhead when writing 
several bytes in a row to the array or erasing several 
blocks at the same time. The DD28F032SA can also 
perform Write operations to one block of memory 
while performing Erase of another block. However, 
simultaneous Write and/or Erase operations are not 
allowed on both 28F016SA devices. See Modes of 
Operation, Section 3.0. 

The DD28F032SA provides user-selectable block 
locking to protect code or data such as Device Driv- 
ers, PCMCIA card information, ROM-Executable 
O/S or Application Code. Each block has an associ- 
ated nonvolatile lock-bit which determines the lock 
status of the block. In addition, the DD28F032SA 
has a master Write Protect pin (WP#) which pre- 
vents any modifications to memory blocks whose 
lock-bits are set. 
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The DD28F032SA contains three types of Status 
Registers to accomplish various functions: 

• A Compatible Status Register (CSR) which is 
100% compatible with the 28F008SA FlashFile 
memory’s Status Register. This register, when 
used alone, provides a straightforward upgrade 
capability to the DD28F032SA from a 28F008SA- 
based design. 

• A Global Status Register (GSR) which informs 
the system of command Queue status, Page 
Buffer status, and overall Write State Machine 
(WSM) status. 

• 64 Block Status Registers (BSRs) which provide 
block-specific status information such as the 
block lock-bit status. 

The GSR and BSR memory maps for Byte-Wide and 
Word-Wide modes are shown in Figures 4 and 5. 

The DD28F032SA incorporates an open drain RY/ 
BY# output pin. This feature allows the user to OR- 
tie many RY/BY# pins together in a multiple memo- 
ry configuration such as a Resident Flash Array. 
Other configurations of the RY/BY# pin are en- 
abled via special CUI commands and are described 
in detail in the 28F016SA User’s Manual. 

The DD28F032SA also incorporates three chip-en- 
able input pins, CE 0 #, CE-| # and CE 2 #. The active 
low combination of CEq# and CE-|# controls the 
upper 28F016SA. The active low combination of 
CEq# and CE 2 # controls the lower 28F016SA. 


The BYTE# pin allows either x8 or x16 read/writes 
to the DD28F032SA. BYTE# at logic low selects 
8-bit mode with address Aq selecting between low 
byte and high byte. On the other hand, BYTE# at 
logic high enables 1 6-bit operation with address Ai 
becoming the lowest order address and address Aq 
is not used (don’t care). A device block diagram is 
shown in Figure 1 . 

The DD28F032SA incorporates an Automatic Power 
Saving (APS) feature which substantially reduces 
the active current when the device is in static mode 
of operation (addresses not switching). 

A deep power-down mode of operation is invoked 
when the RP# (called PWD on the 28F008SA) pin is 
driven low. This mode provides additional write pro- 
tection by acting as a device reset pin during power 
transitions, n the Deep Power-Down state, the WSM 
is reset (any current operation will abort) and the 
CSR, GSR and BSR registers are cleared. 

A CMOS standby mode of operation is enabled 
when either CEq#, or both CEi# and CE 2 #, tran- 
sition high and RP# stays high with all input control 
pins at CMOS levels. 


2.0 DEVICE PINOUT 

The DD28F032SA Standard 56L-Dual Die TSOP 
Type I pinout configuration is shown in Figure 2. 
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Figure 1. Block Diagram of 16-Mbit Devices 

Architectural Evolution Includes Page Buffers, Queue Registers and Extended Registers 
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2.1. Lead Descriptions 


Symbol 

Type 

Name and Function 

A o 

INPUT 

BYTE-SELECT ADDRESS: Selects between high and low byte when 
device is in x8 mode. This address is latched in x8 Data Writes. Not 
used in x16 mode (i.e., the Aq input buffer is turned off when BYTE# is 
high). 


INPUT 

WORD-SELECT ADDRESSES: Select a word within one 64-Kbyte 
block. Ae_i 5 selects 1 of 1024 rows, and Ai _5 selects 16 of 512 
columns. These addresses are latched during Data Writes. 

A16-A20 

INPUT 

BLOCK-SELECT ADDRESSES: Select 1 of 32 Erase blocks. These 
addresses are latched during Data Writes, Erase and Lock-Block 
operations. 

DQ0-DQ7 

INPUT/OUTPUT 

LOW-BYTE DATA BUS: Inputs data and commands during CUI write 
cycles. Outputs array, buffer, identifier or status data in the appropriate 
read mode. Floated when the chip is de-selected or the outputs are 
disabled. 

DQq-DQi5 

INPUT/OUTPUT 

HIGH-BYTE DATA BUS: Inputs data during x16 Data-Write operations. 
Outputs array, buffer or identifier data in the appropriate read mode; 
not used for Status register reads. Floated when the chip is de- 
selected or the outputs are disabled. 

CEo# 
CE X # = 
CE 1 # or 

ce 2 # 

INPUT 

CHIP ENABLE INPUTS: Activate the device’s control logic, input 
buffers, decoders and sense amplifiers. CEo# or CEi # enable/disable 
the first 28F016SA (16 Mbit No. 1) while CEq#, CE 2 # enable/disable 
the second 28F016SA (16 Mbit No. 2). CEq# active low enables chip 
operation while CEi * or CE 2 # select between the first and second 
device, respectively. CEi # or CE 2 # must not be active low 
simultaneously. Reference Table 3.0. 

RP# 

INPUT 

RESET/POWER-DOWN: RP# low places the device in a Deep Power- 
Down state. All circuits that burn static power, even those circuits 
enabled in standby mode, are turned off. When returning from Deep 
Power-Down, a recovery time of 400 ns is required to allow these 
circuits to power-up. When RP# goes low, any current or pending 
WSM operation(s) are terminated, and the device is reset. All Status 
registers return to ready (with all status flags cleared). 

OE# 

INPUT 

OUTPUT ENABLE: Gates device data through the output buffers when 
low. The outputs float to tri-state off when OE# is high. 

NOTE: 

CE X # overrides OE # , and OE # overrides WE # . 

WE# 

INPUT 

WRITE ENABLE: Controls access to the CUI, Page Buffers, Data 
Queue Registers and Address Queue Latches. WE# is active low, and 
latches both address and data (command or array) on its rising edge. 
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2.1. Lead Descriptions (Continued) 


Symbol 

Type 

Name and Function 


OPEN DRAIN OUTPUT 

READY/BUSY: Indicates status of the internal WSM. When low, it 
indicates that the WSM is busy performing an operation. RY/BY# 
high indicates that the WSM is ready for new operations (or WSM 
has completed all pending operations), or Erase is Suspended, or 
the device is in deep power-down mode. This output is always 
active (i.e., not floated to tri-state off when OE# or CE 0 #, CE-| # 
are high), except if a RY/BY# Pin Disable command is issued. 

WP# 

INPUT 

WRITE PROTECT: Erase blocks can be locked by writing a 
nonvolatile lock-bit for each block. When WP# is low, those 
locked blocks as reflected by the Block-Lock Status bits (BSR. 6 ), 
are protected from inadvertent Data Writes or Erases. When WP# 
is high, all blocks can be written or erased regardless of the state 
of the lock-bits. The WP# input buffer is disabled when RP# 
transitions low (deep power-down mode). 

BYTE# 

INPUT 

BYTE ENABLE: BYTE# low places device in x 8 mode. All data is 
then input or output on DQ 0 - 7 , and DQq-is float. Address Aq 
selects between the high and low byte. BYTE# high places the 
device in xl 6 mode, and turns off the Aq input buffer. Address Ai , 
then becomes the lowest order address. 

3/5# 

INPUT 

3.3/5.0 VOLT SELECT: 3/5# high configures internal circuits for 
3.3V operation. 3/5# low configures internal circuits for 5.0V 
operation. 

NOTES: 

Reading the array with 3/5# high in a 5.0V system could damage 
the device. 

There is a significant delay from 3/5# switching to valid data. 

Vpp 

SUPPLY 

ERASE/WRITE POWER SUPPLY: For erasing memory array 
blocks or writing words/bytes/pages into the flash array. 

Vcc 

SUPPLY 

DEVICE POWER SUPPLY (3.3V ±0.3V, 5.0V ±0.5V): Do not 

leave any power pins floating. 

GND 

SUPPLY 

GROUND FOR ALL INTERNAL CIRCUITRY: Do not leave any 
ground pins floating. 

NC 


NO CONNECT: No internal connection to die, lead may be driven 
or left floating. 
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3/5# 
CE } # 


A 1 3 
A 1 2 
CEq# 


A 11 

A 10 

A 9 

A 8 

GND 

A 7 

A 6 

A 5 

A 4 

A 3 

A 2 

A 1 



4 

5 

6 

7 

8 

9 

10 
1 1 
12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 

23 

24 

25 

26 

27 

28 


DD28F032SA 
56-LEAD TSOP PINOUT 
14 mm x 20 mm 
TOP VIEW 


56 

55 

54 

53 

52 

51 

50 

49 

48 

47 

46 

45 

44 

43 

42 

41 

40 

39 

38 

37 

36 

35 

34 

33 

32 

31 

30 

29 


Z^WP# 

ZZIWE# 

ZZIOE# 

ZZIRY/BY# 

=idq 15 

=1007 

=>0014 

=idq 6 

ZZIGND 

ZZIDQij 

zhdQc 

=zidq 12 

=]DQ 4 
=1 V CC 
ZZIGND 
= 0Qn 
ZZIDQt 

=dq 10 

=idq 2 

=» v cc 

ZZIDQg 

ZZIDQ, 

ZZIDQg 

ZZIDQ 0 

=IBYTE# 

ZZINC 

ZZINC 

290490-1 


Figure 2. Dual Die TSOP Pinout Configuration 


3.0 MODES OF OPERATION 


RP# 

CE 0 # 

CE!# 

ce 2 # 

28F016SA No. 1 

28F016SA No. 2 

DD28F032SA Chip 

0 

X 

X 

X 

DPD 

DPD 

DPD 

1 

1 

X 

X 

Standby 

Standby 

Standby 

1 

0 

0 

1 

Active 

Standby 

Active 

1 

0 

1 

0 


Active 

Active 

1 

0 

1 

1 

Standby 

Standby 

Standby 

1 

0 

0 

0 

Illegal Condition 


NOTES: 

X = Don’t Care 

DPD = Deep Power-Down 

28F016SA No. 1 = First 16 Mbit device 

28F016SA No. 2 = Second 16 Mbit device 
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4.0 MEMORY MAPS 
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64 KByte Block 
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64 KByte Block 

63 

1EFFFF 
1 ED 000 

64 KByte Block 

30 

1EFFFF 
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64 KByte Block 

62 

1DFFFF 

1D0000 

64 KByte Block 

29 

1DFFFF 

1D0000 

64 KByte Block 

61 

1CFFFF 
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64 KByte Block 

28 
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1C0000 
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60 

1BFFFF 
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64 KByte Block 

27 

1BFFFF 

1B0000 

64 KByte Block 

59 

1AFFFF 
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64 KByte Block 

26 

1AFFFF 
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64 KByte Block 

58 

19FFFF 
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64 KByte Block 

25 

19FFFF 

190000 

64 KByte Block 

57 

1 8FFFF 
180000 

64 KByte Block 

24 

18FFFF 

180000 

64 KByte Block 

56 

17FFFF 

170000 

64 KByte Block 

23 

17FFFF 

170000 

64 KByte Block 

55 

16FFFF 

160000 

64 KByte Block 

22 

16FFFF 

160000 

64 KByte Block 

54 

15FFFF 

150000 

64 KByte Block 

21 

15FFFF 

150000 

64 KByte Block 

53 

14FFFF 

uoooo 

64 KByte Block 

20 

14FFFF 

140000 

64 KByte Block 

52 

13FFFF 

130000 

64 KByte Block 

19 

13FFFF 

130000 

64 KByte Block 

51 

12FFFF 

120000 

64 KByte Block 

18 

12FFFF 

120000 

64 KByte Block 

50 

1 1FFFF 
1 10000 

64 KByte Block 

17 

1 1FFFF 
1 10000 

64 KByte Block 

49 

10FFFF 

100000 

64 KByte Block 

16 

10FFFF 

100000 

64 KByte Block 

48 

OFFFFF 

0F0000 

64 KByte Block 

15 

OFFFFF 

0F0000 

64 KByte Block 

47 

OEFFFF 

0E0000 

64 KByte Block 

14 

OEFFFF 

OEOOOO 

64 KByte Block 

46 

ODFFFF 

0D0000 

64 KByte Block 

13 

ODFFFF 

0D0000 

64 KByte Block 

45 

OCFFFF 

0C0000 

64 KByte Block 

12 

OCFFFF 

OCOOOO 

64 KByte Block 

44 

OBFFFF 

OBOOOO 

64 KByte Block 

1 1 

OBFFFF 

OBOOOO 

64 KByte Block 

43 

OAFFFF 

0A0000 

64 KByte Block 

10 

OAFFFF 

OAOOOO 

64 KByte Block 

42 

09FFFF 

090000 

64 KByte Block 

9 

09FFFF 

090000 

64 KByte Block 

41 

08FFFF 

080000 

64 KByte Block 

8 

08FFFF 

080000 

64 KByte Block 

40 

07FFFF 

070000 

64 KByte Block 

7 

07FFFF 

070000 

64 KByte Block 

39 

06FFFF 

060000 

64 KByte Block 

6 

06FFFF 

060000 

64 KByte Block 

38 

05FFFF 

050000 

64 KByte Block 

5 

05FFFF 

050000 

64 KByte Block 

37 

04FFFF 

040000 

64 KByte Block 

4 

04FFFF 

040000 

64 KByte Block 

36 

03FFFF 

030000 

64 KByte Block 

3 

03FFFF 

030000 

64 KByte Block 

35 

02FFFF 

020000 

64 KByte Block 

2 

02FFFF 

020000 

64 KByte Block 

34 

01FFFF 

010000 

| 64 KByte Block 1 | 

01FFFF 

010000 

64 KByte Block 

33 

OOFFFF 

000000 

| 64 KByte Block 


OOFFFF 

000000 

64 KByte Block 

32 


290490-4 


28F016SA No. 1 28F016SA No. 2 

Figure 3. DD28F032SA Memory Map (Byte-Wide Mode) 
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4.1 Extended Status Registers Memory Map for 
Either 28F016SA No. 1 or 28F016SA No. 2 


intel 


x8 MODE 
RESERVED 
GSR 

RESERVED 
BSR 31 
RESERVED 
RESERVED 


A[20:0] 

1F0006H 

1F0005H 

1F0004H 

1F0003H 

1F0002H 

1F0001H 

1F0000H 


xl 6 MODE 
RESERVED 
GSR 

RESERVED 
BSR 31 
RESERVED 
RESERVED 


A[20: 1 ] 
F8003H 


F8002H 


F8001H 


I 0800 1 H 


RESERVED 

RESERVED 
" GSR 
RESERVED 
BSR 0 
RESERVED 
RESERVED 


000006H 
000005H 
000004H 
000003H 
000002H 
00000 1 H 
000000H 


RESERVED 

nnnnxu 

RESERVED 

00002H 

GSR 

RESERVED 

BSR 0 

0000 1 H 

RESERVED 

RESERVED 

00000H 


Figure 4. Extended Status Register Memory Map 
(Byte-Wide Mode) 


Figure 5. Extended Status Register Memory Map 
(Word-Wide Mode) 
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5.0 BUS OPERATIONS, COMMANDS AND STATUS REGISTER DEFINITIONS 


5.1 Bus Operations for Word-Wide Mode (BYTE# = Vih) 


Mode 

Notes 

RP# 

CEx# (8) 

CE 0 # 

OE# 

WE# 

Ai 

DQo-15 

RY/BY# 

Read 

1,2,7 

V|H 

V|L 

V|L 

VlL 

V|H 

X 

Dout 

X 

Output Disable 

1,6,7 

V|H 

V|L 

| 

Bli 

| 

X 


X 

Standby 



mm 

K1H 

H 

mm 


K1Q 

X 




HB 










mm 

Bfl 

1 



mm 



1,3 

V|L 

X 

mm 

X 

X 

X 

High Z 


Manufacturer ID 

4 

V|H 

V|L 


VlL 

V|H 

V|L 

0089H 

Voh 

Device ID 

4 


V|L 

V|L 

V|L 


BIB 

66A0H 

Voh 

Write 

1,5,6 

V|H 

V|L 

V|L 

VlH 


D 

□in 

X 



5.2 Bus Operations for Byte-Wide Mode (BYTE# = V||_) 


Mode 

Notes 

RP# 

CEx#< 8 ) 






RY/BY# 

Read 

1,2.7 

V| H 

V| L 

V| L 


w 

D 


X 

Output Disable 

1,6,7 

VlH 

V||_ 

V| L 

V| H 

V| H 



X 

Standby 


V| H 







X 





















Deep Power-Down 

HOI 


X 

X 


X 

D 


Voh 

Manufacturer ID 

4 

| 


V|L 

V|L 

V|H 



Voh 

Device ID 

4 

VlH 

VlL 

VlL 

V IL 

VlH 

V|H 

AOH 

Voh 

Write 

1,5,6 

V| H 

V| L 

V| L 

V|H 

V| L 

X 

Din 

X 


NOTES: 

1. X can be Vih or V||_ for address or control pins except for RY/BY#, which is either Vql or Voh- 

2. RY/BY# output is open drain. When the WSM is ready, erase is suspended or the device is in deep power-down mode, 
RY/BY# will be at Voh if if is tied to Vcc through a resistor. RY/BY# at Vqh is independent of OE# while a WSM 
operation is in progress. 

3. RP# at GND ± 0.2V ensures the lowest deep power-down current. 

4. Aq and Ai at V||_ provide device manufacturer codes in x8 and x16 modes respectively. Ao and A-j at Vih provide device 
ID codes in x8 and x16 modes respectively. All other addresses are set to zero. 

5. Commands for different Erase operations Data Write operations or Lock-Block operations can only be successfully com- 
pleted when Vpp = Vppn- 

6. While the WSM is running, RY/BY# in level-mode (default) stays at Vql until all operations are complete. RY/BY# goes 
to Vqh when the WSM is not busy or in erase suspend mode. 

7. RY/BY# may be at Vol while the WSM is busy performing various operations. For example, a status register read during 
a Write operation. 

8. CEx# = CE-| # or CE 2 #. 
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5.3 28F008SA Compatible Mode Command Bus Definitions 


Command 


First Bus Cycle 

Second Bus Cycle 

Oper 

Addr 

Data 

Oper 

Addr 

Data 

Read Array 


Write 

X 

FFH 


AA 

AD 

Intelligent Identifier 

1 

Write 

X 

90H 

Read 


ID 

Read Compatible Status Register 

2 

Write 


70H 


X 

CSRD 

Clear Status Register 

3 


X 

50H 




Word/ Byte Write 



X 

40 H 

Write 



Alternate Word/Byte Write 


Write 

X 

10H 

Write 

WA 

WD 

Block Erase/Confirm 


Write 

X 

20H 

Write 

BA 

DOH 

Erase Suspend/ Resume 


Write 

X 

BOH 

Write 

X 

DOH 



ADDRESS 

DATA 


A = Array Address 

AD = Array Data 


BA = Block Address 

CSRD = CSR Data 


IA = Identifier Address 

ID = Identifier Data 


WA = Write Address 
X = Don’t Care 

WD = Write Data 

NOTES: 




1. Following the Intelligent Identifier command, two Read operations access the manufacturer and device signature codes. 

2. The CSR is automatically available after device enters Data Write, Erase, or Suspend operations. 

3. Clears CSR.3, CSR.4 and CSR.4. Also clears GSR.4 and all BSR.4 and BSR.2 bits. 

See Status Register definitions. 
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5.4 


28F016SA-Performance Enhancement Command Bus Definiti 


ons 


Command 

Mode 

Notes 

First Bus Cycle 

Second Bus Cycle 

Third Bus Cycle 

Oper 

Addr 

Data 

Oper 

Addr 

Data 

Oper 

Addr 

Data 

Read Extended Status 
Register 


1 

Write 

X 

71 H 

Read 

RA 

GSRD 

BSRD 






7 



72H 







Read Page Buffer 




D 



m 

PD 




Single Load to Page Buffer 




D 

BUI 


o 

PD 




Sequential Load to Page 
Buffer 


4,6,10 


X 

13 


i 



X 


x16 

4,5,6,10 


X 



m 



X 


Page Buffer Write to Flash 




X 

OCH 


9 









OCH 

Write 

S3 



WA 

WCH 

Two-Byte Write 


3 








WA 

WD(H,L) 

Lock Block/Confirm 




X 




DOH 




Upload Status Bits/Confirm 


2 

Write 

X 

97H 

Write 

X 

ESI 




Upload Device Information 



Write 

X 

99H 

Write 

X 

ED 




Erase All Unlocked Blocks/ 
Confirm 

■ 


Write 

X 



X 

DOH 


■ 

M 

RY/BY# Enable to Level- 
Mode 

■ 



X 



X 

01 H 




RY/BY# Pulse-On-Write 


8 


X 

96H 

Write 

X 





RY/BY# Pulse-On-Erase 


8 


X 

96H 

Write 

X 

03H 




RY/BY# Disable 


8 

Write 

X 

96H 

Write 

X 

04H 




Sleep 



Write 

X 

FOH 







Abort 



Write 

X 

80H 








ADDRESS 

BA = Block Address 
PA = Page Buffer Address 
RA = Extended Register Address 
WA = Write Address 
X = Don’t Care 


AD = Array Data 
PD = Page Buffer Data 
BSRD = BSR Data 
GSRD = GSR Data 


DATA 


WC (L,H) = Word Count (Low, High) 
BC (L,H) = Byte Count (Low, High) 
WD (L,H) = Write Data (Low, High) 
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NOTES: , 

1 . RA can be the GSR address or any BSR address. See Figures 4 and 5 for Extended Status Register Memory Maps. 

2. Upon device power-up, all BSR lock-bits come up locked. The Upload Status Bits command must be written to reflect the 
actual lock-bit status. 

3. Ao is automatically complemented to load second byte of data. BYTE# must be at V||_. 

Ao value determines which WD/BC is supplied first: Aq = 0 looks at the WDL/BCL, Aq = 1 looks at the WDH/BCH. 

4. BCH/WCH must be at 00H for this product because of the 256-byte (128-word) Page Buffer size and to avoid writing the 
Page Buffer contents to more than one 256-byte segment within an array block. They are simply shown for future Page 
Buffer expandability. 

5. In x16 mode, only the lower byte DQq -7 is used for WCL and WCH. The upper byte DQe-i 5 is a don’t care. 

6. PA and PD (whose count is given in cycles 2 and 3) are supplied starting in the fourth cycle, which is not shown. 

7. This command allows the user to swap between available Page Buffers (0 or 1). 

8. These commands reconfigure RY/BY# output to one of two pulse-modes or enable and disable the RY/BY# function. 

9. Write address, WA, is the Destination address in the flash array which must match the Source address in the Page Buffer. 
Refer to the 28F016SA User’s Manual. 

10. BCL = 00H corresponds to a byte count of 1. Similarly, WCL = 00H corresponds to a word count of 1. 


5.5 Compatible Status Register 


WSMS 

ESS 

ES 

DWS 

VPPS 

R 

R 

R 

7 

6 

5 

4 

3 

2 

1 

0 


CSR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 

0 = Busy 

CSR.6 = ERASE-SUSPEND STATUS 

1 = Erase Suspended 

0 = Erase In Progress/Completed 

NOTES: 

RY/BY# output or WSMS bit must be checked to 
determine completion of an operation (Erase Suspend, 
Erase or Data Write) before the appropriate Status bit 
(ESS, ES or DWS) is checked for success. 

CSR.5 = ERASE STATUS 
1 = Error In Block Erasure 
0 = Successful Block Erase 

If DWS and ES are set to “1 ” during an erase attempt, an 
improper command sequence was entered. Clear the 
CSR and attempt the operation again. 

CSR.4 = DATA-WRITE STATUS 
1 = Error in Data Write 
0 = Data Write Successful 


CSR.3 = V P p STATUS 
1 = Vpp Low Detect, Operation Abort 
0 = Vpp OK 

The VPPS bit, unlike an A/D converter, does not provide 
continuous indication of Vpp level. The WSM interrogates 
Vpp’s level only after the Data-Write or Erase command 
sequences have been entered, and informs the system if 
Vpp has not been switched on. VPPS is not guaranteed to 
report accurate feedback between Vppi_ and Vppn- 

CSR.2-0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when polling the CSR. 
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5.6 Global Status Register 


WSMS 

OSS 

DOS 

DSS 

QS 

PBAS 

PBS 

PBSS 

7 

6 

5 

4 

3 

2 

1 

0 


GSR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 
0 = Busy 

NOTES: 

[1] RY/BY# output or WSMS bit must be checked 
to determine completion of an operation (Block 
Lock, Suspend, any RY/BY# reconfiguration, 
Upload Status Bits, Erase or Data Write) before the 
appropriate Status bit (OSS or DOS) is checked for 
success. 

GSR.6 = OPERATION SUSPEND STATUS 
1 = Operation Suspended 
0 = Operation in Progress/Completed 


GSR.5 = DEVICE OPERATION STATUS 
1 = Operation Unsuccessful 
0 = Operation Successful or Currently Running 


GSR.4 = DEVICE SLEEP STATUS 
1 = Device in Sleep 
0 = Device Not in Sleep 


MATRIX = 5/4 

0 0 = Operation Successful or Currently Running 

0 1 = Device in Sleep mode or Pending Sleep 

1 0 = Operation Unsuccessful 

1 1 = Operation Unsuccessful or Aborted 

If operation currently running, then GSR.7 = 0. 
If device pending sleep, then GSR.7 = 0. 
Operation aborted: Unsuccessful due to 
Abort command. 

GSR.3 = QUEUE STATUS 
1 = Queue Full 
0 = Queue Available 


GSR.2 = PAGE BUFFER AVAILABLE STATUS 
1 = One or Two Page Buffers Available 
0 = No Page Buffer Available 

The device contains two Page Buffers. 

GSR.1 = PAGE BUFFER STATUS 
1 = Selected Page Buffer Ready 
0 = Selected Page Buffer Busy 

Selected Page Buffer is currently busy with WSM 
operation 

GSR.O = PAGE BUFFER SELECT STATUS 
1 = Page Buffer 1 Selected 
0 = Page Buffer 0 Selected 



NOTE: 

1. When multiple operations are queued, checking BSR.7 only provides indication of completion for that particular block. 
GSR.7, or CSR.7, provides indication when all queued operations are completed. 
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5.7 Block Status Register 


BS 

BLS 

BOS 

BOAS 

QS 

VPPS 

R 

R 

7 

6 

5 

4 

3 

2 

1 

0 


BSR.7 = BLOCK STATUS 
1 = Ready 

0 = Busy 

BSR.6 - BLOCK LOCK STATUS 

1 = Block Unlocked for Write/Erase 
0 = Block Locked for Write/ Erase 

NOTES: 

[U RY/BY# output or BS bit must be checked to 
determine completion of an operation (Block Lock, 
Suspend, Erase or Data Write) before the 
appropriate Status bits (BOS, BLS) is checked for 
success. 

BSR.5 = BLOCK OPERATION STATUS 
1 = Operation Unsuccessful 
0 = Operation Successful or Currently Running 


BSR.4 = BLOCK OPERATION ABORT STATUS 
1 = Operation Aborted 
0 = Operation Not Aborted 

The BOAS bit will not be set until 
BSR.7 =1. 

MATRIX 5/4 

0 0 = Operation Successful or Currently Running 

0 1 = Not a Valid Combination 

1 0 = Operation Unsuccessful 
1 1 = Operation Aborted 

Operation halted via Abort command. 

BSR.3 = QUEUE STATUS 
1 = Queue Full 
0 = Queue Available 


BSR.2 = Vp P STATUS 
1 = Vpp Low Detect, Operation Abort 
0 = Vpp OK 


BSR.1 -0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when polling the BSRs. 


NOTE: 

1. When multiple operations are queued, checking BSR.7 only provides indication of completion for that particular block. 
GSR.7, or CSR.7, provides indication when all queued operations are completed. 
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* WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “ Operating Conditions” 
may affect device reliability. 

Vcc = 3.3V ± 0.3V Systems^ 5 ) 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 

Test Conditions 

t a 

Operating Temperature, 
Commercial 

1 

0 

70 

B 

Ambient Temperature 

Vcc 

Vcc with Respect to GND 

2 


7.0 

V 


Vpp 

Vpp Supply Voltage with 
Respect to GND 

El 



V 


V 

Voltage on any Pin (except 
v CC.Vpp) with Respect to GND 

B 





1 

Current into any Non-Supply Pin 



±30 

mA 


•out 

Output Short Circuit Current 

4 


100 

mA 



V C c = 5.0V ± 0.5V, V C c = 5.0V ± 0.25V Systems(5,6) 


Symbol 

Parameter 

Notes 


Max 

Units 

Test Conditions 

Bi 

Operating Temperature, 
Commercial 

1 

0 

70 

°C 

Ambient Temperature 

ky^B 

Vcc with Respect to GND 

2 

-0.2 

7.0 

V 


Vpp 

Vpp Supply Voltage with 
Respect to GND 






V 

Voltage on any Pin (except 
Vcc.Vpp) with Respect to GND 

2 

-2.0 

V C c + 0.5 

V 


1 

Current into any Non-Supply Pin 



±30 

mA 


•out 

Output Short Circuit Current 

4 


100 

mA 



6.0 ELECTRICAL SPECIFICATIONS 

6.1 Absolute Maximum Ratings* 

Temperature Under Bias 0°C to +80°C 

Storage Temperature -65°C to + 1 25°C 


NOTICE: This data sheet contains information on 
products in the sampling and initial production phases 
of development. The specifications are subject to 
change without notice. Verify with your local Intel 
Sales office that you have the latest data sheet be- 
fore finalizing a design. 


NOTES: 

1 . Operating temperature is for commercial product defined by this specification. 

2. Minimum DC voltage is -0.5V on input/output pins. During transitions, this level may undershoot to -2.0 V for periods 
<20 ns. Maximum DC voltage on input/output pins is Vcc ± 0.5V which, during transitions, may overshoot to Vcc + 2.0V 
for periods <20 ns. 

3. Maximum DC voltage on Vpp may overshoot to + 14.0V for periods <20 ns. 

4. Output shorted for no more than one second. No more than one output shorted at a time. 

5. AC specifications are valid at both voltage ranges. See DC Characteristics tables for voltage range-specific specifications. 

6. 5% Vcc specifications refer to the 28F032SA-070 in its High Speed Test configuration. 
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6.2 Capacitance 

For a 3,3V System: 


Symbol 

Parameter 





Test Conditions 

C|N 

Capacitance Looking into an 
Address/Control Pin 

■ 


16 

PF 

T a = 25°C, f = 1.0 MHz 

COUT 

Capacitance Looking into an 
Output Pin 

H 


24 

PF 

T a = 25°C, f = 1.0 MHz 

Cload 

Load Capacitance Driven by 
Outputs for Timing 
Specifications 

■ 

1 

50 

PF 

ForVcc = 3.3V ± 0.3V 


Equivalent Load Timing Circuit 





50fl transmission line delay 


For a 5.0V System: 


Symbol 

Parameter 

Notes 

Typ 

Max 

Units 

Test Conditions 

C|N 

Capacitance Looking into an 
Address/Control Pin 

1 

12 

16 

PF 

T a = 25°C, f = 1.0 MHz 

Gout 

Capacitance Looking into an 
Output Pin 

■a 

16 

24 




Load Capacitance Driven by 
Outputs for Timing 
Specifications 

■ 

■ 

100 


ForVcc = 5.0V ± 0.5V 

30 

D 

ForVcc = 5.0V ± 0.25V 


Equivalent Testing Load Circuit 
forVcc ± 10% 


■ 





Equivalent Testing Load Circuit 
forVcc ±5% 


■ 

2.5 

ns 

83H transmission line delay 


NOTE: 

1. Sampled, not 100% tested. 




3-274 



































DD28F032SA 


int^l, 

6.3 Timing Nomenclature 

All 3.3V system timings are measured from where signals cross 1.5V. 

For 5.0V systems use the standard JEDEC cross point definitions. 

Each timing parameter consists of 5 characters. Some common examples are defined below: 
tcE tELQV time(t) from CEx# (E) going low (L) to the outputs (Q) becoming valid (V) 

tOE tGLQV time(t) from OE # (G) going low (L) to the outputs (Q) becoming valid (V) 

tACC Uvqv time(t) from address (A) valid (V) to the outputs (Q) becoming valid (V) 

fAS Uvwh time(t) from address (A) valid (V) to WE# (W) going high (H) 

tDH tWHDX time(t) from WE# (W) going high (H) to when the data (D) can become undefined (X) 



Pin Characters 


Pin States 

A 

Address Inputs 

H 

High 

D 

Data Inputs 

L 

Low 

Q 

Data Outputs 

V 

Valid 

E 

CEx# (Chip Enable) 

X 

Driven, but not necessarily valid 

F 

BYTE# (Byte Enable) 

Z 

High Impedance 

G 

OE# (Output Enable) 



W 

WE# (Write Enable) 



P 

RP# (Deep Power-Down Pin) 



R 

RY/BY# (Ready Busy) 



V 

Any Voltage Level 



Y 

3/5# Pin 



5V 

Vcc at 4.5V Minimum 



3V 

Vqc at 3.0V Minimum 
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AC test inputs are driven at Vqh (2.4 VTTL) for a Logic “1” and Vql (0.45 VTTL) for a Logic “0”. Input timing begins at 
Vih (2.0 VTTL) and V|l (0.8 VTTL). Output timing ends at Vih and V||_. Input rise and fall times (10% to 90%) <10 ns. 


Figure 6. Transient Input/Output Reference Waveform (Vcc = 5.0V ± 10%) for Standard Test 

ConfigurationO) 



AC test inputs are driven at 3.0V for a Logic “1” and 0.0V for a Logic “0”. Input timing begins, and output timing ends, at 
1.5V. Input rise and fall times (10% to 90%) <10 ns. 

Figure 7. Transient Input/Output Reference Waveform (Vcc = 3.3V) and 
High Speed Reference Waveform( 2 ) (Vcc = 5.0V ± 5%) 

NOTES: 

1. Testing characteristics for DD28F032SA-080/DD28F032SA-1 00. 

2. Testing characteristics for DD28F032SA-070/DD28F032SA-150. 
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2.5 ns of 250 Transmission Line 


From Output 
Under Test 


■ O' . ' " , Q 


Test 

Point 


Total Capacitance = 100 pF 


290490-10 


Figure 8. Transient Equivalent Testing Load Circuit (Vcc = 5.0V ± 10%) 


2.5 ns of 500 Transmission Line 


From Output 
Under Test 


<3 



Test 

Point 


Total Capacitance = 50 pF 


290490-11 


Figure 9. Transient Equivalent Testing Load Circuit (Vcc = 3 -3V ± 0.3 V) 


2.5 ns of 830 Transmission Line 


From Output 
Under Test 


a 



Test 

Point 


Total Capacitance = 30 pF 


290490-12 


Figure 10. High Speed Transient Equivalent Testing Load Circuit (Vcc = 5.0V ± 5%) 
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6.4 DC Characteristics 

Vcc = 3.3V ± 0.3V, T a = 0°c to + 70°C 
3/5# = Pin Set High for 3.3V Operations 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

IlL 

Input Leakage Current 

1 



± 2 


Ilo 

Output Leakage Current 

1 



± 20 

ju,A 

•ccs 

Vcc Standby Current 

1,5,6 

1 

100 

200 


1 

2 

8 


•CCD 

Vcc Deep Power- 
Down Current 

1 

■ 

2 

10 

/xA 

IccrI 

Vcc Read Current 

1,4,5, 

6 

1 

25 

30 

mA 

1 

26 

34 

mA 

•ccw 

Vcc Write Current 

1,7 


8 

12 

mA 


Intel 


Test Conditions 


Vcc = Vcc Max. 

V|N = Vcc or gnd 

v cc = Vcc Max, 

Vin = Vcc or GND 

Vcc = Vcc Max, 

CEo#, CEx#, 

RP#, = V C c ± 0.2V 
BYTE#, WP#, 3/5# = V C c 
± 0.2V or GND ± 0.2V 


v cc = Vcc Max, 

CEq#, CE X #, RP# = V|h 
BYTE#, WP#, 

3/5# = V| H orV|L 

RP# = GND ± 0.2V 
BYTE# = V C c ± 0.2V 
or GND ± 0.2V 

Vcc = Vcc Max 
CMOS: CE 0 #, 

CE X # = GND + 0.2V 
BYTE# = GND ± 0.2V 
or Vcc ± 0.2V Inputs = GND 
± 0.2V or Vcc ± 0.2V 
f = 6.67 MHz, I pm = 0 mA 

TTL:CE 0 #,CE X # = V !L , 
BYTE# = V| L or V, L 
INPUTS = V| L or V IH , 
f = 6.67 MHz, Iq UT = 0mA 

Word/ Byte Write in Progress 
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6.4 DC Characteristics (Continued) 
Vcc = 3.3V ± 0.3V, T a = 0°C to +70°C 
3/5# Pin Set High for 3.3V Operations 


Symbol 

Parameter 

Notes 


Typ 



Test Conditions 

>CCE 

Vqc Block Erase Current 

1,7 


6 

12 

mA 

Block Erase in Progress 

Icces 

Vcc Erase 
Suspend Current 

1,2, 

6,7 


3 

6 

mA 

CEq#, CEx# = Vm 
Block Erase Suspended 

! ppd 

Vpp Deep Power- 
Down Current 

1 


0.4 


mm 


IPPRS 

Vpp Standby/ 
Read Current 

1 


±2 

±20 


Vpp ^ Vcc 


130 

400 


Vpp > Vcc 

IppW 

Vpp Write Current 



10 

15 

mA 

Vpp = VppH, 

Word/Byte Write in Progress 

IpPE 

Vpp Erase Current 

1 


4 



Vpp = Vppn 

Block Erase in Progress 

m 

Vpp Erase 
Suspend Current 



130 



Vpp = Vppn, 

Block Erase in Suspended 

V|L 

Input Low Voltage 


-0.3 


0.8 

V 





2.0 


V C C ± 0.3 



mm 

Output Low 
Voltage 

■ 







Output High 
Voltage 

1 

m 






Vcc - 0.2 

Ioh = — 100 jaA 
V CC = v cc Min 

VppL 

Vpp during 
Normal Operations 

3 

0.0 


6.5 

V 


VppH 

Vpp during 
Write/ Erase 
Operations 


11.4 

12.0 

12.6 



V|_KO 

Vcc Write/ Erase 
Lockout Voltage 








NOTES: 

1. All current are in RMS unless otherwise noted. Typical values at Vcc - 3-3V, Vpp 12.0V, T = 25°C. These currents are 
valid for all product versions (package and speeds). 

2. Icces is specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum 
of icCES and icCR- 

3. Block Erases, Word/Byte Writes and Lock Block operations are inhibited when Vpp = Vppl and not guaranteed in the 
range between Vppn and Vppi_. 

4. Automatic Power Savings (APS) reduces Iccr to less than 1 mA in static operation. 

5. CMOS Inputs are either Vcc ± 0.2V or GND ± 0.2V. TTL Inputs are either V|l or Vm- 

6. CE X # = CE-| # or CE 2 #. 

7. If operating with TTL levels, add 4 mA of Vcc Standby Current to max Iccw. iccE and Icces- 



I 
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6.5 DC Characteristics 

Vcc = 5.0V ± 0.5V, T a = 0°c to +70°C 
3/5# Pin Set Low for 5.0V Operations 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

IlL 

Input Leakage 
Current 


■ 

■ 

H 


Vcc = v cc Max 
V|N = Vcc or GND 

•lo 

Output Leakage 
Current 

1 

■ 

■ 



Vcc = Vcc Max 
V|N = Vcc ° r GND 

lees 

Vcc Standby 
Current 

1,5,6 

1 

100 

200 


Vcc = Vcc Max 
CE 0 #,CE X #, 

RP# = V C c ± 0.2V 
BYTE#, WP#, 3/5# = V C c 
± 0.2V or GND ± 0.2V 




1 

1 

8 

mA 

Vcc = Vcc Max 
CEq#, CEx#, RP# = V|h 
BYTE#, WP#, 

3/5# = V, H or V| L 

ICCD 

Vcc Deep Power- 
Down Current 

1 

■ 

2 

10 

ju,A 

RP# = GND ± 0.2V 
BYTE# = V C c ± 0.2V 
or GND ± 0.2V 

IccrI 

Vcc Read Current 

1,4,5, 

6,7 

1 

50 

60 

mA 

Vcc = v cc Max, 

CMOS: CE 0 #, 

CE X # = GND ± 0.2V 
BYTE# = GND ± 0.2V 

or Vcc ± 0.2V 
Inputs = GND ± 0.2V 
or V C c ± 0.2V 
f = 10 MHz, Iqut = 0 mA 




1 

52 

64 

mA 

TTL:CE 0 #,CE X # = V IL , 
BYTE# = V| L or V, H 
Inputs = V|LorV|H, 
f = 10 MHz, Iqut = 0 mA 

I<Xr2 

Vcc Read Current 

1.4,5, 

6,7 


30 

35 

mA 

Vcc = v cc Max, 

CMOS: CE 0 #, 

CE X # = GND ± 0.2V 
BYTE# = GND ± 0.2V 

or V C c ± 0.2V 
Inputs = GND ± 0.2V 
or V C c ± 0.2V, 
f = 5 MHz, Iqut = 0 mA 




1 

32 

39 

mA 

TTL: CEq#, CEx# == V|i_, 
BYTE# = V| L or V| H 
Inputs = V||_orV|H, 
f = 5 MHz, Iqut = 0 mA 

Iccw 

Vcc Write Current 

1,7 


25 

35 

mA 

Word/Byte in Progress 
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6.5 DC Characteristics (Continued) 
Vcc = 5.0V ± 0.5V, T a = 0°C to +70°C 
3/5# Pin Set Low for 5.0V Operations 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

•CCE 

Vcc Erase 
Suspend Current 

1,7 


18 

25 

mA 

Block Erase in Progress 

Icces 

Vcc Block 
Erase Current 

1,2, 6, 7 


5 

10 

mA 

CE 0 #, CE x # = V|H 
Block Erase Suspended 

Ippd 

Vpp Deep Power- 
Down Current 



0.4 

10 



•pprs 

Vpp Standby/ Read Current 




± 20 

fxA 

Vpp ^ Vcc 



400 

)iA 

Vpp > Vcc 


Vpp Write Current 

1 


■ 

■■ 


Vpp = Vppn Word/ 
Byte Write in Progress 

•ppe 

Vpp Block Erase Current 

1 


5 

wm 

mA 

Vpp = Vppn Block 
Erase in Progress 

Ippes 

Vpp Erase 
Suspend Current 

1 





Vpp = Vppn 

Block Erase Suspended 

VlL 

Input Low Voltage 


-0.5 


0.8 

S3 


V|H 

Input High Voltage 


2.0 





Vol 

Output Low Voltage 

■ 



0.45 



VohI 

Output High Voltage 

1 

0.85 V CC 

1 




V 0 h2 

V C c ~ 0.4 

Ioh = “100 fxA 
Vcc = Vcc Min 

VppL 

Vpp during 
Normal Operations 

B 

0.0 


6.5 

1 



Vpp during 
Write/ Erase 
Operations 


11.4 


12.6 

■ 


Vlko 

Vcc Write/ Erase 
Lockout Voltage 


2.0 



V 



NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, Vpp = 12.0V, T = 25°C. These currents 
are valid for all product versions (package and speeds). 

2. Icces is specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum 
of Icces and Iccr. 

3. Block Erases, Word/Byte Writes and Lock Block operations are inhibited when Vpp = Vppl and not guaranteed in the 
range between Vppn and Vpp[_. 

4. Automatic Power Saving (APS) reduces Iccr to less than 2 mA in Static operation. 

5. CMOS Inputs are either Vcc ± °- 2V or GND ± 0.2V. TTL Inputs are either Vjl or V|h- 

6. CEx# = CE-| # or CE 2 #. 

7. If operating with TTL levels, add 4 mA of Vcc standby current to max lccw> icCE and Icces- 
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6.6 AC Characteristics— Read Only Operations^) 

V C C = 3.3V ± 0.3V, T a = 0°C to + 70°C 


Versions ( 5 ) 

DD28F032SA-150 

Units 

Symbol 

Parameter 

Notes 

Min 

Max 

wmm 

Read Cycle Time 


150 


ns 

<AVQV 

Address to Output Delay 



150 

ns 

lllllll 

CEx# to Output Delay 

2 


150 

ns 

El 

RP# High to Output Delay 



750 

ns 

Elll^K 

OE# to Output Delay 

2 


50 

ns 

tELQX 

CEx# to Output in Low Z 

3 

0 


ns 

l EHQZ 

CEx# to Output in High Z 

3 


55 

ns 

ES5H 

OE# to Output in Low Z 

3 

0 


ns 

HE9I 

OE# to Output in High Z 

3 


40 

ns 

tOH 

Output Hold from Address, CEx# ° r OE# 
Change, Whichever Occurs First 

H 

0 


ns 

tFLQV 

tFHQV 

BYTE# to Output Delay 

H 

. . i 

150 

ns 

*FLQZ 

BYTE# Low to Output in High Z 

3 


40 

ns 

tELFL 

tELFH 

CEx# Low to BYTE# High or Low 



5 

ns 

For Extended Status Register Reads 

tAVEL 

Address Setup to CEx# Going Low 


0 



UVGL 

Address Setup to OE# Going Low 


0 
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6.6 AC Characteristics — Read Only Operations^ 1 ) (Continued) 
Vcc = 5.0V ± 0.5V, T a = 0°C to +70°C 


Versions( 5 ) 

Vcc 

± 5% 

DD28F032SA- 

070(6) 



Units 

Vcc 
± 10% 


DD28F032SA- 

080(7) 

DD28F032SA- 

100(7) 

Symbol 

Parameter 

Notes 

Min 

Max 



Min 

Max 

*AVAV 

Read Cycle Time 


70 




100 



*AVQV 

Address to Output Delay 



70 


80 


100 

ns 

tELQV 

CEx# to Output Delay 

2 


70 


80 


hbi 

ns 

tpHQV 

RP# to Output Delay 



400 


480 



ns 

tGLQV 

OE# to Output Delay 

2 


30 




40 

ns 

l ELQX 

CEx# to Output in Low Z 

3 

0 


0 


0 


ns 


CEx# to Output in High Z 

3 


25 




35 

ns 

tGLQX 

OE# to Output in Low Z 

3 

0 


0 


0 


ns 

tGHQZ 

OE# to Output in High Z 

3 


25 




35 

ns 

tOH 

Output Hold from Address, 
CEx# orOE# Change, 
Whichever Occurs First 

3 

0 


0 

■ 

0 


ns 

[ffl 

BYTE# to Output Delay 

3 



H 

80 

HI 

100 

ns 


BYTE# Low to Output 
in High Z 

3 



■ 

30 

■ 

30 

ns 

H 

ESS 

CE X # Low to BYTE# 
High or Low 


■ 

H 

■ 



5 

ns 

For Extended Status Register Reads 

tAVEL 

Address Setup to CEx# 
Going Low 

H 



0 


0 



tAVGL 

Address Setup to OE# 
Going Low 

3,4 

0 


0 


0 


ns 


NOTES: 

1. See AC Input/Output Reference Waveforms for timing measurements, Figures 6 and 7. 

2. OE# may be delayed up to tQ_QV“tGLQV after the falling edge of CEx# without impact in tELQv- 

3. Sampled, not 100% tested. 

4. This timing parameter is used to latch the correct BSR data onto the outputs. 

5. Device speeds are defined as: 

70/80 ns at Vcc = 5.0V equivalent to 
150 ns at V C c = 3.3V 

100 ns at Vcc = 5.0V equivalent to 
150 ns at V C c = 3.3V 

6. See AC Input/Output Reverence Waveforms and AC Testing Load Circuits for High Speed Test Configuration. 

7. See Standard AC Input/Output Reference Waveforms and AC Testing Load Circuit. 
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Figure 11. Read Timing Waveforms 
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Figure 12. BYTE# Timing Waveforms 
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6.7 Power-Up and Reset Timings 



Figure 13. Vcc Power-Up and RP# Reset Waveforms 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 

tpLYL 

tpLYH 

RP# Low to 3/5# Low (High) 


0 


/AS 

tyLPH 

*YHPH 

3/5# Low (High) to RP# High 

1 

2 


/AS 

tpL5V 

1PL3V 

RP# Low to Vcc at 4.5V Minimum 
(to Vcc at 3.0V min or 3.6V max) 

2 

0 


/AS 

tAVQV 

Address Valid to Data Valid 
for V C c = 5.0V ± 10% 

3 


80 

ns 

tpHQV 

RP# High to Data Valid for V C c = 5.0V ± 10% 

3 


480 

ns 


NOTES: 

CEo#, CEx# and OE# are switched low after Power-Up. 

1 . Minimum of 2 /as is required to meet the specified tpHQv times. 

2. The power supply may start to switch concurrently with RP# going Low. 

3. The address access tie and RP# high to data valid time are shown for 5.0V Vcc operation. Refer to the AC Characteris- 
tics Read Only Operations 3.3V Vcc operation and all other speed options. 
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.8 AC Characteristics for WE# — Controlled Command Write Operations^) 

CC = 3.3V ± 0.3V, T A = 0°C to +70°C 


Versions 

Notes 

DD28F032SA-1 50 

Unit 


Parameter 

Min 

Typ 

Max 


Write Cycle Time 


150 



ns 


V P p Setup to WE# Going High 

3 




IB 

E 

RP# Setup to CEx# Going Low 





n 

IS9H 

CEx# Setup to WE# Going Low 


MM 



ns 


Address Setup to WE# Going High 

2,6 




Pf?B| 


Data Setup to WE# Going High 

2,6 




| 

tWLWH 



El 



ns 

El 


2 

■a 




Iffl 1 

Address Hold from WE# High 

2 

10 



ns 

m 

CEx# hold from WE# High 





■9 

ES9S9I 

WE# Pulse Width High 





19 


Read Recovery before Write 


0 



IQ9 

tWHRL 

WE# High to RY/BY# Going Low 




100 

i^n 

tRHPL 

RP# Hold from Valid Status Register 
(CSR, GSR, BSR) Data and RY/BY# High 

3 

H 

■ 



El 

RP# High Recovery to WE# Going Low 


m» 





Write Recovery before Read 






E 

Vpp Hold from Valid Status Register 
(CSR, GSR, BSR) Data and RY/BY# High 


H 

■ 


JtlS 

tWHQV 1 

Duration of Word/ Byte Write Operation 

mm 

■ 

9 

Note 7 


tWHQV 2 

Duration of Block Erase Operation 

4 

0.3 


10 

sec 
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6.8 AC Characteristics for WE# — Controlled Command Write Operations^) 

Vcc = 5-OV ± 0.5V, T a = 0°c to +70°C (Continued) 


Versions 


Symbol 

Parameter 

tAVAV 

Write Cycle Time 

tVPWH 

Vpp Setup to WE# 
Going High 

tPHEL 

RP# Setup to CE X # 
Going Low 




Vcc 

± 5% 

Vcc 


± 10% 
Notes 



tAVWH 

Address Setup to WE# 
Going High 



Data Setup to WE# 
Going High 

2,6 

tWLWH 

WE# Pulse Width 


tWHDX 

Data Hold from WE# 
High 

H 

tWHAX 

Address Hold from WE# 
High 

H 


CE X # Hold from WE# 
High 

■ 

%HWL 

WE# Pulse Width High 




tpHWL 

RP# High Recovery to 
WE# Going Low 


tWHGL 

Write Recovery before 
Read 


tQVVL 

Vpp Hold from Valid 
Status Register (CSR, 
GSR, BSR) Data and 
RY/BY# High 


twHQVl 

Duration of Word/Byte 
Write Operation 

4,5 

tWHQv2 

Duration of Block Erase 
Operation 

4 




60 


■ 

0 



4.5 

6 

Note 7 

0.3 

. 


10 
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NOTES: 

For 28F016SA No. 1: CEx# is defined as the latter of CEo# or CEi # going low or the first of CEo# or CEi # going high. 
For 28F016SA No. 2: CEx# is defined as the latter of CEo# or CE2# going low or the first of CEo# or CE2# going high. 

1. Read timings during Write and Erase are the same as for normal read. 

2. Refer to command definition tables for valid address and data values. 

3. Sampled, but not 100% tested 

4. Write/Erase durations are measured to valid Status Register (CSR) Data. 

5. Word/Byte Write operations are typically performed with 1 Programming Pulse. 

6. Address and Data are latched on the rising edge of WE# for all Command Write operations. 

7. This information will be available in a technical paper. Please call Intel’s Application Hotline or your local sales office for 
more information. 



DEEP WRITE DATA-WRITE OR 
POWER-DOWN ERASE SETUP COMMAND 


WRITE VALID ADDRESS 
4 DATA (DATA-WRITE) OR 
ERASE CONFIRM COMMAND 


AUTOMATED DATA-WRITE WRITE READ EXTENDED 
OR ERASE DELAY REGISTER COMMAND 


READ EXTENDED 
STATUS REGISTER DATA 


ADDRESSES (A) 
NOTE 1 



CEx# (E) 
NOTE 4 


l/^\ f~\. 




'J 



NOTES: 

1. This address string depicts Data-Write/ Erase cycles with corresponding verification via ESRD. 

2. This address string depicts Data-Write/ Erase cycles with corresponding verification via CSRD. 

3. This cycle is invalid when using CSRD for verification during Data-Write/ Erase operations. 

4. For 28F016SA No. 1: CEx# is defined as the latter of CEo# or CEi # going low, or the first of CEo# or CEi # going 
high. For 28F016SA No. 2: CEx# IS defined as the latter of CE 0 # or CE 2 # going low, or the first of CE 0 # or CE2# 
going high 

5. RP# low transition is only to show tRHpi_; not valid for above Read and Write cycles. 


Figure 14. AC Waveforms for Command Write Operations 
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6.9 AC Characteristics for CEx#— Controlled Write OperationsO) 

Vcc = 3.3V ± 0.3V, T a = 0°C to + 70°C 


Symbol 

Versions 

Notes 

DD28F032SA-1 50 

Unit 

Parameter 

Min 

Typ 

Max 

tAVAV 

Write Cycle Time 





ns 

tVPEH 

Vpp Setup to CEx# Going High 

3 





tpHWL 

RP# Setup to WE# Going Low 


480 




tWLEL 

WE# Setup to CEx# Going Low 


0 




tAVEH 

Address Setup to CEx# Going High 

2,6 

75 



ns 

l DVEH 

Data Setup to CEx# Going High 


75 




tELEH 

CEx# Pulse Width 





ns 

tEHDX 

Data Hold from CEx# High 

2 

B1 



ns 

<EHAX 

Address Hold from CEx# High 

2 

IRS 



ns 

tEHWH 

WE hold from CE X # High 


10 




tEHEL 

CEx# Pulse Width High 


75 



El 

tGHEL 

Read Recovery before Write 


0 



BliiS 

*EHRL 

CEx# High to RY/BY# Going Low 




100 

ns 

tRHPL 

RP# Hold from Valid Status Register 
(CSR, GSR, BSR) Data and RY/BY# High 

3 


■ 



tpHEL 

RP# High Recovery to CEx# Going Low 


1 



juts 

*EHGL 

Write Recovery before Read 


120 



ns 

tQVVL 

Vpp Hold from Valid Status Register 
(CSR, GSR, BSR) Data and RY/BY# High 


0 

■ 


jllS 

tEHQVl 

Duration of Word/Byte Write Operation 

4,5 

5 

ma 

Note 7 

jms 

tEHQv2 

Duration of Block Erase Operation 

4 



10 
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6.9 AC Characteristics for CEx# — Controlled Command Write Operations^) 

V C c = 5.0V ± 0.5V, T a = 0°C to +70° C (Continued) 
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NOTES: 

For 28F016SA No. 1: CEx# is defined as the latter of CEo# or CEi # going low or the first of CEo# or CEi # going high. 
For 28F016SA No. 2: CEx# is defined as the latter of CEo# or CE 2 # going low or the first of CEq# or CE 2 # going high. 

1 . Read timings during Write and Erase are the same as for normal read. 

2. Refer to command definition tables for valid address and data values. 

3. Sampled, but not 100% tested. 

4. Write/Erase durations are measured to valid Status Data. 

5. Word/Byte Write operations are typically performed with 1 Programming Pulse. 

6. Address and Data are latched on the rising edge of CEx# for all Command Write Operations. 

7. This information will be available in a technical paper. Please call Intel’s Application Hotline or your local sales office for 
more information. 


DEEP WRITE DATA-WRITE OR 
POWER-DOWN ERASE SETUP COMMAND 


WRITE VALID ADDRESS 
& DATA (DATA-WRITE) OR 
ERASE CONFIRM COMMAND 


AUTOMATED DATA-WRITE 
OR ERASE DELAY 


WRITE READ EXTENDED 
REGISTER COMMAND 


READ EXTENDED 
STATUS REGISTER DATA 



NOTES: 

1. This address string depicts Data- Write/ Erase cycles with corresponding verification via ESRD. 

2. This address string depicts Data-Write/Erase cycles with corresponding verification via CSRD. 

3. This cycle is invalid when using CSRD for verification during Data-Write/Erase operations. 

4. For 28F016SA No. 1: CEx# is defined as the latter of CEo# or CE-| # going low, or the first of CEq# or CEi # going 
high. 

For 28F016SA No. 2: CEx# is defined as the latter of CEo# or CE 2 # going low, or the first of CEq# or CE 2 # going 
high. 

5. RP# low transition is only to show tRHPU not valid for above Read and Write cycles. 


Figure 15. Alternate AC Waveforms for Command Write Operations 
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6.10 AC Characteristics for Page Buffer Write Operations^) 

Vcc = 3.3V ±0.3V, T a = 0°c to + 70°C 


Versions 

DD28F032SA-1 50 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

UvA V 

Write Cycle Time 


150 



ns 

*ELWL 

CEx# Setup to WE# Going Low 


10 



ns 

UVWL 

Address Setup to WE# Going Low 

3 

0 



ns 

»DVWH 

Data Setup to WE# Going High 

2 

75 



ns 

tWLWH 

WE# Pulse Width 


75 



ns 


Data Hold from WE# High 

2 

10 



ns 

twHAX 

Address Hold from WE# High 

2 

10 



ns 

|| 

CE X # Hold from WE# High 


10 



ns 

wmm 

WE# Pulse Width High 





ns 

*GHWL 

Read Recovery before Write 


0 



ns 

tWHGL 

Write Recovery before Read 


95 



ns 
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6.10 AC Characteristics for Page Buffer Write Operations^) (Continued) 
Vcc = 5.0V + 0.5V, T a = 0°C to +70°C 


Versions 

DD28F032SA- 

070 

DD28F032SA 

-080 

DD28F032SA- 

100 

Unit 

Symbol 

Parameter 

Notes 

Min 

Typ 

Max 



Max 

Min 



*AVAV 

Write Cycle Time 


70 



80 



100 



ns 

*ELWL 

CEx# Setup to WE# 
Going Low 

■ 

0 

■ 

■ 

0 



0 



ns 

l AVWL 

Address Setup to 
WE# Going Low 

3 

0 

■ 

■ 

0 



0 



ns 

*DVWH 

Data Setup to WE# 
Going High 

2 

50 



50 



50 



ns 

tWLWH 

WE# Pulse Width 


40 



50 



50 



ns 



2 

0 



0 



0 



ns 

tWHAX 

Address Hold from 
WE# High 

2 

10 



10 



10 



Q 

tWHEH 

CE X # Hold from WE# 
High 

■ 

10 

■ 

H 

10 



10 



ns 

tWHWL 

WE# Pulse Width High 


30 



30 



50 




tGHWL 

Read Recovery before 
Write 

■ 

0 



0 



0 




%HGL 

Write Recovery before 
Read 

■ 

60 



65 



65 

■ 

■ 

ns 


NOTES: 

For 28F016SA No. 1: CEx# is defined as the latter of CEo# or CEi # going low or the first of CEo# or CEi # going high. 
For 28F016SA No. 2: CEx# is defined as the latter of CEo# or CE 2 # going low or the first of CEo# or CE 2 # going high. 

1. These are WE# -controlled write timings, equivalent CEx# -controlled write timings apply. 

2. Sampled, not 100% tested. 

3. Address must be valid during the entire WE# low pulse or the entire CE X # low pulse (for CE X # - controlled write timings) 
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6.1 1 Erase and Word/Byte Write Performance, Cycling Performance and 
Suspend Latency( *> 3 ) 

Vcc = 3.3V ±0.3V, Vpp = 12.0V + 0.6V, T A = 0°C to +70°C 


Symbol 

Parameter 

Notes 







Page Buffer Byte Write Time 

EM 




fJLS 



Page Buffer Word Write Time 

warn 


6.53 

Note 6 

flS 


tWHRHl 

Word/Byte Write Time 

2 


9 


fJL S 



Block Write Time 

2 


0.6 


Sec 

Byte Write Mode 

tWHRH3 

Block Write Time 

2 


0.3 

1.0 

Sec 



Block Erase Time 

2 


0.8 





Full Chip Erase Time 

2 


25.6 


Sec 



Erase Suspend Latency 
Time to Read 




■ 

fJLS 



Erase Suspend Latency 
Time to Write 



10.0 

■ 

JUS 



Erase Cycles 

5 

100,000 



Cycles 



V C c = 5.0V ±0.5V, Vpp = 12.0V ±0.6V, T A = 0°C to +70°C 


Symbol 

Parameter 


Min 

Typ(1) 

Max 

Units 

Test Conditions 


Page Buffer Byte Write Time 

2,4 







Page Buffer Word Write Time 

EM 




juts 


tWHRHl 

Word/Byte Write Time 

2 


6 

Note 6 

H9 


KBS 

Block Write Time 

2 


0.4 

2.1 

mu 

Byte Write Mode 

tWHRH 3 

Block Write Time 

2 


0.2 

1.0 

Sec 

Word Write Mode 


Block Erase Time 

2 


0.6 

10 




Full Chip Erase Time 

2 


19.2 


Sec 



Erase Suspend Latency 
Time to Read 



5.0 


JUS 



Erase Suspend Latency 
Time to Write 



8.0 


juts 



Erase Cycles 

5 

100,000 

1,000,000 


Cycles 



NOTES: 

1. 25°C, Vcc = 3.3V or 5.0V nominal, 10K cycles. 

2. Excludes system-level overhead. 

3. These performance numbers are valid for all speed versions. 

4. This assumes using the full Page Buffer to Write to Flash (256 bytes or 128 words). 

5. 1 ,000,000 cycle performance assume the application uses block retirement techniques. 

6. This information will be available in a technical paper. Please call Intel’s Application hotline or your local sales office for 
more information. 
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7.0 DERATING CURVES 



FREQUENCY (MHz) 

290490-19 


Figure 17. Ice vs. Frequency (Vcc = 5.5V) 
for x8 or x16 Operation 



Figure 19. Ice vs. Frequency (Vcc = 3.6 V) 
for x8 or x16 Operation 
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Figure 20. Ipp during Block Erase 
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Access Time (ns) 
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Figure 22. Ipp during Word Write Operation Figure 23. ipp during Page 


Buffer Write Operation 
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DEVICE NOMENCLATURE/ORDERING INFORMATION 



D 

2 i 

3 F 

0 

3 

2 

S 

> 

- ( 

) 7 

0 


V 1 r -1 

DUAL DIE ACCESS SPEED (ns) 

70 ns 


Option 

Order Code 

Valid Combinations 

V CC = 3.3V 
±0.3V, 50 pF 

V CC = 5.0V 
± 5%, 30 pF 

Vcc = 5.0V 
±10%, 100 pF 

1 

DD28F032SA 070 

DD28F032SA-1 50 

DD28F032SA-070 

DD28F032SA-080 

2 

DD28F032SA 100 

DD28F032SA-1 50 


DD28F032SA-1 00 


ADDITIONAL INFORMATION 



Item 

Order Number 


28F016SA 16-Mbit FlashFileTM Memory User’s Manual 

297372 


28F01 6SA 1 6-Mbit FlashFile™ Memory Data Sheet 

290489 


28F016SV FlashFileTM Memory Data Sheet 

290528 


28F008SA Data Sheet 

290435 

AP 393 

“28F016SV Compatibility with 28F016SA” 

292144 

AP 378 

“System Optimization Using the Enhanced Features of the 28F016SA” 

292127 

AP 377 

“28F01 6SA Software Drivers” 

292126 

AP 375 

“Upgrade Considerations from the 28F008SA to the 28F016SA” 

292124 

AP357 

“Power Supply Solutions for Flash Memory” 

292092 

AP374 

“Flash Memory Write Protection Techniques” 

292123 

FLASH 

Builder Design Resource Tool 

297508 

AP 607 

Multi-Ste Layout Planning w/lntel’s FlashFileTM Components Including ROM Capab- 

292159 


ility Small and Low-Cost Power Supply Solution for Intel’s Flash Memory Products 

297534 

ER 33 

“ETOXtm Flash Memory Technology — Insight to Intel’s Fourth Generation Process 
Innovation” 

294016 


Please check with Intel Literature for availability. 
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28F016SV 
16-MBIT (1 MBIT x 16, 2 MBIT x 8) 
FlashFile™ MEMORY 


■ SmartVoltage Technology 
-User-Selectable 3.3V or 5V V C c 
-User-Selectable 5V or 12V Vpp 

■ 65 ns Access Time 

■ 1 Million Erase Cycles per Block 

■ 30.8 MB/sec Burst Write Transfer Rate 

■ 0.48 MB/sec Sustainable Write Transfer 
Rate 

■ Configurable x8 or x16 Operation 

■ 56-Lead TSOP and SSOP Type I 
Packages 


■ Backwards-Compatible with 28F016SA, 
28F008SA Command Set 

■ Revolutionary Architecture 

— Multiple Command Execution 
— Write during Erase 
— Command Super-Set of the Intel 
28F008SA 

— Page Buffer Write 

■ 2 ju,A Typical Deep Power-Down 

■ 32 Independently Lockable Blocks 

■ State-of-the-Art 0.6 jam ETOXtm iv 
F lash Technology 


Intel’s 28F016SV 16-Mbit FlashFile™ memory is a revolutionary architecture which is the ideal choice for 
designing embedded direct-execute code and mass storage data/file flash memory systems. With innovative 
capabilities, low-power operation, user-selectable Vpp voltage and high read/write performance, the 
28F016SV enables the design of truly mobile, high-performance personal computing and communications 
products. 

The 28F016SV is the highest density, highest performance nonvolatile read/write solution for solid-state 
storage applications. Its symmetrically blocked architecture (100% compatible with the 28F008SA 8-Mbit and 
28F016SA 16-Mbit FlashFile memories), extended cycling, flexible Vqc and Vpp voltages (SmartVoltage tech- 
nology), fast write and read performance and selective block locking provide a highly flexible memory compo- 
nent suitable for Resident Flash Arrays, high-density memory cards and PCMCIA-ATA flash drives. The 
28F016SV’s dual read voltage enables the design of memory cards which can interchangeably be read/writ- 
ten in 3.3V and 5.0V systems. Its x8/x16 architecture allows optimization of the memory-to-processor inter- 
face. The flexible block locking option enables bundling of executable application software in a Resident Flash 
Array or memory card. The 28F016SV is manufactured on Intel’s 0.6 jam ETOXtm iv process technology. 



December 1994 

Order Number: 290528-002 
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1.0 INTRODUCTION 

The documentation of the Intel 28F016SV memory 
device includes this datasheet, a detailed user’s 
manual, and a number of application notes and de- 
sign tools, all of which are referenced at the end of 
this datasheet. 

The datasheet is intended to give an overview of the 
chip feature-set and of the operating AC/DC specifi- 
cations. The 16-Mbit Flash Product Family User’s 
Manual provides complete descriptions of the user 
modes, system interface examples and detailed de- 
scriptions of all principles of operation. It also con- 
tains the full list of software algorithm flowcharts, 
and a brief section on compatibility with the Intel 
28F008SA. 


1.1 Enhanced Features 

The 28F016SV is backwards compatible with the 
28F016SA and offers the following enhancements: 

• SmartVoltage Technology 

— Selectable 5.0V or 12.0V Vpp 

• Vpp Level Bit in Block Status Register 

• Internal 3/5V Detection Circuitry 

• Additional RY/BY# Configuration 
— Pulse-On-Write/ Erase 

• Additional Upload Device Information Command 
Feedback 

— Device Proliferation Code 
— Device Configuration Code 


1.2 Product Overview 

The 28F016SV is a high-performance, 16-Mbit 
(16,777,216-bit) block erasable, nonvolatile random 
access memory, organized as either 1 Mword x 16 
or 2 Mbyte x 8. The 28F016SV includes thirty-two 
64-KB (65,536 byte) blocks or thirty-two 32-KW 
(32,768 word) blocks. A chip memory map is shown 
in Figure 4. 

The implementation of a new architecture, with 
many enhanced features, will improve the device op- 
erating characteristics and result in greater product 
reliability and ease-of-use. 


The 28F016SV incorporates SmartVoltage technol- 
ogy, providing Vqc operation at both 3.3V and 5.0V 
and program and erase capability at Vpp = 12.0V or 
5.0V. Operating at Vqc = 3.3V, the 28F016SV con- 
sumes approximately one half the power consump- 
tion at 5.0V Vqc, while 5.0V Vqq provides highest 
read performance capability. Vpp = 5.0V operation 
eliminates the need for a separate 1 2.0V converter, 
while Vpp = 1 2.0 V maximizes write/erase perform- 
ance. In addition to the flexible program and erase 
voltages, the dedicated Vpp gives complete code 
protection with Vpp ^ Vpplk- 

Internal 3.3V or 5.0V Vqq detection automatically 
configures the device internally for optimized 3.3V or 
5.0V Read/Write operation. 

A Command User Interface (CUI) serves as the sys- 
tem interface between the microprocessor or micro- 
controller and the internal memory operation. 

Internal Algorithm Automation allows Byte/ Word 
Writes and Block Erase operations to be executed 
using a Two-Write command sequence to the CUI in 
the same way as the 28F008SA 8-Mbit FlashFile 
memory. 

A super-set of commands has been added to the 
basic 28F008SA command-set to achieve higher 
write performance and provide additional capabili- 
ties. These new commands and features include: 

• Page Buffer Writes to Flash 

• Command Queuing Capability 

• Automatic Data Writes during Erase 

• Software Locking of Memory Blocks 

• Two-Byte Successive Writes in 8-bit Systems 

• Erase All Unlocked Blocks 

Writing of memory data is performed in either byte or 
word increments typically within 6 jms (12.0V Vpp) — a 
33% improvement over the 28F008SA. A Block 
Erase operation erases one of the 32 blocks in typi- 
cally 0.6 sec (12.0V Vpp), independent of the other 
blocks, which is about a 65% improvement over the 
28F008SA. 

Each block can be written and erased a minimum of 
100,000 cycles. Systems can achieve one million 
Block Erase Cycles by providing wear-leveling algo- 
rithms and graceful block retirement. These tech- 
niques have already been employed in many flash 
file systems and hard disk drive designs. 


APWANl©! OM(F©K[iSMirO@K] 


3-305 


28F016SV FlashFile™ Memory 


The 28F016SV incorporates two Page Buffers of 
256 bytes (128 words) each to allow page data 
writes. This feature can improve system write per- 
formance by up to 4.8 times over previous flash 
memory devices, which have no Page Buffers. 

All operations are started by a sequence of Write 
commands to the device. Three Status Registers 
(described in detail later in this datasheet) and a 
RY/BY# output pin provide information on the prog- 
ress of the requested operation. 

While the 28F008SA requires an operation to com- 
plete before the next operation can be requested, 
the 28F016SV allows queuing of the next operation 
while the memory executes the current operation. 
This eliminates system overhead when writing sev- 
eral bytes in a row to the array or erasing several 
blocks at the same time. The 28F016SV can also 
perform Write operations to one block of memory 
while performing Erase of another block. 

The 28F016SV provides selectable block locking to 
protect code or data such as Device Drivers, 
PCMCIA card information, ROM-Executable O/S or 
Application Code. Each block has an associated 
nonvolatile lock-bit which determines the lock status 
of the block. In addition, the 28F016SV has a master 
Write Protect pin (WP#) which prevents any modifi- 
cations to memory blocks whose lock-bits are set. 

The 28F01 6SV contains three types of Status Regis- 
ters to accomplish various functions: 

• A Compatible Status Register (CSR) which is 
100% compatible with the 28F008SA FlashFile 
memory Status Register. The CSR, when used 
alone, provides a straightforward upgrade capa- 
bility to the 28F016SV from a 28F008SA-based 
design. 

• A Global Status Register (GSR) which informs 
the system of command Queue status, Page 
Buffer status, and overall Write State Machine 
(WSM) status. 

• 32 Block Status Registers (BSRs) which provide 
block-specific status information such as the 
block lock-bit status. 

The GSR and BSR memory maps for Byte-Wide and 
Word-Wide modes are shown in Figures 5 and 6. 

The 28F016SV incorporates an open drain RY/BY# 
output pin. This feature allows the user to OR-tie 
many RY/BY# pins together in a multiple memory 
configuration such as a Resident Flash Array. 
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Other configurations of the RY/BY# pin are en- 
abled via special CUI commands and are described 
in detail in the 16-Mbit Flash Product Family User’s 
Manual. 

The 28F016SV’s enhanced Upload Device Informa- 
tion command provides access to additional infor- 
mation that the 28F016SA previously did not offer. 
This command uploads the Device Revision Num- 
ber, Device Proliferation Code and Device Configu- 
ration Code to the page buffer. The Device Prolifera- 
tion Code for the 28F016SV is 01 H, and the Device 
Configuration Code identifies the current RY/BY# 
configuration. Section 4.4 documents the exact 
page buffer address locations for all uploaded infor- 
mation. A subsequent Page Buffer Swap and Page 
Buffer Read command sequence is necessary to 
read the correct device information. 

The 28F016SV also incorporates a dual chip-enable 
function with two input pins, CEq# and CEi#. 
These pins have exactly the same functionality as 
the regular chip-enable pin, CE#, on the 28F008SA. 
For minimum chip designs, CE-|# ma y be tied to 
ground and system logic may use CEq# as the chip 
enable input. The 28F016SV uses the logical combi- 
nation of these two signals to enable or disable the 
entire chip. Both CEo# and CEi# must be active 
low to enable the device. If either one becomes in- 
active, the chip will be disabled. This feature, along 
with the open drain RY/BY# pin, allows the system 
designer to reduce the number of control pins used 
in a large array of 16-Mbit devices. 

The BYTE# pin allows either x8 or x16 read/writes 
to the 28F016SV. BYTE# at logic low selects 8-bit 
mode with address Aq selecting between the low 
byte and high byte. On the other hand, BYTE# at 
logic high enables 1 6-bit operation with address Ai 
becoming the lowest order address, and address Aq 
is not used (don’t care). A device block diagram is 
shown in Figure 1 . 

The 28F016SV is specified for a maximum access 
time of 65 ns (tAcc) at 5.0V operation (4.75V to 
5.25V) over the commercial temperature range (0°C 
to + 70°C). A corresponding maximum access time 
of 75 ns at 3.3V (3.0V to 3.6V and 0°C to +70°C) is 
achieved for reduced power consumption applica- 
tions. 





28F016SV FlashFile™ Memory 


Intel 


The 28F016SV incorporates an Automatic Power 
Saving (APS) feature, which substantially reduces 
the active current when the device is in static mode 
of operation (addresses not switching). In APS 
mode, the typical Iqc current is 1 mA at 5.0V (3.0 mA 
at 3.3V). 

A deep power-down mode of operation is invoked 
when the RP# (called PWD# on the 28F008SA) pin 
transitions low. This mode brings the device power 
consumption to less than 2.0 julA, typically, and pro- 
vides additional write protection by acting as a de- 
vice reset pin during power transitions. A reset time 
of 300 ns (5.0V Vqc operation) is required from RP# 
switching high until outputs are again valid. In the 
Deep Power-Down state, the WSM is reset (any cur- 
rent operation will abort) and the CSR, GSR and 
BSR registers are cleared. 


A CMOS standby mode of operation is enabled 
when either CEo# or CE-j# transitions high and 
RP# stays high with all input control pins at CMOS 
levels. In this mode, the device typically draws an 
Ice standby current of 70 /xA at 5V Vqc- 

The 28F016SV will be available in 56-Lead, 1.2 mm 
thick, 14 mm x 20 mm TSOP and 56-Lead, 1.8 mm 
thick, 16 mm x 23.7 SSOP Type I packages. The 
form factor and pinout of these two packages allow 
for very high board layout densities. 


2.0 DEVICE PINOUT 

The 28F016SV 56-Lead TSOP and 56-Lead SSOP 
Type I pinout configurations are shown in Figures 2 
and 3. 
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Figure 1. 28F016SV Block Diagram 


Architectural Evolution Includes SmartVoltage Technology, 


Page Buffers, Queue Registers and Extended Registers 
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2.1 Lead Descriptions 


Symbol 

Type 

Name and Function 

A o 

INPUT 

BYTE-SELECT ADDRESS: Selects between high and low byte when device is 
in x 8 mode. This address is latched in x 8 Data Writes. Not used in x16 mode (i.e. 
the Aq input buffer is turned off when BYTE# is high). 

Ai-A*|5 

INPUT 

WORD-SELECT ADDRESSES: Select a word within one 64-Kbyte block. Ae_i 5 
selects 1 of 1024 rows, and Ai _5 selects 16 of 512 columns. These addresses 
are latched during Data Writes. 

Ai 6 -A 2 o 

INPUT 

BLOCK-SELECT ADDRESSES: Select 1 of 32 Erase blocks. These addresses 
are latched during Data Writes, Erase and Lock-Block operations. 

DQ 0 -DQ 7 

INPUT/ 

OUTPUT 

LOW-BYTE DATA BUS: Inputs data and commands during CUI write cycles. 
Outputs array, buffer, identifier or status data in the appropriate read mode. 
Floated when the chip is de-selected or the outputs are disabled. 

DQa-DQ-js 

INPUT/ 

OUTPUT 

HIGH-BYTE DATA BUS: Inputs data during x16 Data-Write operations. Outputs 
array, buffer or identifier data in the appropriate read mode; not used for Status 
Register reads. Floated when the chip is de-selected or the outputs are disabled. 

CE 0 #, CE,# 

INPUT 

CHIP ENABLE INPUTS: Activate the device’s control logic, input buffers, 
decoders and sense amplifiers. With either CEq# or CEi # high, the device is 
de-selected and power consumption reduces to standby levels upon completion 
of any current Data-Write or Erase operations. Both CEq# and CEi # must be 
low to select the device. 

All timing specifications are the same for both signals. Device Selection occurs 
with the latter falling edge of CEq# or CEi # - The first rising edge of CEo# or 
CEi # disables the device. 

RP# 

INPUT 

RESET/POWER-DOWN: RP# low places the device in a Deep Power-Down 
state. All circuits that consume static power, even those circuits enabled in 
standby mode, are turned off. When returning from Deep Power-Down, a 
recovery time of tpnQv is required to allow these circuits to power-up. 

When RP# goes low, any current or pending WSM operation(s) are terminated, 
and the device is reset. All Status Registers return to ready (with all status flags 
cleared). 

Exit from Deep Power-Down places the device in read array mode. 

OE# 

INPUT 

OUTPUT ENABLE: Gates device data through the output buffers when low. The 
outputs float to tri-state off when OE# is high. 

NOTE: 

CE X # overrides OE#, and OE# overrides WE#. 

WE# 

INPUT 

WRITE ENABLE: Controls access to the CUI, Page Buffers, Data Queue 
Registers and Address Queue Latches. WE# is active low, and latches both 
address and data (command or array) on its rising edge. Page Buffer addresses 
are latched on the falling edge of WE#. 
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2.1 Lead Descriptions (Continued) 


Symbol 

Type 

Name and Function 

RY/BY# 

OPEN DRAIN 
OUTPUT 

READY/BUSY: Indicates status of the internal WSM. When low, it indicates that 
the WSM is busy performing an operation. RY/BY# floating indicates that the 
WSM is ready for new operations (or WSM has completed all pending 
operations), or Erase is Suspended, or the device is in deep power-down mode. 
This output is always active (i.e., not floated to tri-state off when OE# or CEq#, 
CE-| # are high), except if a RY/BY # Pin Disable command is issued. 


INPUT 

WRITE PROTECT: Erase blocks can be locked by writing a nonvolatile lock-bit 
for each block. When WP# is low, those locked blocks as reflected by the 
Block-Lock Status bits (BSR.6), are protected from inadvertent Data Writes or 
Erases. When WP# is high, all blocks can be written or erased regardless of the 
state of the lock-bits. The WP# input buffer is disabled when RP# transitions 
low (deep power-down mode). 

BYTE# 

INPUT 

BYTE ENABLE: BYTE# low places the device in x8 mode. All data is then input 
or output on DQ0-7, and DQq_i 5 float. Address Aq selects between the high 
and low byte. BYTE# high places the device in x16 mode, and turns off the Aq 
input buffer. Address Ai , then becomes the lowest order address. 

Vpp 

SUPPLY 

WRITE/ERASE POWER SUPPLY (12.0V ± 0.6V, 5.0V ± 0.5V): For erasing 
memory array blocks or writing words/bytes/pages into the flash array. Vpp = 
5.0V ± 0.5V eliminates the need for a 12V converter, while connection to 12.0V 
± 0.6V maximizes Write/ Erase Performance. Write and Erase attempts are 
inhibited with Vpp at or below 1 .5V. 

NOTE: 

Write and Erase attempts with Vpp between 1 .5V and 4.5V, between 5.5V and 
1 1 .4V, and above 12.6V produce spurious results and should not be attempted. 

Vcc 

SUPPLY 

DEVICE POWER SUPPLY (3.3V ± 0.3V, 5.0V ± 0.5V, 5.0 ± 0.25V): Internal 
detection configures the device for 3.3V or 5.0V operation. To switch 3.3V to 
5.0V (or vice versa), first ramp Vcc down t0 GND, and then power to the new 
V C c voltage. 

Do not leave any power pins floating. 

GND 

SUPPLY 

GROUND FOR ALL INTERNAL CIRCUITRY: 

Do not leave any ground pins floating. 

NC 


NO CONNECT: 

No internal connection to die, lead may be driven or left floating. 
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28F032SA 

28F016SA 




NC 



CEi# 


NC 

NC 


A 20 

A 20 

Al9 

Al9 

Al9 

A 18 

Aia 

Aia 

Al7 

Air 

Al7 

Al6 

Al6 

Al6 

Vcc 

Vcc 

Vcc 

Ais 

Ais 

Ais 

Al4 

A 14 

Al4 

Al3 

Al3 

Al3 

Al2 

Al2 

A« 

CEc* 

CEo# 

CEo# 

Vpp 

Vpp 

Vpp 

RP# 

RP# 

RP# 

An 

An 

A 11 

Aio 

Aio 

Aio 

Ag 

Ag 

Ag 

Aa 

Aa 

Aa 

GND 

GND 

GND 

A 7 

a 7 

a 7 

A6 

A6 

A6 

As 

As 

As 

A4 

a 4 

a 4 

a 3 

a 3 

A 3 

a 2 

A2 

a 2 

Ai 

Ai 

Ai 


o 


E28F016SV 

56-LEAD TSOP PINOUT 


1 4mm x 20mm 
TOP VIEW 




28F016SA 

28F032SA 



56 

ZZ 3 WP# 

WP# 

WP# 

55 

ZZDWE# 

WE# 

WE# 

54 

=UOE# 

OE# 

OE# 

53 

=□ RY/BY# 

RY/BY i 

RY/BY# 

52 

=3 DQ15 

DQis 

DQis 

51 

n dq 7 

dq 7 

dq 7 

50 

=JDQi 4 

DQ14 

DQ14 

49 

= 3 DQ 6 

dq 6 

dq 6 

48 

ZZOGND 

GND 

GND 

47 

=!DQi 3 

DQi 3 

DQi 3 

46 

zzzi dq 5 

dq 5 

DQ^ 

45 

ZZZIDQi 2 

DQ12 

DQi 2 

44 

— n dq 4 

dq 4 

dq 4 

43 

42 

■ Vcc 

=3 GND 
=3 DQ11 

Vcc 

GND 

DQ11 

Vcc 

GND 

DQ11 

41 

40 

=3 DQ 3 

dq 3 

dq 3 

39 

1 DQ10 

DQ10 

DQ10 

38 

— » dq 2 

dq 2 

dq 2 

37 

=3 Vcc 

Vcc 

Vcc 

36 

=3 DQ g 

DQg 

DQg 

35 

=3 DQ 1 

DQ! 

DQ 1 

34 

=3 DQ 8 

dq 8 

dq 8 

33 

=1DQ 0 

dq 0 

DQ 0 

32 

' ~*i Ao 

Ao 

Ao 

31 

=3 BYTE# 

1 NC 

~l NC 

BYTE# 

NC 

NC 

BYTE# 

NC 

NC 

30 

29 


290528-2 


NOTE: 

56-Lead TSOP Mechanical Diagrams and dimensions are shown at the end of this datasheet. 

Figure 2. 28F016SV 56-Lead TSOP Pinout Configuration 
Shows Compatibility with 28F016SA/28F032SA 
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3.0 MEMORY MAPS 


A [20-0] A[20-1] 


1FFFFF 

1FOOOO 

64-Kbyte Block 

31 

FFFFF 

F8000 

32-Kword Block 

31 

1EFFFF 

1EOOOO 

64-Kbyte Block 

30 

F7FFF 

F0000 

32-Kword Block 

30 

1DFFFF 

1DOOOO 

64-Kbyte Block 

29 

EFFFF 

E8000 

32-Kword Block 

29 

1CFFFF 

1COOOO 

64-Kbyte Block 

28 

E7FFF 

EOOOO 

32-Kword Block 

28 

1BFFFF 

1BOOOO 

64-Kbyte Block 

27 

DFFFF 

DSOOO 

32-Kword Block 

27 

1AFFFF 

1AOOOO 

64-Kbyte Block 

26 

D7FFF 

D0000 

32-Kword Block 

26 

19FFFF 

190000 

64-Kbyte Block 

26 

CFFFF 

C8000 

32-Kword Block 

26 

18FFFF 

180000 

64-Kbyte Block 

24 

C7FFF 

coooo 

32-Kword Block 

24 

17FFFF 

170000 

64-Kbyte Block 

23 

BFFFF 

B8000 

32-Kword Block 

23 

16FFFF 

160000 

64-Kbyte Block 

22 

B7FFF 

BOOOO 

32-Kword Block 

22 

15FFFF 

150000 

64-Kbyte Block 

21 

A8FFF 

A8000 

32-Kword Block 

21 

14FFFF 

140000 

64-Kbyte Block 

20 

A7FFF 

AOOOO 

32-Kword Block 

20 

13FFFF 

130000 

64-Kbyte Block 

19 

9FFFF 

98000 

32-Kword Block 

19 

12FFFF 

120000 

64-Kbyte Block 

18 

97FFF 

90000 

32-Kword Block 

18 

11FFFF 

110000 

64-Kbyte Block 

17 

8FFFF 

88000 

32-Kword Block 

17 

10FFFF 

100000 

64-Kbyte Block 

16 

87FFF 

80000 

32-Kword Block 

16 

OFFFFF 

OFOOOO 

64-Kbyte Block 

16 

7FFFF 

78000 

32-Kword Block 

16 

OEFFFF 

OEOOOO 

64-Kbyte Block 

14 

77FFF 

70000 

32-Kword Block 

14 

ODFFFF 

ODOOOO 

64-Kbyte Block 

13 

6FFFF 

68000 

32-Kword Block 

13 

OCFFFF 

OCOOOO 

64-Kbyte Block 

12 

87FFF 

60000 

32-Kword Block 

12 

OBFFFF 

OBOOOO 

64-Kbyte Block 

11 

5FFFF 

58000 

32-Kword Block 

11 

OAFFFF 

OAOOOO 

64-Kbyte Block 

10 

57FFF 

50000 

32-Kword Block 

10 

09FFFF 

090000 

64-Kbyte Block 

9 

4FFFF 

48000 

32-Kword Block 

9 

08FFFF 

080000 

64-Kbyte Block 

8 

47FFF 

40000 

32-Kword Block 

8 

07FFFF 

070000 

64-Kbyte Block 

7 

3FFFF 

38000 

32-Kword Block 

7 

06FFFF 

060000 

64-Kbyte Block 

6 

37FFF 

30000 

32-Kword Block 

6 

05FFFF 

050000 

64-Kbyte Block 

6 

2FFFF 

28000 

32-Kword Block 

6 

04FFFF 

040000 

64-Kbyte Block 

4 

27FFF 

20000 

32-Kword Block 

4 

03FFFF 

030000 

64-Kbyte Block 

3 

1FFFF 

18000 

32-Kword Block 

3 

02FFFF 

020000 

64-Kbyte Block 

2 

17FFF 

10000 

32-Kword Block 

2 

01FFFF 

010000 

64-Kbyte Block 

1 

OFFFF 

08000 

32-Kword Block 

1 

OOFFFF 

000000 

64-Kbyte Block 

0 

07FFF 

00000 

32-Kword Block 

0 


Byte-Wide (x8) Mode Word-Wide (x16) Mode 


290528-4 

Figure 4. 28F016SV Memory Maps (Byte-Wide and Word-Wide Modes) 
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3.1 Extended Status Registers Memory Map 


x8 MODE 

A[20-0] 


xl6 MODE 

A[20-1] 


RESERVED 

1F0006H 

1F0005H 

1F0004H 

1F0003H 

1F0002H 

1F0001H 

1FCX)00H 



RESERVED 

F8003H 


GSR 



GSR 

F8002H 


RESERVED 



RESERVED 


BSR 31 



BSR 31 



RESERVED 



RESERVED 

F8001 H 


RESERVED 



RESERVED 

F8000H 

■ 

■ 

■ 

010002H 


■ 

■ 

■ 






08001 H 


RESERVED 

000006H 



RESERVED 

00003H 


RESERVED 

wwwn 

000005H 

000004H 

000003H 

000002H 

000001 H 
000000H 



RESERVED 


GSR 



GSR 

00002H 


RESERVED 



RESERVED 


BSR 0 



BSR 0 

00001 H 


RESERVED 



RESERVED 


RESERVED 



RESERVED 

00000H 

290528-6 


290528-5 




Figure 5. Extended Status Register Memory Map Figure 6. Extended Status Register Memory Map 

(Byte-Wide Mode) (Word-Wide Mode) 
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4.0 BUS OPERATIONS, COMMANDS AND STATUS REGISTER DEFINITIONS 


4.1 Bus Operations for Word- Wide Mode (BYTE# = Vm) 


Mode 

Notes 

RP# 

CEi# 

CE 0 # 

OE# 

WE# 

Ai 

DQo-15 

RY/BY# 

Read 









X 

Output Disable 



Vil 



V|H 

D 


X 

Standby 





H 

X 

■ 


X 


1 1 






II 




■ ■ 






m 



Deep Power-Down 

1,3 

V| L 

X 

X 

X 

X 

X 

High Z 

■§■ 

Manufacturer ID 

4 

VlH 



V|L 




■2991 

Device ID 

4,8 

V|H 

V|L 

— 

V|L 

VlH 



Voh 



VlH 


— 

VlH 



Din 

X 


4.2 Bus Operations for Byte-Wide Mode (BYTE# = Vil) 


Mode 

Notes 







EESI 


Read 

1,2,7 

V| H 

V| L 

Vil 




ESS 

X 



V|H 

MS 


V| H 

V| H 

X 

mm 

X 

Standby 




flSS 

X 


X 

High Z 

X 





MS 









— 

■■ 






Deep Power-Down 

1,3 

V|L 

X 

X 

X 

X 


High Z 


Manufacturer ID 

4 

V| H 

Vil 

V|L 

V|L 



89H 

Voh 

Device ID 

4,8 


Vil 

Vil 


V|H 

VlH 

AOH 

Voh 

Write 

1,5,6 

V|H 

Vil 

Vil 

VlH 

V|L 

X 

□in 

X 


NOTES: 

1. X can be Vm or V||_ for address or control pins except for RY/BY#, which is either Vql or Voh- 

2. RY/BY# output is open drain. When the WSM is ready, Erase is suspended or the device is in deep power-down mode. 
RY/BY# will be at Vqh if it is tied to Vqc through a resistor. RY/BY# at Voh is independent of OE# while a WSM 
operation is in progress. 

3. RP# at GND ± 0.2V ensures the lowest deep power-down current. 

4. A 0 and Ai at Vil provide device manufacturer codes in x8 and x16 modes respectively. A 0 and Ai at Vm provide device 
ID codes in x8 and x16 modes respectively. All other addresses are set to zero. 

5. Commands for Erase, Data Write, or Lock-Block operations can only be completed successfully when Vpp = Vppm or 
Vpp = Vpp H 2- 

6. While the WSM is running, RY/BY# in level-mode (default) stays at Vol until all operations are complete. RY/BY# goes 
to Voh when the WSM is not busy or in erase suspend mode. 

7. RY/BY# may be at Vql while the WSM is busy performing various operations. For example, a Status Register read 
during a Write operation. 

8. The 28F016SV shares an identical device identifier (66A0H in word-wide mode, AOH in byte-wide mode) with the 
28F016SA. See application note AP-393 for software and hardware techniques to differentiate between the 28F016SV 
and 28F016SA. 
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4.3 28F008SA — Compatible Mode Command Bus Definitions 


Command 

Notes 

First Bus Cycle 

Second Bus Cycle 

Oper 

Addr 


Oper 

Addr 

Data 

Read Array 


Write 

X 

ESI 

Read 

AA 

AD 

Intelligent Identifier 

1 

Write 

X 

BUM 

Read 

IA 

ID 

Read Compatible Status Register 

2 

Write 

X 

70H 

Read 

X 

CSRD 

Clear Status Register 

3 

Write 

X 

50H 




Word/Byte Write 


Write 

X 

40 H 

Write 



Alternate Word/Byte Write 


Write 

X 

10H 

Write 



Block Erase/Confirm 


Write 

X 

20H 

Write 

BA 

DOH 

Erase Suspend/Resume 


Write 

X 

BOH 

Write 

_JL_j 

DOH 


ADDRESS 

AA = Array Address 
BA = Block Address 
IA = Identifier Address 
WA = Write Address 
X = Don’t Care 


DATA 

AD = Array Data 
CSRD = CSR Data 
ID = Identifier Data 
WD = Write Data 


NOTES: 

1. Following the Intelligent Identifier command, two Read operations access the manufacturer and device signature codes. 

2. The CSR is automatically available after device enters Data Write, Erase, or Suspend operations. 

3. Clears CSR.3, CSR.4 and CSR.5. Also clears GSR. 5 and all BSR.5, BSR.4 and BSR.2 bits. See Status Register defini- 
tions. 
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4.4 28F016SV — Performance Enhancement Command Bus Definitions 


Command 


Read Extended 
Status Register 


Page Buffer Swap 


Read Page Buffer 


Single Load to 
Page Buffer 


Sequential Load to 
Page Buffer 


Page Buffer Write 
to Flash 


Two-Byte Write 


Lock Block/Confirm 


Upload Status 
Bits/Confirm 


Upload Device 
Information/Confirm 


Erase All Unlocked 
Blocks/Confirm 


RY/BY# Enable to 
Level-Mode 


RY/BY# 

Pulse-On-Write 


RY/BY# 

Pulse-On-Erase 


RY/BY# Pulse-On- 
Write/ Erase 


Mode Notes 


First Bus Cycle Second Bus Cycle 


Third Bus Cycle 



x8 

4,6,10 

x16 

4,5,6,10 

x8 

3,4,9,10 




Write 

X 

Write 

D 

Write 

X 

Write 

X 


D 

1^0 

■ 

D 

hex 

Write 

X 

Write 

X 

Write 

X 

Write 

X 



Write 


Write 


Write 



■ 

Write 

■ 



Data 

Oper 

Addr 

Data 

GSRD 

BSRD 







i 

PD 




PD 




BCL 

Write 

X 

BCH 


Write 

mm 

WCH 

CTMWMillWll 

BC(H,L) 


ADDRESS 

BA = Block Address 
PA = Page Buffer Address 
RA = Extended Register Address 
WA = Write Address 
X = Don’t Care 


DATA 

AD = Array Data 
PD = Page Buffer Data 
BSRD = BSR Data 
GSRD = GSR Data 


WC (L,H) = Word Count (Low, High) 
BC (L,H) = Byte Count (Low, High) 
WD (L,H) = Write Data (Low, High) 
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NOTES: 

1 . RA can be the GSR address or any BSR address. See Figures 5 and 6 for Extended Status Register memory maps. 

2. Upon device power-up, all BSR lock-bits come up locked. The Upload Status Bits command must be written to reflect 
the actual lock-bit status. 

3. Aq is automatically complemented to load second byte of data. BYTE# must be at V||_. Aq value determines which 
WD/BC is supplied first: Ao = 0 looks at the WDL/BCL, A 0 = 1 looks at the WDH/BCH. 

4. BCH/WCH must be at 00H for this product because of the 256-byte (128-word) Page Buffer size, and to avoid writing 
the Page Buffer contents to more than one 256-byte segment within an array block. They are simply shown for future 
Page Buffer expandability. 

5. In x16 mode, only the lower byte DQo _7 is used for WCL and WCH. The upper byte DQ 8 _i 5 is a don’t care. 

6. PA and PD (whose count is given in cycles 2 and 3) are supplied starting in the fourth cycle, which is not shown. 

7. This command allows the user to swap between available Page Buffers (0 or 1). 

8. These commands reconfigure RY/BY# output to one of three pulse-modes or enable and disable the RY/BY# function. 

9. Write address, WA, is the Destination address in the flash array which must match the Source address in the Page 
Buffer. Refer to the 16-Mbit Flash Product Family User’s Manual. 

10. BCL = 00H corresponds to a byte count of 1. Similarly, WCL = 00H corresponds to a word count of 1. 

11. After writing the Upload Device Information command and the Confirm command, the following information is output at 
Page Buffer addresses specified below: 


Address 

06H, 07H (Byte Mode) 

03H (Word Mode) 

1EH (Byte Mode) 

OFH (DQ 0 _ 7 )(Word Mode) 
1FH (Byte Mode) 

OFH (DQ 8 _i 5 )(Word Mode) 


Information 

Device Revision Number 
Device Revision Number 
Device Configuration Code 
Device Configuration Code 
Device Proliferation Code (01 H) 
Device Proliferation Code (01 H) 


A page buffer swap followed by a page buffer read sequence is necessary to access this information. The contents of 
all other Page Buffer locations, after the Upload Device Information command is written, are reserved for future imple- 
mentation by Intel Corporation. See Section 4.8 for a description of the Device Configuration Code. This code also 
corresponds to data written to the 28F016SV after writing the RY/BY# Reconfiguration command. 
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4.5 Compatible Status Register 



CSR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 

0 = Busy 

CSR.6 = ERASE-SUSPEND STATUS 

1 = Erase Suspended 

0 = Erase In Progress/Completed 

CSR.5 = ERASE STATUS 

1 = Error In Block Erasure 

0 = Successful Block Erase 
CSR.4 = DATA-WRITE STATUS 

1 = Error in Data Write 

0 = Data Write Successful 

CSR.3 = Vp P STATUS 

1 = Vpp Error Detect, Operation 

Abort 

0 = Vpp OK 


NOTES: 

RY/BY# output or WSMS bit must be checked to determine 
completion of an operation (Erase, Erase Suspend, or Data 
Write) before the appropriate Status bit (ESS, ES or DWS) is 
checked for success. 


If DWS and ES are set to “1 ” during an erase attempt, an 
improper command sequence was entered. Clear the CSR 
and attempt the operation again. 


The VPPS bit, unlike an A/D converter, does not provide 
continuous indication of Vpp level. The WSM interrogates 
Vpp’s level only after the Data Write or Erase command 
sequences have been entered, and informs the system if 
Vpp has not been switched on. VPPS is not guaranteed to 
report accurate feedback between Vppu<(nnax) and 
Vppm(min), between Vppni(max) and VppH 2 (min) and 
above VppH 2 (max). 


CSR.2-0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when polling the CSR. 
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4.6 Global Status Register 


WSMS 

OSS 

DOS 

DSS 

QS 

PBAS 

PBS 

PBSS 

7 

6 

5 

4 

3 

2 

1 

0 


GSR.7 = WRITE STATE MACHINE STATUS 

NOTES: 

[1 ] RV/BY # output or WSMS bit must be checked to 

1 = Ready 

determine completion of an operation (Block Lock, 

0 = Busy 

Suspend, any RY/BY# reconfiguration, Upload Status 

GSR.6 = OPERATION SUSPEND STATUS 
1 = Operation Suspended 

0 = Operation in Progress/ 

Completed 

GSR.5 = DEVICE OPERATION STATUS 

1 = Operation Unsuccessful 
0 = Operation Successful or 

Currently Running 

GSR.4 = DEVICE SLEEP STATUS 

Bits, Erase or Data Write) before the appropriate Status 
bit (OSS or DOS) is checked for success. 

1 = Device in Sleep 
0 = Device Not in Sleep 

MATRIX 5/4 

0 0 = Operation Successful or 

If operation currently running, then GSR.7 = 0. 

Currently Running 
0 1 = Device in Sleep mode or 

If device pending sleep, then GSR.7 = 0. 

Pending Sleep 

1 0 = Operation Unsuccessful 
1 1 = Operation Unsuccessful or 

Operation aborted: Unsuccessful due to Abort 

Aborted 

command. 

GSR.3 = QUEUE STATUS 


1 = Queue Full 
0 = Queue Available 

GSR.2 = PAGE BUFFER AVAILABLE STATUS 


1 = One or Two Page Buffers 

The device contains two Page Buffers. 

Available 

0 = No Page Buffer Available 
GSR.1 = PAGE BUFFER STATUS 

Selected Page Buffer is currently busy with WSM 

1 = Selected Page Buffer Ready 

operation 

0 = Selected Page Buffer Busy 
GSR.O = PAGE BUFFER SELECT STATUS 


1 = Page Buffer 1 Selected 
0 = Page Buffer 0 Selected 



NOTE: 

1. When multiple operations are queued, checking BSR.7 only provides indication of completion for that particular block. 
GSR. 7 provides indication when all queued operations are completed. 
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BS 

BLS 

BOS 

BOAS 

QS 

VPPS 

VPPL 

R 

7 

6 . 

5 

4 

3 

2 

1 

0 


BSR.7 = BLOCK STATUS 
1 = Ready 

0 = Busy 

BSR.6 = BLOCK LOCK STATUS 

1 = Block Unlocked for Write/Erase 

0 = Block Locked for Write/ Erase 

BSR.5 = BLOCK OPERATION STATUS 

1 = Operation Unsuccessful 

0 = Operation Successful or 

Currently Running 

BSR.4 = BLOCK OPERATION ABORT STATUS 

1 = Operation Aborted 

0 = Operation Not Aborted 

MATRIX 5/4 

0 0 = Operation Successful or 

Currently Running 

01 = Not a Valid Combination 
1 0 = Operation Unsuccessful 
1 1 = Operation Aborted 

BSR.3 = QUEUE STATUS 
1 = Queue Full 

0 = Queue Available 

BSR.2 = Vp P STATUS 

1 = Vpp Error Detect, Operation Abort 

0 = Vpp OK 

BSR.1 = Vpp LEVEL 

1 = Vpp Detected at 5.0V ± 10% 

0 = Vpp Detected at 12.0V ± 5% 


NOTES: 

[1] RY/BY # output or BS bit must be checked to 
determine completion of an operation (Block Lock, 
Suspend, Erase or Data Write) before the appropriate 
Status bits (BOS or BLS) is checked for success. 


The BOAS bit will not be set until BSR.7 = 1 . 


Operation halted via Abort command. 


BSR.1 is not guaranteed to report accurate feedback 
between the Vppm and VppH 2 voltage ranges. Writes 
and erases with Vpp between Vppi_K(max) and Vppm 
(min), between Vppm (max) and VppH 2 (nnin), and above 
VppH 2 (max) produce spurious results and should not be 
attempted. 

BSR.1 was a RESERVED bit on the 28F016SA. 


BSR.O = RESERVED FOR FUTURE ENHANCEMENTS 

This bit is reserved for future use; mask it out when polling the BSRs. 


NOTE: 

1. When multiple operations are queued, checking BSR.7 only provides indication of completion for that particular block. 
GSR.7 provides indication when all queued operations are completed. 
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4.8 Device Configuration Code 


R 

R 

R 

R 

R 

RB2 

RBI 

RB0 

7 

6 

5 

4 

3 

2 

1 

0 


NOTES: 

DCC.2-DCC.0 = RY/BY# CONFIGURATION Undocumented combinations of RB2-RB0 are reserved by 
(RB2-RB0) Intel Corporation for future implementations and should not 

001 = Level Mode (Default) be used. 

010 = Pulse-On-Write 

011 = Pulse-On-Erase 

100 = RY/BY# Disabled 

101 = Pulse-On-Write/ 

Erase 

DCC.7-DCC.3 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when reading the Device Configuration Code. Set 
these bits to “0” when writing the desired RY/BY # configuration to the device. 
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5.0 ELECTRICAL SPECIFICATIONS 

5.1 Absolute Maximum Ratings* 

Temperature Under Bias 0°C to +80°C 

Storage Temperature -65°C to + 125°C 


NOTICE: This data sheet contains information on 
products in the sampling and initial production phases 
of development. The specifications are subject to 
change without notice. Verify with your local Intel 
Sales office that you have the latest data sheet be- 
fore finalizing a design. 

* WARNING: Stressing the device beyond the “ Absolute 
Maximum Ratings " may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions ” is not recommended and ex- 
tended exposure beyond the “Operating Conditions " 
may affect device reliability. 


V C c = 3.3V ± 0.3V Systems(5) 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 

Test Conditions 

Ta 

Operating Temperature, Commercial 

1 

0 

70 

C 

Ambient Temperature 

Vcc 

Vcc withRespect to GND 

2 


7.0 

V 


Vpp 

Vpp Supply Voltage with Respect to GND 

2,3 

-0.2 

14.0 

V 


V 

Voltage on any Pin (except Vcc. Vpp) with 
Respect to GND 

2 

-0.5 

Vcc 

+ 0.5 

V 


1 

Current into any Non-Supply Pin 



±30 

mA 


•out 

Output Short Circuit Current 

4 






V C c = 5.0V ± 0.5V, 5.0V ± 0.25V Systems(5,6) 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 


Ta 

Operating Temperature, Commercial 

1 

0 

70 

mm 



Vcc with Respect to GND 

2 

-0.2 

7.0 

V 



Vpp Supply Voltage with Respect to GND 

2,3 



V 




2 

-2.0 

7.0 

V 


1 

Current into any Non-Supply Pin 



± 30 

mA 


lOUT 

Output Short Circuit Current 

4 


100 

mA 



NOTES: 

1 . Operating temperature is for commercial product defined by this specification. 

2. Minimum DC voltage is —0.5V on input/output pins. During transitions, this level may undershoot to -2.0 V for periods 
<20 ns. Maximum DC voltage on input/output pins is Vcc + 0.5V which, during transitions, may overshoot to Vcc + 
2.0V for periods <20 ns. 

3. Maximum DC voltage on V PP may overshoot to + 14.0 V for periods <20 ns. 

4. Output shorted for no more than one second. No more than one output shorted at a time. 

5. AC specifications are valid at both voltage ranges. See DC Characteristics tables for voltage range-specific specifications. 

6. 5% Vcc specifications refer to the 28F016SV-065 and 28F016SV-070 in its high speed test configuration. 
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5.2 Capacitance 

For a 3.3V ± 0.3V System: 


Symbol 

Parameter 


Bn 


Units 

Test Conditions 

C|N 

Capacitance Looking into an 
Address/Control Pin 

■ 

H 

8 

PF 

T a = 25°C, f = 1.0 MHz 

CquT 

Capacitance Looking into an 
Output Pin 


H 

12 

PF 

T a = 25°C, f = 1.0 MHz 

Cload 

Load Capacitance Driven by 
Outputs for Timing Specifications 

1,2 

■ 

50 

PF 



For 5.0V ± 0.5V, 5.0V ± 0.25V System: 


Symbol 

Parameter 

Notes 



Units 

Test Conditions 

C|N 

Capacitance Looking into an 
Address/Control Pin 

1 

6 

8 

PF 

T a = 25°C,f = 1.0 MHz 

Gout 

Capacitance Looking into an 
Output Pin 

1 

8 



T a = 25°C, f = 1.0 MHz 

Cload 

Load Capacitance Driven by 
Outputs for Timing Specifications 

1,2 

■ 

100 

PF 

ForVcc = 5.0V ± 0.5V 



ForVcc = 5.0V ± 0.25V 


NOTE: 

1. Sampled, not 100% tested. Guaranteed by design. 

2. Intel is currently developing more accurate models for the Transient Equivalent Testing Load Circuits. For more informa- 
tion or to obtain iBIS models, please contact your local Intel/Distribution Sales Office. 
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2.4- 


INPUT 


0.45- 


X 2 - 0 ^. " 5 

TEST POINTS <. X 

c . IAm 


OUTPUT 


290528-7 

AC test inputs are driven at Vqh (2.4 VTTL) for a Logic “1” and Vql (0.45 VTTL) for a Logic “0.” Input timing begins at 
Vih (2.0 VTTL) and V||_ (0.8 VTTL). Output timing ends at Vm and Vj|_. Input rise and fall times (10% to 90%) <10 ns. 

Figure 7. Transient Input/Output Reference Waveform for 
Vcc = 5.0V ± 10% (Standard Testing Configuration)^) 


3.0- 


INPUT 


0 . 0 - 




-TEST POINTS- 




5 OUTPUT 


290528-8 

AC test inputs are driven at 3.0V for a Logic “1” and 0.0V for a Logic “0.” Input timing begins, and output timing ends, at 
1.5V. Input rise and fall times (10% to 90%) <10 ns. 

Figure 8. Transient Input/Qutput Reference Waveform for Vcc “ 3.3V ± 0.3V 
and Vcc = 5.0V ± 5% (High Speed Testing Configuration)^) 


NOTES: 

1. Testing characteristics for 28F016SV-070 (Standard Testing Configuration) and 28F016SV-080. 

2. Testing characteristics for 28F016SV-065/28F016SV-075 and 28F016SV-70 (High Speed Testing Configuration)/ 
28F016SV-120. 
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2.5 ns of 25H Transmission Line 

^From Output / \ Test^ 


Under Test 


<T 


D- 


Point 


290528-9 


Total Capacitance = lOOpF 


Figure 9. Transient Equivalent Testing Load Circuit 
(28F016SV-070/-080 at V C c = 5.0V ± 10%) 

2.5 ns of 50a Transmission Line 

^From Output / m \ m 1 / \ Test, 


Under Test 


<X 


T> 


Point 


290528-10 


Total Capacitance = 50 pF 


Figure 10. Transient Equivalent Testing Load Circuit 
(28F016SV-075/-120 at V C c = 3.3V ± 0.3V) 


2.5 ns of 83a Transmission Line 

^From Output 


Under Test 


-CL 


r> 


Point 


290528-11 


Total Capacitance = 30 pF 


Figure 11. High Speed Transient Equivalent Testing Load Circuit 
(28F0 1 6S V-065/-070 at V C c = 5.0V ± 5%) 
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5.3 DC Characteristics 


Vcc = 3.3V ± 0.3V, T a = 0°c to +70“C 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

Ili 

Input Load Current 

1 

■ 

■ 




! lo 

Output Leakage 
Current 

1 

■ 

■ 

10 

jiiA 

V CC “ Vcc Max, 

Vout = v cc or GND 

lees 

Vcc Standby 
Current 

1,5 

1 

70 

130 

fiA 

Vcc = v cc Max, 
CE 0 #,CE 1 #,RP# = V C c ± 
0.2V 

BYTE#, WP# = V C c ± 0.2V 
or GND ± 0.2V 

■ 

1 

■ 

mA 

Vcc = Vcc Max, 
CE 0 #,CE 1 #,RP# = V| H 
BYTE#, WP# = V| H or V, L 

ICCD 

Vcc Deep Power- 
Down Current 

1 

■ 

2 

■ 

fiA 

RP# = GND ± 0.2V 
BYTE# = V C c ± 0.2V or 
GND ± 0.2V 

ICCR 1 

Vcc R oad Current 

1,4,5 


40 

50 

mA 

Vcc = Vcc Max 

CMOS: CE 0 #, CE-j # = GND 

+ 0.2 V 

BYTE# = GND ± 0.2V or 
Vcc ± 0.2V 

Inputs = GND ± 0.2V or Vcc 
± 0.2V 

TTL: CEo#, CE-| # = V|l, 
BYTE# = V| L orV| H 
INPUTS = V| L orV| H , 
f = 8 MHz, Iqut = 0 mA 

'CCR 2 

Vcc Read Current 

1,4, 

5,6 


20 

30 

mA 

Vcc = Vcc Max 
CMOS:CE 0 #,CE 1 # = GND 
± 0.2V 

BYTE# = GND ± 0.2V or 
V CC ± 0.2V 

Inputs = GND ± 0.2V or Vcc 
± 0.2V 

TTL: CE 0 #, CE-i # = V IL , 
BYTE# = V| L orV| H 
INPUTS = V| L or V| H , 
f = 4 MHz, louT = 0 mA 
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5.3 DC Characteristics (Continued) 


V C c = 3.3V ± 0.3V, T a = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 

1H1 

Max 

Units 

Test Conditions 

>ccw 

Vcc Wr ite Current 

1.6 

■ 

H 

12 

mA 

Word/Byte Write in Progress 
Vpp = 12.0V ± 5% 




■ 

8 

17 

mA 

Word/Byte Write in Progress 
Vpp = 5.0V ± 10% 

icCE 

Vqc Block Erase 
Current 

1.6 

■ 

6 

12 

mA 

Block Erase in Progress 
Vpp = 12.0V ± 5% 




1 1 

9 

H 

mA 

Block Erase in Progress 
Vpp = 5.0V ± 10% 

ICCES 

Vqc Erase 
Suspend Current 

1,2 

■ 

1 

■ 

mA 

CE 0 #,CE 1 # = V| H 
Block Erase Suspended 

•pps 

Vpp Standby/Read 



± 1 

± 10 

fjtA 

Vpp ^ Vcc 

•PPR 

Current 



30 

50 

juA 

Vpp > Vcc 


Vpp Deep Power- 
Down Current 

1 

■ 

0.2 

5 

fiA 

RP# = GND ± 0.2V 

IppW 

Vpp Write Current 

1,6 


10 

15 

mA 

Vpp = 12.0V ± 5% 
Word/Byte Write in Progress 




■ 

15 

25 

mA 

Vpp = 5.0V ± 10% 
Word/Byte Write in Progress 

IppE 

Vpp Erase Current 

1,6 

■ 

■ 

10 

mA 

Vpp = 12.0V ± 5% 
Block Erase in Progress 





14 

20 

mA 

Vpp = 5.0V ±10% 
Block Erase in Progress 


Vpp Erase 
Suspend Current 

1 

■ 

30 

50 

jllA 

Vpp = Vppm or VppH2» 
Block Erase Suspended 

V| L 

Input Low Voltage 

6 

-0.3 


0.8 

V 


V|H 

Input High Voltage 

6 

2.0 


Vcc 
+ 0.3 

V 


VOL 

Output Low 
Voltage 

6 


■ 

0.4 

V 

v cc = v cc Min ar, d 
Iql = 4 mA 
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5.3 DC Characteristics (Continued) 


Vcc = 3.3V ± 0.3V, T a = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

VoH 1 

Output High 
Voltage 

6 

2.4 



V 

Ioh = ~2.0 mA 
V CC = V CC Min 

VOH 2 


6 

Vcc 

-0.2 



V 

lOH = — 1 00 JU,A 

Vcc = Vcc M‘ n 

VpPLK 

Vpp Erase/Write 
Lock Voltage 


0.0 


1.5 

V 


VppHI 

Vpp during 
Write/ Erase 
Operations 

3 

4.5 



V 


VppH2 

Vpp during 
Write/ Erase 
Operations 

3 

11.4 



V 


Vlko 

Vqc Erase/Write 
Lock Voltage 


2.0 



V 



NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 3.3V, Vpp = 12.0V or 5.0V, T = 25°C. These 
currents are valid for all product versions (package and speeds). 

2. Icces is specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum 
of Icces and Iccr- 

3. Block Erases, Word/Byte Writes and Lock Block operations are inhibited when Vpp ^ Vppi_K and not guaranteed in the 
ranges between Vppi_K(max) and VppHi(min), between Vppm(max) and VppH 2 (nnin) and above VppH 2 (max). 

4. Automatic Power Savings (APS) reduces Iccr to 3.0 mA typical in static operation. 

5. CMOS Inputs are either Vcc ± 0.2V or GND ± 0.2V. TTL Inputs are either V|i_ or V|h- 

6. Sampled, but not 100% tested. Guaranteed by design. 
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5.4 DC Characteristics 


Vcc = 5.0V ± 0.5V, 5.0V ± 0.25V, T A = 0°C to + 70°C 


Symbol 

Parameter 



Typ 

Max 

Units 

Test Conditions 

lu 

Input Load Current 

1 



± 1 

fiA 

Vcc = Vcc Max 
V|N = VccorGND 

Ilo 

Output Leakage 
Current 




± 10 

fiA 

v cc = v cc Max 
VoUT = Vcc or GND 

lees 

Vcc Standby 
Current 

1,5 

1 

70 

130 

jllA 

Vcc - Vcc Max 

CE 0 #, CEi#, RP# = V C c ± 0.2V 
BYTE#, WP# = V C c ± 0.2V 
or GND ± 0.2V 

■ 

2 

■ 

mA 

Vcc = Vcc Max 
CE 0 #,CE 1 #,RP# = V| H 
BYTE#, WP# = V| H orV| L 

ICCD 

Vcc De ©P Power- 
Down Current 

1 

■ 

2 

5 

JLtA 

RP# = GND ± 0.2V 
BYTE# = V C c ± 0.2V or 
GND ± 0.2V 

ICCR 1 

Vcc Read Current 

1,4,5 


75 

95 

mA 

Vcc = Vcc Max, 

CMOS: CE 0 #, CEi# = GND 
± 0.2V 

BYTE# = GND ± 0.2V 

or V C c ± 0.2V 

Inputs = GND ± 0.2V or 
Vcc ± 0.2V 

TTL:CE 0 #,CE 1 # = V,l, 
BYTE# = V| L orV| H 
Inputs = V|i_orV|H, 
f = 10 MHz, I 0 UT = 0 mA 

ICCR 2 

Vcc Read Current 

1,4. 

5,6 


45 

55 

mA 

Vcc = Vcc Max, 
CMOS:CE 0 #,CE 1 # = GND 
± 0.2V 

BYTE# = GND ± 0.2V 
or Vcc ± 0.2V 

Inputs = GND ± 0.2V or 
V CC ± 0.2V 

TTL: CEq#, CEi * = V|L, 
BYTE# = V| L orV| H 
Inputs = V|LorV| H , 
f = 5 MHz, Iqut = 0 mA 
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5.4 DC Characteristics (Continued) 


Vcc = 5.0V ± 0.5V, 5.0V ± 0.25V, T A = 0°C to +70°C 


Symbol 

Parameter 



Typ 

Max 

Units 

Test Conditions 

>ccw 

Vcc Write Current 

1,6 


25 

35 

mA 

Word/Byte in Progress 
Vpp = 12.0V ± 5% 





■ 

40 

mA 

Word/Byte in Progress 
Vpp = 5.0V ± 10% 

IcCE 

Vcc Block Erase 
Current 

1,6 


H 

25 

mA 

Block Erase in Progress 
Vpp = 12.0V ± 5% 





20 


mA 

Block Erase in Progress 
Vpp = 5.0V ± 10% 

ICCES 

Vcc Erase 
Suspend Current 

1,2 


2 

■ 

mA 

CEq#, CE-j # = V|h 
Block Erase Suspended 

Ipps 

Vpp Standby/Read 

1 


± 1 

injjm 

/ jlA 

Vpp ^ Vcc 

IpPR 

Current 



30 

50 

jjlA 

Vpp > Vcc 

•PPD 

Vpp Deep Power- 
Down Current 

1 


0.2 

H 


RP# = GND ± 0.2V 

IppW 

Vpp Write Current 

1,6 

1 

7 

H 


Vpp = 12.0V ± 5% 
Word/Byte Write in Progress 





17 


mA 

Vpp = 5.0V ± 10% 
Word/Byte Write in Progress 

•PPE 

Vpp Block Erase 
Current 

1,6 


5 


mA 

Vpp = 12.0V ± 5% 
Block Erase in Progress 




■ 

16 

1 

mA 

Vpp = 5.0V ± 10% 
Block Erase in Progress 

•PPES 

Vpp Erase 
Suspend Current 

1 


30 



Vpp = Vppm or VppH 2 , 
Block Erase Suspended 

V|L 

Input Low Voltage 

6 

-0.5 


0.8 

V 


V|H 

Input High Voltage 

6 

2.0 


Vcc 
+ 0.5 

V 
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5.4 DC Characteristics (Continued) 


Vcc = 5.0V ± 0.5V, 5.0V ± 0.25V, T A = 0°C to + 70°C 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

VOL 

Output Low 
Voltage 

6 



0.45 

V 

Vcc = Vcc Mi n 
Iol = 5.8 mA 

VOH 1 

Output High 
Voltage 

■■ 

0.85 

Vcc 



V 

Ioh = “2.5 mA 
Vcc = Vcc Min 

VOH 2 


Hi 

Vcc 

-0.4 




lOH “ “ 1 00 ]ulA 
Vcc = Vcc Min 

VppLK 

Vpp Write/ Erase 
Lock Voltage 


0.0 


1.5 

■a 


VppHI 

Vpp during 
Write/ Erase 
Operations 


■ 

5.0 

5.5 

V 


VppH2 

Vpp during 
Write/ Erase 
Operations 


11.4 

12.0 

12.6 

V 


Vlko 

Vcc Write/ Erase 
Lock Voltage 


2.0 







NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, Vpp = 12.0V or 5.0V, T = 25°C. These 
currents are valid for all product versions (package and speeds). 

2. Icces specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum 
of Icces and Iccr- 

3. Block Erases, Word/Byte Writes and Lock Block operations are inhibited when Vpp ^ Vpplk and not guaranteed in the 
ranges between VppLK(max) and Vppm(min), between Vppm(max) and VppH 2 (min) and above VppH 2 (max). 

4. Automatic Power Saving (APS) reduces Iccr to 1 mA typical in Static operation. 

5. CMOS Inputs are either Vcc ± 0.2V or GND ± 0.2V. TTL Inputs are either Vil or Vm- 

6. Sampled, not 100% tested. Guaranteed by design. 
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5.5 Timing Nomenclature 

All 3.3V system timings are measured from where signals cross 1 .5V. 

For 5.0V systems use the standard JEDEC cross point definitions (standard testing) or from where signals 
cross 1 .5V (high speed testing). 

Each timing parameter consists of 5 characters. Some common examples are defined below: 
tcE tELQV time(t) from CE# (E) going low (L) to the outputs (Q) becoming valid (V) 
toE tGLQV time(t) from OE # (G) going low (L) to the outputs (Q) becoming valid (V) 
tACC tAVQV time(t) from address (A) valid (V) to the outputs (Q) becoming valid (V) 
tAS Uvwh time(t) from address (A) valid (V) to WE# (W) going high (H) 

tDH twHDX time(t) from WE# (W) going high (H) to when the data (D) can become undefined (X) 



Pin Characters 


Pin States 

A 

Address Inputs 

H 

High 

D 

Data Inputs 

L 

Low 

Q 

Data Outputs 

V 

Valid 

E 

CE# (Chip Enable) 

X 

Driven, but Not Necessarily Valid 

F 

BYTE# (Byte Enable) 

z 

High Impedance 

G 

OE# (Output Enable) 



W 

WE# (Write Enable) 



P 

RP# (Deep Power-Down Pin) 



R 

RY/BY# (Ready Busy) 



V 

Any Voltage Level 



5V 

Vcc at 4.5V Minimum 



3V 

Vcc at 3.0V Minimum 





MWmGS 0MF®KKMY0©K] 


3-333 



28F016SV FlashFileTM Memory 



5.6 AC Characteristics — Read Only Operations^) 

Vcc = 3.3V ± 0.3V, T a = 0°c to + 70°C 


VersionsC 5 ) 

28F016SV-075 


pm 

Sym 

Parameter 



Max 



l AVAV 

Read Cycle Time 


75 


120 


m 

wsm 

Address to Output Delay 



75 


120 

mi 


CE# to Output Delay 

2,8 


75 


120 

BPI 


RP# High to Output Delay 



480 


620 



OE# to Output Delay 

2 


40 


45 

ns 

tELQX 

CE# to Output in Low Z 

3,8 

0 


0 


ns 


CE# to Output in High Z 



30 



ns 


OE# to Output in Low Z 

3 

0 


0 


IQH 

B5Ri 

OE# to Output in High Z 

3 


30 


30 

119 

mm 

Output Hold from Address, 
CE# orOE# Change, 
Whichever Occurs First 

3,8 

0 


0 


ns 

B9!BW 

BYTE# to Output Delay 

3 


75 


120 

ns 

tFLQZ 

BYTE# Low to Output 
in High Z 

3 


30 


30 

ns 

<ELFL 

*ELFH 

CE# Low to BYTE# 
High or Low 

3,8 


5 


5 

ns 


Extended Status Register Reads 


Sill 

Address Setup to CE# 
Going Low 

3, 4, 8, 9 

0 


0 


ns 

^3 

Address Setup to OE# 
Going Low 

3,4,9 

0 


0 


ns 
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5.6 AC Characteristics— Read Only Operations^) (Continued) 
Vcc = 5.0V ± 0.5V, 5.0V ± 0.25V, T A = 0°C to +70°C 


Versions( 5 ) 

Vcc ± 5% 

28F016SV-065(6) 

28F0 1 6SV-070( 6 ) 


Units 

v cc ±io% 


28F016SV-070(7) 

28F0 1 6SV-080(7) 

Sym 

Parameter 

Notes 

Min 


Min 

Max 



>* 

1 

Read Cycle Time 


65 


70 


80 



> 

o 

< 

Address to 
Output Delay 







80 

ns 

*ELQV 

CE# to Output Delay 

2,8 




70 


80 


tpHQV 

RP# to Output Delay 





400(6) 

300(7) 


480 

ns 

*GLQV 

OE# to Output Delay 

2 






35 

ns 



3,8 

0 


0 


0 


ns 

N 

O 

X 

Jli 

CE# to Output in High Z 

3,8 


25 






*GLQX 

OE# to Output in Low Z 

3 

0 


0 


0 


[ppl 

*GHQZ 

OE# to Output in High Z 

3 




25 




*OH 

Output Hold from 
Address, CE# orOE# 
Change, Whichever 
Occurs First 

3,8 

0 


0 


0 

■ 

■ 


BYTE# to Output Delay 

3 


65 


70 


80 

ns 

*FLQZ 

BYTE# Low to Output in 
High Z 

3 


25 


25 


30 

ns 

PS 

IBIaH 

CE# Low to BYTE# 
High or Low 

3,8 




5 


5 

ns 


Extended Status Register Reads 


Uvel 

Address Setup to CE# 
Going Low 

3, 4, 8, 9 

0 


0 


0 


ns 

tAVGL 

Address Setup to OE# 
Going Low 

3,4,9 

0 


0 


0 


ns 




3-335 




















































28F016SV FlashFileTM Memory 


NOTES: 

1. See AC Input/Output Reference Waveforms for timing measurements, Figures 7 and 8. 

2. OE# may be delayed up to tELQV _t GLQV after the falling edge of CE#, without impacting tELQV- 

3. Sampled, not 100% tested. Guaranteed by design 

4. This timing parameter is used to latch the correct BSR data onto the outputs. 

5. Device speeds are defined as: 

65/70 ns at Vcc = 5.0V equivalent to 
75 ns at V C c = 3.3V 

70/80 ns at Vcc = 5.0V equivalent to 
120 ns at V CC = 3.3V 

6. See the high speed AC Input/Output Reference Waveforms and AC Testing Load Circuit. 

7. See the standard AC Input/Output Reference Waveforms and AC Testing Load Circuit. 

8. CEx# is defined as the latter of CEo# or CEi # going low, or the first of CEo# or CEi # going high. 

9. The address setup requirement for Extended Status Register reads must only be met referenced to the falling edge of the 
last control signal to become active (CEo#, CEi # or OE#). For example, if CEq# and CEi # are activated prior to OE# 
for an Extended Status Register read, specification tAVGL must be met. On the other hand, if either CEo# or CEi * (or 
both) are activated after OE#, specification tAVEL must be referenced. 
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Figure 13. BYTE# Timing Waveforms 
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5.7 Power-Up and Reset Timings 


POWER-UP 

RP* 





3.3V 

\ 

/ 

(P) 


5.0 V 

3.0V 

V cc ov 


^ 

S== ^ , 

t 5VPH 










(3 V, 5 V) 

3VPH 





ADDRESS \MMAA 

(A) AaAAaaaAaaAaaaa/ 

X) 

[ 

VALID 

— WWWWWSA 


Ai&i 

r VALID 


. 



*AVQV 





4 t AVQV 

DATA 



J 

1 

' VALID 

"S 



y 

VALID 

(Q) 




3. 3V outputs 

j 



\ 

5.0V OUTPUTS 



◄- 

* 




4 - 

-* 




t PHQV 




t PHQV 








1 


290528-14 


Figure 14. Vcc Power-Up and RP# Reset Waveforms 


Symbol 

Parameter 

Notes 



Units 

*PL5V 

RP# Low to Vcc at 4.5V (Minimum) 

2 

0 


jutS 

tpL3V 

RP# Low to Vcc at 3.0V (Minimum) 

2 

0 


JLlS 

tAVQV 

Address Valid to Data Valid for Vcc = 5.0V ± 10% 

3 


70 

ns 

tPHQV 

RP# High to Data Valid for V C c = 5.0V + 10% 

3 


300 

ns 

t5VPH 

Vcc at 4.5V (Minimum) to RP# High 

1 

2 


fJLS 

t3VPH 

Vcc at 3.0V (Minimum) to RP# High 

1 

2 


juts 


NOTES: 

CEo#, CEi # and OE# are switched low after Power-Up. 

1. The tsvpH and/or t 3 VPH times must be strictly followed to guarantee all other read and write specifications for the 
28F016SV. 

2. The power supply may start to switch concurrently with RP# going low. 

3. The address access time and RP# high to data valid time are shown for 5.0V Vcc operation of the 28F016SV-070 
(Standard Test Configuration). Refer to the AC Characteristics-Read Only Operations for 3.3V Vcc and 5.0V Vcc (High 
Speed Test Configuration) values. 
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5.8 AC Characteristics for WE# — Controlled Command Write Operations^) 

Vcc = 3.3V ± 0.3V, T a = 0°C to + 70°C 


PH ? 


Versions 


Parameter 

Write Cycle Time 

Vpp Setup to WE# Going High 


Read Recovery before Write 


WE# High to RY/BY# Going Low 


RP# Hold from Valid Status 
Register (CSR, GSR, BSR) Data 
and RY/BY# High 


RP# High Recovery to WE# 
Going Low 


Write Recovery before Read 


Vpp Hold from Valid Status Register 
(CSR, GSR, BSR) Data and 
RY/BY# High 


Duration of Word/Byte 
Write Operation 


twHQV 2 Duration of Block Erase Operation 



twHQV 1 


28F016SV-075 


28F016SV-120 



RP# Setup to CE# Going Low 

%LWL 

CE# Setup to WE# Going Low 

tAVWH 

Address Setup to WE# Going High 

fDVWH 

Data Setup to WE# Going High 


WE# Pulse Width 

twHDX 

Data Hold from WE# High 

tWHAX 

Address Hold from WE# High 

tWHEH 

CE# Hold from WE# High 

tWHWL 

WE# Pulse Width High 
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5.8 AC Characteristics for WE# — Controlled Command Write Operations^) 

(Continued) 

V C c = 5.0V ± 0.5V, 5.0V ± 0.25V, T A = 0°C to +70°C 
















































28F016SV FlashFileTM Memory 

5.8 AC Characteristics for WE# — Controlled Command Write Operations^) 

(Continued) 


V C c = 5.0V ± 0.5V, 5.0V ± 0.25V, T A = 0°C to +70°C 


Versions^) 

Vcc ± 5% 

28F0 1 6SV-065(®) 

28F016SV-070(9) 


Units 

v cc ± io% 


28F016SV-07000) 

28F016SV-08000) 

Sym 

Parameter 

Notes 

Min 

Typ 


UTi'IM 

Typ 





tpHWL 

RP# High 
Recovery to 
WE# Going Low 

3 

0.300 


i 


■ 

i 

■ 

1 

1 


tWHGL 

Write Recovery 
before Read 

3 

55 


■ 

60 



65 

■ 

■ 


tQWL 

Vpp Hold from 
Valid Status 
Register (CSR, 
GSR, BSR) 
Data and 
RY/BY# High 


i 


I 


1 


0 


i 

fJLS 

> 

0 
X 

1 

Duration of 
Word/Byte Write 
Operation 






6 

TBD 

4.5 

6 

TBD 

JUS 

tWHQv2 

Duration of 
Block Erase 
Operation 

Hi 

Jjjj 

0.6 

10 



10 

0.3 

0.6 

10 

sec 



NOTES: 

1. Read timings during write and erase are the same as for normal read. 

2. Refer to command definition tables for valid address and data values. 

3. Sampled, not 100% tested. Guaranteed by design. 

4. Write/Erase durations are measured to valid Status Register (CSR) Data. Vpp = 12.0V ± 0.6V. 

5. Word/Byte Write operations are typically performed within 1 Programming Pulse. 

6. Address and Data are latched on the rising edge of WE# for all Command Write operations. 

7. CEx# is defined as the latter of CEq# or CEi # going low, or the first of CEq# or CEi # going high. 

8. Device speeds are defined as: 

65/70 ns at Vcc = 5.0V equivalent to 
75 ns at V C c = 3.3V 

70/80 ns at Vcc — 5.0V equivalent to 
120 ns at V C c = 3.3V 

9. See the high speed AC Input/Output Reference Waveforms and AC Testing Load Circuit. 

10. See the standard AC Input/Output Reference Waveforms and AC Testing Load Circuit. 
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28F016SV FlashFileTM Memory 


WRITE DATA-WRITE OR WRjTEVAUD ADDRESS AUT0MATED DATA-WRITE WRITE READ EXTENDED 

ERASE SETUP COMMAND E^ECO^IRMMMMA^D OR ERASE DELAY REGISTER COMMAND 



ADDRESSES (A) 
NOTE 2 V Il/ 



N0TES: 

1. This address string depicts Data Write/Erase cycles with corresponding verification via ESRD. 

2. This address string depicts Data Write/ Erase cycles with corresponding verification via CSRD. 

3. This cycle is invalid when using CSRD for verification during Data Write/Erase operations. 

4. CEx# is defined as the latter of CEq# or CEi # going low or the first of CEo# or CE-j # going high. 

5. RP# low transition is only to show tRUPLl not valid for above Read and Write cycles. 

6. Vpp voltage during Write/Erase operations valid at both 12.0V and 5.0V. 

7. Vpp voltage equal to or below Vpp[_K provides complete flash memory array protection. 

Figure 15. AC Waveforms for Command Write Operations 
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5.9 AC Characteristics for CE#— Controlled Command Write Operations^) 

Vcc = 3.3V ± 0.3V, T a = 0°c +70°C 



Versions 

28F016SV-075 

Sym 

Parameter 

Notes 

Min 



tAVAV 

Write Cycle Time 


75 



tyPEH 

Vpp Setup to CE# Going High 

ESR 

100 



tpHWL 

RP# Setup to WE# Going Low 

KB 

480 



tWLEL 

WE# Setup to CE# Going Low 

mm 

0 



*AVEH 

Address Setup to CE# Going High 





tDVEH 

Data Setup to CE# Going High 

KB 

60 



tELEH 

CE # Pulse Width 

7 

60 



tEHDX 

Data Hold from CE# High 

mm 

■I 



tEHAX 

Address Hold from CE# High 

mm 

mm 




WE hold from CE# High 

3 

5 



tEHEL 

CE# Pulse Width High 

7 




*GHEL 

Read Recovery before Write 

3 

0 



*EHRL 

CE# High to RY/BY# Going Low 

mm 



100 

tRHPL 

RP# Hold from Valid Status Register 
(CSR, GSR, BSR) Data and 
RY/BY# High 



■ 

■ 

tpHEL 

RP# High Recovery to CE# 
Going Low 

3,7 

0.480 



tEHGL 

Write Recovery before Read 

3 




tQWL 

Vpp Hold from Valid Status Register 
(CSR, GSR, BSR) Data and 
RY/BY# High 

■ 

i 

■ 

■ 

tEHQV 1 

Duration of Word/Byte 
Write Operation 

m 

H 

1 

TBD 

*EHQV 2 

Duration of Block Erase Operation 

3,4 






10 

10 



95 




5 


0.3 
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5.9 AC Characteristics for CE# — Controlled Command Write Operations^) 

(Continued) 

V C c = 5.0V ± 0.5V, 5.0V ± 0.25V, T A = 0° to + 70°C 


Versions( 8 ) 


V C c ± 5% 28F016SV-065(9) 28F016SV-070O) 


V CC ± 10% 


28F0 1 6SV-070(1 °) 28F016SV-080OO) Units 


Sym 

Parameter 

Notes 

Min 

*AVAV 

Write Cycle 
Time 


65 

tyPEH 

Vpp Setup to 
CE# Going High 

3,7 

100 

tpHWL 

RP# Setup to 
WE# Going Low 

3 

300 


Iehax Address Hold 
from CE# High 


t£HWH WE Hold from 
CE# High 


CE# Pulse 
Width High 


Read Recovery 
before Write 


tEHRL CE# High to 

RY/BY# Going 
Low 

RP# Hold from 
Valid Status 
Register (CSR, 
GSR, BSR) 
Data and 
RY/BY# High 



rAiBWAi^[(aiiiiraig®]giiCTrA^ii[®]rij 










































28F016SV FlashFileTM Memory 

5.9 AC Characteristics for CE# — Controlled Command Write Operations^) 

(Continued) 


V C c = 5.0V ± 0.5V, 5.0V ± 0.25V, T A = 0° to +70°C 


Versions^) 

Vcc ± 5% 

28F0 1 6SV-065( 9 ) 

28F016SV-070( 9 ) 



v cc ± io% 


28F016SV-07000) 

28F016SV-08000) 






1223 


Typ 



Typ 

Max 


RP# High 
Recovery to 
CE# Going Low 

m 

0.300 

1 

■ 

1(9) 

0.300( 10 > 

1 

i 


■ 

■ 


tEHGL 

Write Recovery 
before Read 

3 

55 

■ 

■ 

60 

■ 

■ 

65 


■ 

Q 

tQVVL 

Vpp Hold from 
Valid Status 
Register (CSR, 
GSR, BSR) 

Data at RY/BY# 
High 

3 

0 

i 


0 

1 


0 


i 

ju,S 

O 

X 

JLU 

Duration of 
Word/Byte Write 
Operation 

3,4,5 

4.5 

6 

TBD 

■ 

6 

TBD 

4.5 

6 

TBD 

JULS 

*EHQV 2 

Duration of 
Block Erase 
Operation 

m 

0.3 

0.6 

10 

0.3 

0.6 

10 

0.3 

0.6 

10 

sec 



NOTES: 

1. Read timings during write and erase are the same as for normal read. 

2. Refer to command definition tables for valid address and data values. 

3. Sampled, not 100% tested. Guaranteed by design. 

4. Write/ Erase durations are measured to valid Status Data. Vpp = 12.0V ± 0.6V. 

5. Word/Byte Write operations are typically performed with 1 Programming Pulse. 

6. Address and Data are latched on the rising edge of CE# for all Command Write Operations. 

7. CEx# is defined as the latter of CEo# or CEi # going low, or the first of CEo# or CEi # going high. 

8. Device speeds are defined as: 

65/70 ns at Vqc = 5.0V equivalent to 
75 ns at V C c = 3.3V 

70/80 ns at Vqc = 5.0V equivalent to 
1 20 ns at V cc = 3.3V 

9. See the high speed AC Input/Output Reference Waveforms and AC Testing Load Circuit. 

10. See the standard AC Input/Output Reference Waveforms and AC Testing Load Circuit. 
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28F016SV FlashFileTM Memory 



DEEP WRITE DATA-WRITE OR 

POWER-DOWN ERASE SETUP COMMAND 


WRITE VALID ADDRESS 
& DATA (DATA-WRITE) OR 
ERASE CONFIRM COMMAND 


AUTOMATED DATA-WRITE 
OR ERASE DELAY 


WRITE READ EXTENDED 
REGISTER COMMAND 


READ EXTENDED 
STATUS REGISTER DATA 



290528-16 


NOTES: 

1. This address string depicts Data Write/Erase cycles with corresponding verification via ESRD. 

2. This address string depicts Data Write/Erase cycles with corresponding verification via CSRD. 

3. This cycle is invalid when using CSRD for verification during Data Write/Erase operations. 

4. CEx# is defined as the latter of CEo# or CE-j # going low or the first of CEo# or CEi # going high. 

5. RP# low transition is only to show tRHPU not valid for above Read and Write cycles. 

6. Vpp voltage during Write/Erase operations valid at both 12.0V and 5.0V. 

7. Vpp voltage equal to or below Vpplk provides complete flash memory array protection. 


Figure 16. Alternate AC Waveforms for Command Write Operations 
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5.10 AC Characteristics for WE#— Controlled Page Buffer Write Operations^) 

Vcc = 3.3V ± 0.3V, T a = 0°C to +70°C 


Versions 

28F016SV-075 

28F016SV-120 

Units 

Sym 

Parameter 

Notes 




Min 

Typ 

Max 

*AVWL 

Address Setup to WE# Going Low 

2 

0 



0 



ns 


V C c = 5.0V ± 0.5V, 5.0V + 0.25V, T A = 0°C to + 70°C 


Versions^) 

V C C ± 5% 

28F016SV-065O) 

28F016SV-070<9) 


Units 

Vcc ± 10% 


28F016SV-07000) 

28F016SV-080O°) 

Sym 

Parameter 

Notes 

Min 

Typ 

Max 

Min 

Typ 

Max 

Min 

Typ 

Max 

*AVWL 

Address Setup 
to WE# Going 
Low 

2 

0 

■ 

■ 

0 

■ 

■ 

0 



ns 


NOTES: 

1. All other specifications for WE#Controlled Write Operations can be found in Section 5.8. 

2. Address must be valid during the entire WE# low pulse. 

3. Device speeds are defined as: 

65/70 ns at Vcc = 5.0V equivalent to 
75 ns at Vcc = 3.3V 

70/80 ns at Vcc = 5.0V equivalent to 
120 ns at V C c = 3.3V 

4. See the high speed AC Input/Output Reference Waveforms and AC Testing Load Circuit. 

5. See the standard AC Input/Output Reference Waveforms and AC Testing Load Circuit. 


3-348 


APM&K)©! 0(M[P®[f3G!MYD®M 


































28F016SV FlashFileTM Memory 


iny 



Figure 17. WE# — Controlled Page Buffer Write Timing Waveforms 
(Loading Data to the Page Buffer) 
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5.1 1 AC Characteristics for CE# — Controlled Page Buffer Write Operations(l) 

Vcc = 3.3V ± 0.3v; T a = 0°C to + 70°C 


Versions 

28F016SV-075 


Units 

Sym 

Parameter 


Min 

Typ 

Max 


Typ 

Max 

*AVEL 

Address Setup to CE# 
Going Low 

m 

0 


■ 

0 



ns 


V C c = 5.0V ± 0.5V, 5.0V ± 0.25V, T A = 0°C to + 70°C 


Versions^) 

Vcc ± 5% 

28F0 1 6SV-065<®) 

28F016SV-070(9) 


Units 

v cc ± io% 


28F016SV-07000) 

28F016SV-080O0) 

Sym 

Parameter 


Min 



Min 



Min 

Typ 

Max 

tAVEL 

Address Setup 
toCE# Going 
Low 

2,3 

0 

1 

1 

0 

1 

i 

0 

■ 

■ 

ns 


NOTES: 

1. All other specifications for CE#— Controlled Write Operations can be found in Section 5.9. 

2. Address must be valid during the entire CE# low pulse. 

3. CEx# is defined as the latter of CEo# or CE-| # going low, or the first of CEq# or CE-j # going high. 

4. Device speeds are defined as: 

65/70 ns at Vcc = 5.0V equivalent to 
75 ns at V C c = 3.3V 

70/80 ns at Vcc = 5.0V equivalent to 
120 ns at V C c = 3.3V 

5. See the high speed AC Input/Output Reference Waveforms and AC Testing Load Circuit. 

6. See the standard AC Input/Output Reference Waveforms and AC Testing Load Circuit. 
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Figure 18. CE#— Controlled Page Buffer Write Timing Waveforms 
(Loading Data to the Page Buffer) 
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5.12 Erase and Word/Byte Write Performance^- 5 ) 

Vcc = 3.3V ± 0.3V, Vpp = 5.0V ± 0.5V, T A = 0°C to +70°C 



V C c = 3.3V ± 0.3V, Vpp = 12.0V ± 0.6V, T A = 0°C to + 70°C 


Sym 

Parameter 

Notes 

Min 



Units 

Test Conditions 


Page Buffer Byte 
Write Time 

2 

TBD 






Page Buffer Word 
Write Time 

2 

TBD 

m 

TBD 

jUlS 


tWHRH 1 

Word/Byte Write Time 

2 

5 

9 

TBD 

fJL S 


tWHRH 2 

Block Write Time 

2 

TBD 

0.6 

2.1 

sec 

Byte Write Mode 

tWHRH 3 

Block Write Time 

2 

TBD 

0.3 

1.0 

sec 

Word Write Mode 


Block Erase Time 

2 

0.3 

0.8 

10 

sec 



Full Chip Erase Time 

2 


25.6 




■ 

Time from Erase 
Suspend Command to 
WSM Ready 

4 

TBD 

10 



- 
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5.12 Erase and Word/By te Write Performance* 3 ^) (Continued) 
Vcc = 5.0V ± 0.5V, 5.0V ± 0.25V, V PP = 5.0V ± 0.5V, T A = 0°C to +70°C 


Sym 

Parameter 

Notes 

Min 

TypO) 

Max 

Units 

Test Conditions 


Page Buffer Byte 
Write Time 

2 

TBD 

6.0 

TBD 

JULS 



Page Buffer Word 
Write Time 

2 

TBD 

12.1 

TBD 

fJLS 


tWHRHlA 

Byte Write Time 

2 

TBD 

11 

TBD 

fXS 


tWHRH 18 

Word Write Time 

2 

TBD 

16 

TBD 

JLLS 


tWHRH 2 

Block Write Time 

2 

TBD 

0.8 

TBD 

sec 

Byte Write Mode 

tWHRH 3 

Block Write Time 

2 

TBD 

0.6 


sec 

Word Write Mode 


Block Erase Time 

2 

isim 

1.0 

Ea 

sec 



Full Chip Erase Time 

2 


32.0 

EH 

sec 



Time from Erase 
Suspend Command to 
WSM Ready 

4 

^^jjj 

10 

TBD 

JLtS 



V C c = 5.0V ± 0.5V, 5.0V ± 0.25V, V PP = 12.0V ± 0.6V, T A = 0°C to + 70°C 


Sym 

Parameter 

Notes 

Min 



Units 

Test Conditions 


Page Buffer Byte 
Write Time 

2 

TBD 

M 

fl 

JLLS 



Page Buffer Word 
Write Time 

2 

TBD 

m 




tWHRH 1 

Word/Byte Write Time 


mm 

6 




tWHRH 2 

Block Write Time 



0.4 



Byte Write Mode 

tWHRH 3 

Block Write Time 

2 

TBD 

0.2 





Block Erase Time 

2 


0.6 


EH 



Full Chip Erase Time 

2 







Time from Erase 
Suspend Command to 
WSM Ready 

4 

TBD 

10 





NOTES: 

1 . 25°C, and nominal voltages. 

2. Excludes system-level overhead. 

3. These performance numbers are valid for all speed versions. 

4. Specification applies to interrupt latency for Single Block Erase. Suspend latency for Erase All Unlocked Block operation 
extends the latency time to 140 jms (typical). 

5. Sampled, but not 100% tested. Guaranteed by design. 
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28F016SV FlashFileTM Memory 

DEVICE NOMENCLATURE AND ORDERING INFORMATION 


M 


CO 

F 

0 

1 

CO 

S 

V 

- 

0 

CO 

5 


DA = COMMERCIAL TEMPERATURE ACCESS SPEED (ns) 

56-LEAD SSOP 

E = COMMERCIAL TEMPERATURE 65 ns (5V. 30 pF), 70 ns (5V), 75 ns (3.3V) 

56-LEAD TSOP 70 ns (5V, 30 pF), 80 ns (5V), 1 20 ns (3.3V) 

290528-21 


Option 

Order Code 

Valid Combinations 

V C c = 3.3V ± 0.3V, 
50 pF load, 

1.5V I/O Levels(i) 

V CC = 5.0V ± 10%, 
100 pF load 
TTL I/O LevelsO) 

Vcc = 5.0V ± 5%, 
30 pF load 
1.5V I/O LevelsO) 

1 

E28F016SV 070 

E28F016SV-120 

E28F016SV-080 

E28F016SV-070 

2 

E28F016SV 065 

E28F016SV-075 

E28F016SV-070 

E28F016SV-065 

3 

DA28F016SV 070 

DA28F01 6SV-1 20 

DA28F01 6SV-080 

DA28F01 6SV-070 

4 

DA28F016SV 065 

DA28F01 6SV-075 

DA28F01 6SV-070 

DA28F01 6SV-065 


NOTE: 

1. See Section 5.2 for Transient Input/Output Reference Waveforms and Testing Load Circuits. 
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ADDITIONAL INFOR 

MATION 

Order Number 

Document/Tool 

297372 

1 6-Mbit Flash Product Family User’s Manual, 
28F01 6SA/28F01 6SV/28F01 6SXS/28F01 6XD 

292092 

AP-357 “Power Supply Solutions for Flash Memory” 

292123 

AP-374 “Flash Memory Write Protection Techniques” 

292124 

AP-375 “Upgrade Considerations from the 28F008SA to the 28F016SA” 

292126 

AP-377 “16-Mbit Flash Product Family Software Drivers, 
28F01 6SA/28F01 6SV/28F01 6SXS/28F01 6XD” 

292127 

AP-378 “System Optimization Using the Enhanced Features of the 28F016SA” 

292144 

AP-393 “28F016SV Compatibility with 28F016SA” 

294016 

ER-33 “ETOXtm Flash Memory Technology — Insight to Intel’s Fourth 
Generation Process Innovation” 

290490 

DD28F032SA Datasheet 

290435 | 

28F008SA Datasheet 

297508 

FlashBuilder Utility 

Contact Intel/Distribution 
Sales Offices 

28F016SV iBIS Models 

Contact Intel/Distribution 
Sales Offices 

28F016SV VHDL/Verilog Models 

Contact Intel/Distribution 
Sales Offices 

28F016SV Timing Designer Library Files 

Contact Intel/Distribution 
Sales Offices 

28F016SV Oread and ViewLogic Schematic Symbol 
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DATASHEET REVISION HISTORY 


Number 

Description 

001 

Original Version 

002 

Added 28F01 6SV-065/-070 at 5.0V V C c and 28F01 6SV-075 at 3.3V V C c- 

Improved burst write transfer rate to 30.8 MB/sec. 

Added 56-Lead SSOP Type 1 packaging information. 

Changed Vppy< from 2.0V to 1 .5V. 

Increased Iccr at 5.0V Vcc and 3.3V Vcc- 
Iccri from 30 mA (typ)/35 mA (max) to 40 mA (typ)/50 mA (max) - V<x = 3.3V 

lccR2 from 1 5 mA (typ)/20 mA (max) to 20 mA (typ)/30 mA (max) - Vcc = 3.3V 

Iccri from 50 mA (typ)/60 mA (max) to 75 mA (typ)/95 mA (max) - Vcc “ 5.0V 

lccR2 from 30 mA (typ)/35 mA (max) to 45 mA (typ)/55 mA (max) - Vcc = 5.0V 

Moved AC Characteristics for Extended Register Reads into separate table. 

Increased Vpp MAX from 13V to 14V. 

Added Erase Suspend Command Latency times to Section 5.12 

Modified Device Nomenclature Section to include SSOP package option and Ordering 

Information 
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28F016SA 

16 MBIT (1 MBIT x 16, 2 MBIT x 8) 
FlashFile™ MEMORY 


User-Selectable 3.3V or 5V Vcc 
User-Configurable x8 or x16 Operation 
70 ns Maximum Access Time 
28.6 MB/sec Burst Write Transfer Rate 

1 Million Typical Erase Cycles per 
Block 

56-Lead, 1.2mm x 14mm x 20mm TSOP 
Package 

56-Lead, 1.8mm x 16mm x 23.7mm 
SSOP Package 


Revolutionary Architecture 

— Pipelined Command Execution 

— Write During Erase 

— Command Superset of Intel 
28F008SA 

1 mA Typical Ice in Static Mode 
1 jllA Typical Deep Power-Down 
32 Independently Lockable Blocks 

State-of-the-Art 0.6 ju,m ETOXtm iv 
Flash Technology 


Intel’s 28F016SA 16-Mbit FlashFileTM memory is a revolutionary architecture which is the ideal choice for 
designing embedded direct-execute code and mass storage data/file flash memory systems. With innovative 
capabilities, low-power, extended temperature operation and high read/write performance, the 28F016SA 
enables the design of truly mobile, high-performance communications and computing products. 

The 28F016SA is the highest density, highest performance non-volatile read/write solution for solid-state 
storage applications. Its symmetrically blocked architecture (100% compatible with the 28F008SA 8-Mbit 
FlashFile memory), extended cycling, extended temperature operation, flexible Vcc. fast write and read per- 
formance and selective block locking provide highly flexible memory components suitable for resident flash 
arrays, high-density memory cards and PCMCIA-ATA flash drives. The 28F016SA dual read voltage enables 
the design of memory cards which can interchangeably be read/written in 3.3V and 5.0V systems. Its x8/x16 
architecture allows optimization of the memory-to-processor interface. Its high read performance and flexible 
block locking enable both storage and execution of operating systems and application software. Manufactured 
on Intel’s 0.6 jam ETOXtm iv process technology, the 28F016SA is the most cost effective, highest density 
monolithic 3.3V FlashFile memory. 
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28F016SA 

16 Mbit (1 Mbit x 16, 2 Mbit x 8) 
Flashfile™ Memory 
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1.0 INTRODUCTION 

The documentation of the Intel 28F016SA memory 
device includes this data sheet, a detailed user’s 
manual, and a number of application notes, all of 
which are referenced at the end of this data sheet. 

The data sheet is intended to give an overview of 
the chip feature-set and of the operating AC/ DC 
specifications. The 28F016SA User’s Manual pro- 
vides complete descriptions of the user modes, sys- 
tem interface examples and detailed descriptions of 
all principles of operation. It also contains the full list 
of software algorithm flowcharts, and a brief section 
on compatibility with Intel 28F008SA. 


1.1 Product Overview 

The 28F016SA is a high performance 16 Mbit 
(16,777,216 bit) block erasable non-volatile random 
access memory organized as either 1 Mword x 1 6 or 
2 Mbyte x 8. The 28F016SA includes thirty-two 64 
KB (65,536) blocks or thirty-two 32-KW (32,768) 
blocks. A chip memory map is shown in Figure 3. 

The implementation of a new architecture, with 
many enhanced features, will improve the device op- 
erating characteristics and results in greater product 
reliability and ease of use. 

Among the significant enhancements on the 
28F016SA: 

® 3.3V Low Power Capability 

• Improved Write Performance 

• Dedicated Block Write/Erase Protection 

A 3/5# input pin reconfigures the device internally 
for optimized 3.3V or 5.0V read/write operation. 

The 28F016SA is available in both a 56-lead, 1.2mm 
thick, 14mm x 20mm TSOP type 1 package or a 
56-lead, 1.8mm thick, 16mm x 23.7mm SSOP pack- 
age. The TSOP form factor and pinout allow for very 
high board layout densities. 

A Command User Interface (CUI) serves as the sys- 
tem interface between the microprocessor or micro- 
controller and the internal memory operation. 

Internal Algorithm Automation allows Byte/Word 
Writes and Block Erase operations to be executed 
using a Two-Write command sequence to the CUI in 
the same way as the 28F008SA 8-Mbit Flash File™ 
memory. 


A Superset of commands have been added to the 
basic 28F008SA command-set to achieve higher 
write performance and provide additional capabili- 
ties. These new commands and features include: 

• Page Buffer Writes to Flash 

« Command Queuing Capability 
® Automatic Data Writes During Erase 
® Software Locking of Memory Blocks 

• Two-Byte Successive Writes in 8-bit Systems 

• Erase All Unlocked Blocks 

Writing of memory data is performed in either byte or 
word increments typically within 6 jusec, a 33% im- 
provement over the 28F008SA. A Block Erase oper- 
ation erases one of the 32 blocks in typically 0.6 sec, 
independent of the other blocks, which is about 65% 
improvement over the 28F008SA. 

Each block can be written and erased a minimum of 
100,000 cycles. Systems can achieve typically 1 mil- 
lion Block Erase Cycles by providing graceful block 
retirement. This technique has already been em- 
ployed in Hard Disk Drive designs. Additionally, wear 
leveling of block erase cycles can be used to mini- 
mize the write/erase performance differences 
across blocks. 

The 28F016SA incorporates two Page Buffers of 
256 Bytes (128 Words) each to allow page data 
writes. This feature can improve a system write per- 
formance by up to 4.8 times over previous flash 
memory devices. 

All operations are started by a sequence of Write 
commands to the device. Three Status Registers 
(described in detail later) and a RY/BY# output pin 
provide information on the progress of the requested 
operation. 

While the 28F008SA requires an operation to com- 
plete before the next operation can be requested, 
the 28F016SA allows queuing of the next operation 
while the memory executes the current operation. 
This eliminates system overhead when writing sev- 
eral bytes in a row to the array or erasing several 
blocks at the same time. The 28F016SA can also 
perform write operations to one block of memory 
while performing erase of another block. 

The 28F016SA provides user-selectable block lock- 
ing to protect code or data such as Device Drivers, 
PCMCIA card information, ROM-Executable O/S or 
Application Code. Each block has an associated 
non-volatile lock-bit which determines the lock 
status of the block. In addition, the 28F016SA has a 
master Write Protect pin (WP#) which prevents any 
modifications to memory blocks whose lock-bits are 
set. 
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The 28F016SA contains three types of Status Reg- 
isters to accomplish various functions: 

• A Compatible Status Register (CSR) which is 
100% compatible with the 28F008SA FlashFile 
memory’s Status Register. This register, when 
used alone, provides a straightforward upgrade 
capability to the 28F016SA from a 28F008SA- 
based design. 

• A Global Status Register (GSR) which informs 
the system of command Queue status, Page 
Buffer status, and overall Write State Machine 
(WSM) status. 

• 32 Block Status Registers (BSRs) which provide 
block-specific status information such as the 
block lock-bit status. 

The GSR and BSR memory maps for Byte-Wide and 
Word-Wide modes are shown in Figures 4.1 and 4.2. 

The 28F016SA incorporates an open drain RY/BY# 
output pin. This feature allows the user to OR-tie 
many RY/BY# pins together in a multiple memory 
configuration such as a Resident Flash Array. 

Other configurations of the RY/BY# pin are en- 
abled via special CUI commands and are described 
in detail in the 28F016SA User’s Manual. 

The 28F016SA also incorporates a dual chip-enable 
function with two input pins, CEq# and CEi#. 
These pins have exactly the same functionality as 
the regular chip-enable pin CE# on the 28F008SA. 
For minimum chip designs, CE-j# may be tied to 
ground and use CEq# as the chip enable input. The 
28F016SA uses the logical combination of these two 
signals to enable or disable the entire chip. Both 
CEq# and CEi# must be active low to enable the 
device and if either one becomes inactive, the chip 
will be disabled. This feature, along with the open 
drain RY/BY# pin, allows the system designer to 
reduce the number of control pins used in a large 
array of 16-Mbit devices. 

The BYTE# pin allows either x8 or x16 read/writes 
to the 28F016SA. BYTE# at logic low selects 8-bit 
mode with address Aq selecting between low byte 
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and high byte. On the other hand, BYTE# at logic 
high enables 16-bit operation with address Ai be- 
coming the lowest order address and address Ao is 
not used (don’t care). A device block diagram is 
shown in Figure 1. 

The 28F016SA is specified for a maximum access 
time of 70 ns (tAcc) at 5.0V operation (4.75V to 
5.25V) over the commercial temperature range (0°C 
to + 70°C). A corresponding maximum access time 
of 1 20 ns at 3.3V (3.0V to 3.6V and 0°C to + 70°C) is 
achieved for reduced power consumption applica- 
tions. 

The 28F016SA incorporates an Automatic Power 
Saving (APS) feature which substantially reduces 
the active current when the device is in static mode 
of operation (addresses not switching). 

In APS mode, the typical Ice current is 1 mA at 5.0V 
(0.8 mA at 3.3V). 

A Deep Power-Down mode of operation is invoked 
when the RP# (called PWD on the 28F008SA) pin 
transitions low. This mode brings the device power 
consumption to less than 1 .0 jxA, typically, and pro- 
vides additional write protection by acting as a de- 
vice reset pin during power transitions. A reset time 
of 400 ns is required from RP# switching high until 
outputs are again valid. In the Deep Power-Down 
state, the WSM is reset (any current operation will 
abort) and the CSR, GSR and BSR registers are 
cleared. 

A CMOS Standby mode of operation is enabled 
when either CEq# or CEi# transitions high and 
RP# stays high with all input control pins at CMOS 
levels. In this mode, the device typically draws an 
Ice standby current of 50 jaA. 


2.0 DEVICE PINOUT/PACKAGES 

The 28F016SA 56L-TSOP Type I pinout configura- 
tion is shown in Figure 2. The 56L-SSOP pinout con- 
figuration is shown in Figure 3. 
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Figure 1. 28F016SA Block Diagram 

Architectural Evolution Includes Page Buffers, Queue Registers and Extended Status Registers. 
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2.1 Lead Descriptions 


Symbol 

Type 

Name and Function 

A o 

INPUT 

BYTE-SELECT ADDRESS: Selects between high and low byte when 
device is in x 8 mode. This address is latched in x 8 Data Writes. Not used 
in xl 6 mode (i.e., the Aq input buffer is turned off when BYTE # is high). 

a 1 -A 15 

INPUT 

WORD-SELECT ADDRESSES: Select a word within one 64-Kbyte 
block. Ae_ 15 selects 1 of 1024 rows, and A1.5 selects 16 of 512 
columns. These addresses are latched during Data Writes. 

A16-A20 

INPUT 

BLOCK-SELECT ADDRESSES: Select 1 of 32 Erase blocks. These 
addresses are latched during Data Writes, Erase and Lock-Block 
operations. 

DQ 0 -DQ 7 

INPUT/OUTPUT 

LOW-BYTE DATA BUS: Inputs data and commands during CUI write 
cycles. Outputs array, buffer, identifier or status data in the appropriate 
Read mode. Floated when the chip is de-selected or the outputs are 
disabled. 

DQ 8 -DQ 15 

INPUT/OUTPUT 

HIGH-BYTE DATA BUS: Inputs data during x16 Data-Write operations. 
Outputs array, buffer or identifier data in the appropriate Read mode; not 
used for Status register reads. Floated when the chip is de-selected or 
the outputs are disabled. 

CE 0 #,CEi# 

INPUT 

CHIP ENABLE INPUTS: Activate the device’s control logic, input 
buffers, decoders and sense amplifiers. With either CEo# or CEi # high, 
the device is de-selected and power consumption reduces to Standby 
levels upon completion of any current Data-Write or Erase operations. 
Both CEo#, CEi # must be low to select the device. 

All timing specifications are the same for both signals. Device Selection 
occurs with the latter falling edge of CEo# or CEi #. The first rising edge 
of CEo# or CEi # disables the device. 

RP# 

INPUT 

RESET/POWER-DOWN: RP# low places the device in a Deep Power- 
Down state. All circuits that burn static power, even those circuits 
enabled in standby mode, are turned off. When returning from Deep 
Power-Down, a recovery time of 400 ns is required to allow these circuits 
to power-up. 

When RP# goes low, any current or pending WSM operation(s) are 
terminated, and the device is reset. All Status registers return to ready 
(with all status flags cleared). 

OE# 

INPUT 

OUTPUT ENABLE: Gates device data through the output buffers when 
low. The outputs float to tri-state off when OE# is high. 

NOTE: 

CE X # overrides OE # , and OE # overrides WE # . 

WE# 

INPUT 

WRITE ENABLE: Controls access to the CUI, Page Buffers, Data Queue 
Registers and Address Queue Latches. WE# is active low, and latches 
both address and data (command or array) on its rising edge. 

RY/BY# 

OPEN DRAIN 
OUTPUT 

READY/BUSY: Indicates status of the internal WSM. When low, it 
indicates that the WSM is busy performing an operation. RY/BY # high 
indicates that the WSM is ready for new operations (or WSM has 
completed all pending operations), or Erase is Suspended, or the device 
is in deep power-down mode. This output is always active (i.e., not 
floated to tri-state off when OE# or CEo#, CE l * are high), except if a 
RY/BY# Pin Disable command is issued. 
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2.1 Lead Descriptions (Continued) 


Symbol 

Type 

Name and Function 

WP# 

INPUT 

WRITE PROTECT: Erase blocks can be locked by writing a non-volatile lock-bit for 
each block. When WP# is low, those locked blocks as reflected by the Block-Lock 
Status bits (BSR.6), are protected from inadvertent Data Writes or Erases. When 
WP# is high, all blocks can be Written or Erased regardless of the state of the lock- 
bits. The WP# input buffer is disabled when RP# transitions low (deep power-down 
mode). 


INPUT 

BYTE ENABLE: BYTE# low places device in x8 mode. All data is then input or output 
on DQq- 7 , and DQg-is float. Address AO selects between the high and low byte. 
BYTE# high places the device in xl 6 mode, and turns off the Aq input buffer. Address 
Ai, then becomes the lowest order address. 

3/5# 

INPUT 

3.3/5.0 VOLT SELECT: 3/5# high configures internal circuits for 3.3V operation. 
3/5# low configures internal circuits for 5.0V operation. 

NOTES: 

Reading the array with 3/5# high in a 5.0V system could damage the device. 
There is a significant delay from 3/5# switching to valid data. 

Vpp 

SUPPLY 

ERASE/WRITE POWER SUPPLY: For erasing memory array blocks or writing words/ 
bytes/pages into the flash array. 

Vex: 

SUPPLY 

DEVICE POWER SUPPLY (3.3V ± 0.3V, 5.0V ± 0.5V): 

Do not leave any power pins floating. 

GND 

SUPPLY 

GROUND FOR ALL INTERNAL CIRCUITRY: 

Do not leave any ground pins floating. 



NO CONNECT: 

No internal connection to die, lead may be driven or left floating. 
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3.0 MEMORY MAPS 


1FFFFF 

1FOOOO 

64KByte Block 

"77 

1EFFFF 

1EOOOO 

64 KByte Block 

30 

1DFFFF 

100000 

64 KByte Block 

29 

1CFFFF 

1COOOO 

64 KByte Block 

28 

1BFFFF 

1B0000 

64 KByte Block 

27 

1AFFFF 

1AOOOO 

64 KByte Block 

26 

19FFFF 

190000 

64 KByte Block 

25 

18FFFF 

180000 

64 KByte Block 

24 

17FFFF 

170000 

64 KByte Block 

23 

16FFFF 

160000 

64 KByte Block 

22 

15FFFF 

150000 

64 KByte Block 

21 

14FFFF 

140000 

64 KByte Block 

20 

13FFFF 

130000 

64 KByte Block 

19 

12FFFF 

120000 

64 KByte Block 

18 

11FFFF 
1 10000 

64 KByte Block 

17 

10FFFF • 
100000 

64 KByte Block 

16 

OFFFFF 

OFOOOO 

64 KByte Block 

15 

OEFFFF 

OEOOOO 

64 KByte Block 

14 

OOFFFF 

ODOOOO 

64 KByte Block 

13 

OCFFFF 

OCOOOO 

64 KByte Block 

12 

OBFFFF 

OBOOOO 

64 KByte Block 

11 

OAFFFF 

OAOOOO 

64 KByte Block 

10 

09FFFF 

090000 

64 KByte Block 

9 

08FFFF 

080000 

64 KByte Block 

8 

07FFFF 

070000 

64 KByte Block 

7 

06FFFF 

060000 

64 KByte Block 

6 

05FFFF 

050000 

64 KByte Block 

5 

04FFFF 

040000 

64 KByte Block 

4 

03FFFF 

030000 

64 KByte Block 

3 

02FFFF 

020000 

64 KByte Block 

2 

01FFFF 

010000 

64KByte Block l| 

OOFFFF 

000000 

64 KByte Block 

_3 


— 290489-30 

Figure 4. 28F016S A Memory Map (Byte-wide mode) 
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3.1 Extended Status Registers Memory Map 




Figure 5.1 Extended Status Register 
Memory Map (Byte-wide mode) 


Figure 5.2 Extended Status Register 
Memory Map (Word-wide mode) 
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4.0 BUS OPERATIONS, COMMANDS AND STATUS REGISTER DEFINITIONS 


4.1 Bus Operations for Word-Wide Mode (BYTE# = V|h) 


Mode 

Notes 

RP# 

CE-|# 



WE# 

Ai 

EBBS 

RY/BY# 

Read 


MBM 

V|L 

V|L 


V|H 



X 

Output Disable 


■ 

VlL 


■ 

V|H 

D 

i 

X 

Standby 

1,6,7 

V|H 

V|L 
' V,h 
V|H 

X -j X 
> > > 

X 


X 


X 

Deep Power-Down 

1,3 

V|L 

X 

X 

X 

X 

X 


Voh 

Manufacturer ID 

4 

V|H 

V|L 



V|H 



Voh 

Device ID 

4 

V|H 

V|L 

V|L 

VlL 



66A0H 

Voh 

Write 

1,5,6 

V|H 

V| L 

V|L 

Vih 

VlL 

X 

Din 

X 


4.2 Bus Operations For Byte-Wide Mode (BYTE# = Vil) 


Mode 

Notes 

RP# 



OE# 

WE# 

A 0 

DQq-7 

RY/BY# 

Read 

1,2,7 

Vih 

V|L 

V|L 

V|L 

V|H 

D 


X 

Output Disable 

1,6,7 

V| H 

V|L 

V| L 

V| H 


D 


X 

Standby 

1,6,7 

V| H 

V| L 

V| H 

X 

X 

X 

High Z 

X 




V| H 

VlL 









V| H 

V| H 






Deep Power-Down 

1,3 

V| L 

X 

X 

X 

X 

X 

High Z 

Voh 

Manufacturer ID 

4 

V|H 

V| L 

V| L 

V|L 

V|H 

V|L 

89H 


Device ID 

4 

V| H 

VlL 

VlL 

VlL 

V|H 

V|H 

AOH 

Voh 

Write 

1,5,6 

V| H 

V| L 

V|L 

V|H 

V|L 

X 

Din 

X 


NOTES: 

1. X can be Vm or V||_ for address or control pins except for RY/BY#, which is either Vol or Voh- 

2. RY/BY# output is open drain. When the WSM is ready, Erase is suspended or the device is in deep power-down mode, 
RY/BY# will be at Voh if it is tied to Vcc through a resistor. RY/BY# at Voh is independent of OE# while a WSM 
operation is in progress. 

3. RP# at GND ± 0.2V ensures the lowest deep power-down current. 

4. A 0 and Ai at V|i_ provide manufacturer ID codes in x8 and x16 modes repectively. 

Ao and Ai at V|h provide device ID codes in x8 and x16 modes repectively. All other addresses are set to zero. 

5. Commands for different Erase operations, Data Write operations or Lock-Block operations can only be successfully com- 
pleted when Vpp = Vppn- 

6. While the WSM is running, RY/BY# in Level-Mode (default) stays at Vql until all operations are complete. RY/BY# goes 
to Vqh when the WSM is not busy or in erase suspend mode. 

7. RY/BY # may be at Vql while the WSM is busy performing various operations. For example, a status register read during 
a write operation. 




3-368 









































































































28F016SA 


iny 


4.3 28F008SA — Compatible Mode Command Bus Definitions 


Command 

Notes 

First Bus Cycle 

Second Bus Cycle 

Oper 

Addr 

Data 

Oper 

Addr 

Data 

Read Array 


Write 

X 

FFH 

Read 

AA 

AD 

intelligent identifier 

1 

Write 

X 

90H 

Read 

IA 

ID 

Read Compatible Status Register 

2 


X 



X 


Clear Status Register 

3 

Write 

X 





Word/Byte Write 


Write 

X 





Alternate Word/Byte Write 


Write 

X 



mm 


Block Erase/Confirm 


Write 

X 

20H 

Write 

BA 

DOH 

Erase Suspend/Resume 


Write 

X 

BOH 

Write 

X 

DOH 


ADDRESS 

AA = Array Address 
BA = Block Address 
IA = Identifier Address 
WA = Write Address 
X = Don’t Care 

NOTES: 

1 . Following the intelligent identifier command, two Read operations access the manufacturer and device signature codes. 

2. The CSR is automatically available after device enters Data Write, Erase, or Suspend operations. 

3. Clears CSR.3, CSR.4 and CSR.5. Also clears GSR.5 and all BSR.5 and BSR.2 bits. 

See Status register definitions. 


DATA 

AD = Array Data 
CSRD = CSR Data 
ID = Identifier Data 
WD = Write Data 
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4.4 28F016SA — Performance Enhancement Command Bus Definitions 


Command 

Mode 

Notes 

First Bus Cycle 

Second Bus Cycle 

Third Bus Cycle 

Oper 

Addr 

Data 

Oper 

Addr 

Data 

Oper 

Addr 

Data 

Read Extended 
Status Register 


1 

Write 

X 

71H 

Read 

RA 

GSRD 

BSRD 




Page Buffer Swap 


7 

Write 

X 








Read Page Buffer 



Write 

X 








Single Load to 
Page Buffer 

■ 


Write 

X 








Sequential Load to 
Page Buffer 

x8 

4,6,10 

Write 

X 

Em 




Write 

X 

BCH 

x16 




EOH 

Write 

X 

WCL 

Write 

X 

WCH 

Page Buffer Write 
to Flash 

x8 

3,4,9,10 

Write 

X 

OCH 




Write 

WA 

BC(H,L) 

x16 

4,5,10 


X 

OCH 






WCH 

Two-Byte Write 

x8 

3 

cm 

X 

FBH 

Write 





WD(H,L) 

Lock Block/Confirm 




X 

nu 


BA 





Upload Status 
Bits/Confirm 



Write 

X 



X 

DOH 



■1 

Upload Device 
Information 



Write 

X 

99H 

Write 

X 

DOH 




Erase All Unlocked 
Blocks/Confirm 




H 




DOH 




RY/BY# Enable to 
Level-Mode 


8 



96H 


H 





RY/BY# Pulse-On- 
Write 


8 


X 


Write 

X 





RY/BY# Pulse-On- 
Erase 


8 


X 

96H 

Write 

X 





RY/BY# Disable 


8 


D 



X 





Sleep 



Write 

fl 








Abort 



Write 

X 

80H 








ADDRESS DATA 

BA = Block Address AD = Array Data 

PA = Page Buffer Address PD = Page Buffer Data 

RA = Extended Register Address BSRD = BSR Data 

WA = Write Address GSRD = GSR Data 

X = Don’t Care 


WC (L,H) = Word Count (Low, High) 
BC (L,H) = Byte Count (Low, High) 
WD (L,H) = Write Data (Low, High) 
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NOTES: 

1. RA can be the GSR address or any BSR address. See Figures 4.1 and 4.2 for Extended Status Register Memory Maps. 

2. Upon device power-up, all BSR lock-bits come up locked. The Upload Status Bits command must be written to reflect the 
actual lock-bit status. 

3. Ao is automatically complemented to load second byte of data. BYTE# must be at V||_. 

Aq value determines which WD/BC is supplied first: Aq = 0 looks at the WDL/BCL, Aq = 1 looks at the WDH/BCH. 

4. BCH/WCH must be at 00H for this product because of the 256-Byte (128 Word) Page Buffer size and to avoid writing the 
Page Buffer contents into more than one 256-Byte segment within an array block. They are simply shown for future Page 
Buffer expandability. 

5. In x16 mode, only the lower byte DQq -7 is used for WCL and WCH. The upper byte DQs-is is a don’t care. 

6. PA and PD (whose count is given in cycles 2 and 3) are supplied starting in the 4th cycle which is not shown. 

7. This command allows the user to swap between available Page Buffers (0 or 1). 

8. These commands reconfigure RY/BY# output to one of two pulse-modes or enable and disable the RY/BY# function. 

9. Write address, WA, is the Destination address in the flash array which must match the Source address in the Page Buffer. 
Refer to the 28F016SA User’s Manual. 

10. BCL = 00H corresponds to a Byte count of 1. Similarly, WCL = 00H corresponds to a Word count of 1. 


4.5 Compatible Status Register 


WSMS 

ESS 

ES 

DWS 

VPPS 

R 

R 

R 

7 

i 

6 

5 

4 

3 

2 

1 

0 


CSR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 
0 = Busy 


CSR.6 = ERASE-SUSPEND STATUS 
1 = Erase Suspended 

0 = Erase in Progress/Completed 

CSR.5 = ERASE STATUS 

1 = Error in Block Erasure 

0 = Successful Block Erase 

CSR.4 = DATA-WRITE STATUS 

1 = Error in Data Write 

0 = Data Write Successful 

CSR.3 = V PP STATUS 

1 = Vpp Low Detect, Operation 

Abort 

0 = Vpp OK 


NOTES: 

RY/BY# output or WSMS bit must be checked to 
determine completion of an operation (Erase Suspend, 
Erase or Data Write) before the appropriate Status bit 
(ESS, ES or DWS) is checked for success. 


If DWS and ES are set to “1 ” during an erase attempt, an 
improper command sequence was entered. Clear the 
CSR and attempt the operation again. 


The VPPS bit, unlike an A/D converter, does not provide 
continuous indication of Vpp level. The WSM interrogates 
Vpp’s level only after the Data-Write or Erase command 
sequences have been entered, and informs the system if 
Vpp has not been switched on. VPPS is not guaranteed to 
report accurate feedback between Vppj_ and Vppn- 


CSR.2-0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when polling the CSR. 
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4.6 Global Status Register 



7 6 5 4 3 2 1 0 


GSR.7 = WRITE STATE MACHINE STATUS 
1 - Ready 
0 = Busy 

NOTES: 

[1 1 RY/BY # output or WSMS bit must be 
checked to determine completion of an 
operation (Block Lock, Suspend, any RY/BY# 
reconfiguration, Upload Status Bits, Erase or 
Data Write) before the appropriate Status bit 
(OSS or DOS) is checked for success. 

GSR.6 = OPERATION SUSPEND STATUS 
1 = Operation Suspended 
0 = Operation in Progress/Completed 


GSR.5 = DEVICE OPERATION STATUS 
1 = Operation Unsuccessful 
0 = Operation Successful or Currently 
Running 


GSR.4 = , DEVICE SLEEP STATUS 
1 = Device in Sleep 
0 = Device Not in Sleep 


MATRIX 5/4 

0 0= Operation Successful or Currently 
Running 

0 1 = Device in Sleep Mode or Pending Sleep 
10= Operation Unsuccessful 

1 1 = Operation Unsuccessful or Aborted 

GSR.3 = QUEUE STATUS 
1 = Queue Full 
0 = Queue Available 

If operation currently running, then GSR.7 = 0. 
If device pending sleep, then GSR.7 = 0. 

Operation aborted: Unsuccessful due to Abort 
command. 

GSR.2 = PAGE BUFFER AVAILABLE STATUS 

1 = One or Two Page Buffers Available 
0 = No Page Buffer Available 

The device contains two Page Buffers. 

GSR.1 = PAGE BUFFER STATUS 

1 = Selected Page Buffer Ready 

0 = Selected Page Buffer Busy 

GSR.O = PAGE BUFFER SELECT STATUS 

1 = Page Buffer 1 Selected 
0 = Page Buffer 0 Selected 

Selected Page Buffer is currently busy with 
WSM operation 


NOTE: 

1. Wh6n multiple operations are queued, checking BSR.7 only provides indication of completion for that particular block. 
GSR.7 provides indication when all queued operations are completed. 
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4.7 Block Status Register 


BS 

BLS 

BOS 

BOAS 

QS 

VPPS 

R 

R 

7 

1 

6 

5 

4 

3 

2 

1 

0 




NOTES: 


BSR.7 = BLOCK STATUS Ml RY/BY# output or BS bit must be checked to 

1 = Ready determine completion of an operation (Block Lock, 

0 = Busy Suspend, Erase or Data Write) before the appropriate 

Status bits (BOS, BLS) is checked for success. 

BSR.6 = BLOCK-LOCK STATUS 

1 = Block Unlocked for Write/ Erase 

0 = Block Locked for Write/ Erase 

BSR.5 = BLOCK OPERATION STATUS 

1 = Operation Unsuccessful 
0= Operation Successful or 

Currently Running 

BSR.4 = BLOCK OPERATION ABORT STATUS 

1 = Operation Aborted The BOAS bit will not be set until BSR.7 = 1 . 

0 = Operation Not Aborted 

MATRIX 5/4 

0 0= Operation Successful or 
Currently Running 

0 1 = Not a Valid Combination 

1 0 = Operation Unsuccessful 

1 1 = Operation Aborted Operation halted via Abort command. 

BSR.3 = QUEUE STATUS 
1 = Queue Full 

0 = Queue Available 

BSR.2 = V PP STATUS 

1 = Vpp Low Detect, Operation Abort 
0 = Vpp OK 


NOTES: 

BSR.1-0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when polling the BSRs. 

1. When multiple operations are queued, checking BSR.7 only provides indication of completion for that particular block. 
GSR.7 provides indication when all queued operations are completed. 
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5.0 ELECTRICAL SPECIFICATIONS 

5.1 Absolute Maximum Ratings* 

Temperature Under Bias 0°C to + 80°C 

Storage Temperature - 65°C to + 1 25°C 


NOTICE: This data sheet contains preliminary infor- 
mation on new products in production. The specifica- 
tions are subject to change without notice. Verify with 
your local Intel Sales office that you have the latest 
data sheet before finalizing a design. 

* WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings " may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


COMMERCIAL TEMPERATURE OPERATION 

Vcc = 3.3V ± 0.3V Systems(5) 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 

Test Conditions 

Ta 

Operating Temperature, Commercial 

1 

0 

mm 



E53H 

Vcc with Respect to GND 

2 


mi 



Vpp 

Vpp Supply Voltage with Respect to GND 



14.0 

V 


V 

Voltage on any Pin (except Vcc.Vpp) 
with Respect to GND 

H 


Vcc 
+ 0.5 

V 


1 

Current into any Non-Supply Pin 



± 30 

mA 


'out 

Output Short Circuit Current 

4 






V C c = 5.0V ± 0.5V , V C c = 5.0V ± 0.25V Systems^) 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 

Test Conditions 

Ta 

Operating Temperature, Commercial 

1 

0 

mm 

mm 



Vcc with Respect to GND 

2 


mm 



Vpp 

Vpp Supply Voltage with Respect to GND 






V 

Voltage on any Pin (except Vcc.Vpp) 
with Respect to GND 

H 



V 


1 

Current into any Non-Supply Pin 



± 30 

mA 


•out 

Output Short Circuit Current 

4 


100 

mA 



NOTES: 

1. Operating temperature is for commercial product defined by this specification. 

2. Minimum DC voltage is -0.5V on input/output pins. During transitions, this level may undershoot to -2.0V for periods 
<20 ns. Maximum DC voltage on input/output pins is Vcc + 0.5V which, during transitions, may overshoot to Vcc + 2.0V 
for periods <20 ns. 

3. Maximum DC voltage on Vpp may overshoot to + 14.0V for periods <20ns. 

4. Output shorted for no more than one second. No more than one output shorted at a time. 

5. AC specifications are valid at both voltage ranges. See DC Characteristics tables for voltage range-specific specifications. 

6. 5% Vcc specifications refer to the 28F016SA-70 in its High Speed Test configuration. 
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5.2 Capacitance 


For a 3.3V System: 


Symbol 

Parameter 

Note 

Typ 

Max 

Units 

Test Conditions 

C|N 

Capacitance Looking into an 
Address/Control Pin 

1 

6 

8 

PF 

T a = 25°C, f = 1.0 MHz 

Gout 

Capacitance Looking into an Output Pin 

1 

8 

12 

PF 

T a = 25°C,f =1.0 MHz 

Cload 

Load Capacitance Driven by Outputs 
for Timing Specifications 

1 


50 

PF 

For V C c = 3.3V ± 0.3V 


Equivalent Testing Load Circuit 

■ 



ns 

50ft transmission 
line delay 


For a 5.0V System: 



Parameter 

Note 

Typ 

Max 

Units 

Test Conditions 

C|N 

Capacitance Looking into an 
Address/Control Pin 

1 

6 

8 

PF, 

T a = 25°C, f = 1.0 MHz 

Gout 

Capacitance Looking into an Output Pin 

1 

8 

12 

PF 

T a = 25°C, f = 1.0 MHz 

Cload 

Load Capacitance Driven by Outputs 
for Timing Specifications 

1 


100 

PF 

For Vcc = 5.0V ± 0.5V 

30 

PF 

ForVcc = 5.0V ± 0.25V 


Equivalent Testing Load Circuit for 
VccilOo/o 



2.5 

ns 

25ft transmission 
line delay 


Equivalent Testing Load Circuit for 
V CC ± 5% 



2.5 

ns 

83ft transmission 
line delay 


NOTE: 

1. Sampled, not 100% tested. 


| [Pl^iyRflOIMOW 
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5.3 Timing Nomenclature 

All 3.3V system timings are measured from where signals cross 1 .5V. 

For 5.0V systems use the standard JEDEC cross point definitions. 

Each timing parameter consists of 5 characters. Some common examples are defined below: 

tcE tELQV time(t) from CE# (E) going low (L) to the outputs (Q) becoming valid (V) 
toE tGLQV time(t) from OE# (G) going low (L) to the outputs (Q) becoming valid (V) 

Ucc *AVQV time(t) from address (A) valid (V) to the outputs (Q) becoming valid (V) 
tAS tAVWH time(t) from address (A) valid (V) to WE# (W) going high (H) 

tQH twHDX time(t) from WE# (W) going high (H) to when the data (D) can become undefined (X) 



Pin Characters 


Pin States 

A 

Address Inputs 

H 

High 

D 

Data Inputs 

L 

Low 

Q 

Data Outputs 

V 

Valid 

E 

CE# (Chip Enable) 

X 

Driven, but not necessarily valid 

F 

BYTE# (Byte Enable) 

Z 

High Impedance 

G 

OE# (Output Enable) 



W 

WE# (Write Enable) 



P 

RP# (Deep Power-Down Pin) 



R 

RY/BY# (Ready Busy) 



V 

Any Voltage Level 



Y 

3/5# Pin 



5V 

Vcc at 4.5V Minimum 



3V 

Vcc at 3.0V Minimum 
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INPUT 


0.45- 


^ TEST POINTS < X 

; 5_1Am 


OUTPUT 


290489-4 

AC test inputs are driven at Vqh (2.4 VTTL) for a Logic “1” and Vql (0-45 VTTL) for a Logic “0”. Input timing begins 
at V|h (2.0 VTTL) and V|j_ (0.8 VTTL). Output timing ends at Vih and V||_. Input rise and fall times (10% to 90%) <10 
ns. 

Figure 6. Transient Input/Output Reference Waveform (Vcc = 5.0V ± 10%) 
for Standard Test Configuration^) 


3.0 - 


INPUT 




-TEST POINTS- 




AC test inputs are driven at 3.0V for a Logic “1” and 0.0V for a Logic “O’ 
ends, at 1.5V. Input rise and fall times (10% to 90%) < 10 ns. 


.5 OUTPUT 

290489-5 

Input timing begins, and output timing 


Figure 7. Transient Input/Output Reference Waveform (Vcc = 3.3V) 
High Speed Reference Waveform( 2 ) (Vcc = 5.0V ± 5%) 

NOTES: 

1 . Testing characteristics for 28F016SA-080/28F01 6SA-1 00. 

2. Testing characteristics for 28F016SA-070/28F016SA-120/28F016SA-150. 
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2.5 ns of 25H Transmission Line 



■-7 Test ^ 




— Point 


Total Capacitance = 100 pF 

290489-6 
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5.4 DC Characteristics: COMMERCIAL TEMPERATURE 

Vcc = 3.3V ± 0.3V, T a = 0°C to + 70°C 
3/5# = Pin Set High for 3.3V Operations 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

IlL 

Input Load Current 

1 



±1 

jllA 

Vcc = Vcc Max, V|N = Vcc or CND 

•lo 

. 

Output Leakage 
Current 

1 



±10 

jiA 

Vcc = Vcc Max, V|fg = Vcc or CND 

•ccs 

Vcc Standby Current 

1,5 


50 

100 

jllA 

Vcc = Vcc Max, 

CE 0 #, CE 1 #, RP#, = V C c ± 0.2V 
BYTE#, WP#, 3/5# = V C c ± 
0.2V or GND ± 0.2V 


■ 

■ 

mA 

V CC = v cc Max > 
CE 0 #,CE 1 #,RP# = V| H 
BYTE#, WP#, 3/5# = V| H orV| L 

•CCD 

Vcc Deep Power-Down 
Current 

■ 



5 

/aA 

RP# = GND ± 0.2V 

BYTE# = V C c ± 0.2V or GND ± 0.2V 

IccrI 

Vcc Read Current 

1,4,5 


30 

35 

mA 

Vcc = Vcc Max, 

CMOS: CE 0 #, CE-, # = GND ± 0.2V 
BYTE# = GND ± 0.2VorV C c ± 0.2V 
Inputs = GND ± 0.2V or 
V CC ± 0.2V, 

TTL:CE 0 #,CE 1 # = V| L , 

BYTE# = V| L orV| H 
Inputs = V^or V|h, 
f = 8 MHz, Iout = 0 mA 

•CCR2 

Vcc Read Current 

1,4,5 


15 

20 


V CC = v cc Max, 

CMOS: CE 0 #, CE-| # = 

GND ± 0.2V, BYTE# = V C c 
± 0.2V or GND ± 0.2V 
Inputs = GND ± 0.2V or 
V CC ± 0.2V, 

TTL:CE 0 #,CE 1 # = V iL 
BYTE# = V| H or V| L 
Inputs = Vil or V|h, 
f — 4 MHz, Iout = 0 mA 

iccw 

Vcc Write Current 

1 


8 

12 

mA 

Word/Byte Write in 
Progress 

IcCE 

Vcc Block Erase 
Current 

1 


6 

12 

mA 

Block Erase in Progress 

IcCES 

Vcc Erase Suspend 
Current 

1,2 

■ 



mA 

CEq#, CE-j # = V|h 
B lock Erase Suspended 

Ipps 

Vpp Standby Current 

1 


±1 

±10 

juA 

Vpp ^ Vcc 

•PPD 

Vpp Deep Power-Down 
Current 

1 


0.2 

5 

fxA 

RP# = GND ±0.2V 


I 
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5.4 DC Characteristics: COMMERCIAL TEMPERATURE (Continued) 
Vcc = 3.3V ± 0.3V, T a = 0°c to +70°C 
3/5# = Pin Set High for 3.3V Operations 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

IPPR 

Vpp Read Current 

1 

65 


200 

jU,A 

Vpp > Vcc 

Ippw 

Vpp Write Current 

■ 


10 

15 

mA 

Vpp = VppH, 

Word/Byte Write in Progress 

IPPE 

Vpp Erase Current 

■ 


4 

10 

mA 

Vpp = Vppn, 

Block Erase in Progress 

IpPES 

Vpp Erase Suspend 
Current 

■ 

65 


200 

/mA 

Vpp = Vppn, 

Block Erase Suspended 

V|L 

Input Low Voltage 


-0.3 


0.8 

V 


VlH 

Input High Voltage 


2.0 


Vcc + 0.3 

V 


VOL 

Output Low Voltage 


' 


0.4 

V 

Vcc = Vcc Min and 
Iql = 4 mA 

Voh*i 

Output High Voltage 


2.4 





Voh2 

Vcc “ 0.2 


m 

Vpp during Normal 
Operations 

3 

0.0 


6.5 

V 


VppH 


■ 

11.4 

12.0 

12.6 

■ 



Vcc Erase/Write 
Lock Voltage 





■ 



NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 3.3V, Vpp = 12.0V, T = 25°C. These currents 
are valid for all product versions (package and speeds). 

2. Icces is specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum 
of Icces find Iccr- 

3. Block Erases, Word/Byte Writes and Lock Block operations are inhibited when Vpp = Vppi_ and not guaranteed in the 
range between Vppn and VppL. 

4. Automatic Power Savings (APS) reduces Iccr to less than 1 mA in static operation. 

5. CMOS Inputs are either Vcc ± 0.2V or GND ± 0.2V. TTL Inputs are either V||_ or V|h- 
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5.5 DC Characteristics: COMMERCIAL TEMPERATURE 

Vcc = 5.0V ± 0.5V, T a = 0°c to +70°C 
3/5# Pin Set Low for 5V Operations 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

IlL 

Input Load 
Current 

1 



±1 

fJL A 

Vcc = v cc Max 
V|N = Vcc or GND 

i|_o 

Output Leakage 
Current 

1 



±10 

jxA 

Vcc = Vcc Max 

V|N = Vcc° r GND 

•ccs 

Vcc Standby 
Current 

1,5 


50 

100 

fxA 

Vcc = Vcc Max 
CE 0 #,CE 1 #,RP# = V C c ± 
0.2V 

BYTE#, WP#, 3/5# = V C c ± 
0.2V or GND ± 0.2V 

, 



1 

2 

4 

mA 

v cc = v cc Max 

CE 0 #, CE-i #, RP# = V| H 

BYTE#, WP#, 3/5# = V| H or 

V| L 

•CCD 

V C c D^P 

Power-Down 

Current 

1 

■ 

1 

5 


RP# = GND ± 0.2V 

BYTE# = V C c ± 0.2V or GND ± 0.2V 

ICCR 1 




50 

60 


v cc = v cc Max, 

CMOS: CE 0 #, CEi # = GND ± 0.2V 
BYTE# = GND ± 0.2VorV C c ± 0.2V 
Inputs = GND ± 0.2V or 
V CC ± 0.2V, 

TTL:CE 0 #,CE 1 # = V| L , 

BYTE# = V| L orV| H 
Inputs = V||_ or Vm, 
f = 10 MHz, louT = 0 mA 


Vcc Read 
Current 

1,4,5 


30 

35 


v cc = v cc Max, 

CMOS: CE 0 #,CE 1 # = 
GND ± 0.2V 

BYTE# = V C c ± 0.2V or 
GND ± 0.2V 
Inputs = GND ± 0.2V or 
V CC ± 0.2V 

TTL: CE 0 #, CE-| # = V| L , 
BYTE# = V| H or V| L 
Inputs = Vil or V|h, 
f = 5 MHz, Iqut = 0 mA 

•ccw 

Vcc Write 
Current 

1 


25 

35 

mA 

Word/ Byte in Progress 

m 

Vcc Block 
Erase Current 

1 


18 

25 

mA 

Block Erase in Progress 

•CCES 

V C c Erase 
Suspend Current 

1,2 


5 

10 

mA 

CE 0 #,CE 1 # = V| H 
Block Erase Suspended 

ipps 

Vpp Standby 
Current 

1 


+ 1 

±10 

jaA 

Vpp ^ Vcc 
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5.5 DC Characteristics: COMMERCIAL TEMPERATURE (Continued) 
Vcc = 5.0V ± 0.5V, T a = 0°c to +70°C 
3/5# Pin Set Low for 5V Operations 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 


Vpp Deep Power- 
Down Current 



0.2 

5 

fiA 




1 


65 

200 

jliA 

Vpp > Vcc 

Ippw 

Vpp Write Current 

1 


7 

12 

mA 

Vpp = Vppn 

Word/Byte Write in Progress 

ipPE 

Vpp Block Erase 
Current 

1 


5 

10 

mA 

Vpp = Vppn 

Block Erase in Progress 


Vpp Erase Suspend 
Current 

1 


65 

200 

pA 

Vpp = Vppn 

Block Erase Suspended 

Mi 

Input Low Voltage 


-0.5 


0.8 



Mi 

Input High Voltage 


2.0 


V CC + 0.5 

■ 


Vol 

Output Low Voltage 

■ 



0.45 

V 

Vcc = Vcc Min 
Iol = 5.8 mA 


Output High Voltage 



1 


V 

Ioh = — 2.5 mA 
Vcc = Vcc Min 

v OH 2 

< 

o 

o 

1 

o 

Ioh = “100 fiA 
v cc = v cc Min 

VppL 

Vpp during Normal 
Operations 

3 

0.0 


6.5 

V 


VppH 

Vpp during Erase/ 
Write Operations 


11.4 

12.0 

12.6 

V 


Vlko 

Vcc Erase/Write 
Lock Voltage 


2.0 



V 



NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, Vpp = 12.0V, T = 25°C. These currents 
are valid for all product versions (package and speeds). 

2. Icces is specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum 
of Icces and Iccr* 

3. Block Erases, Word/Byte Writes and Lock Block operations are inhibited when Vpp = Vppl and not guaranteed in the 
range between Vppn and VppL- 

4. Automatic Power Saving (APS) reduces Iccr to less than 2 mA in Static operation. 

5. CMOS Inputs are either Vcc ± 0.2V or GND ± 0.2V. TTL Inputs are either V|j_ or V|h- 
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5.6 AC Characteristics— Read Only Operations: COMMERCIAL TEMPERATURES) 

Vcc = 3.3V ± 0.3V T a = 0° to +70°C 



Versions ( 5 ) 


Parameter 


Read Cycle Time 


Address to Output Delay 


28F016SA-120 


OE# to Output Delay 


CE# to Output in Low Z 


I 


OE# to Output in HighZ 


Output Hold from Address 
CE# or OE# Change, 
Whichever Occurs First 



BYTE# to Output Delay 

3 


120 

BYTE# Low to Output 
in High Z 

3 


30 

CE# Low to BYTE# 
High or Low 

3 


5 
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5.6 AC Characteristics — Read Only Operations^) (Continued) 
V C c = 5.0V ± 0.5V, T a = 0°C to +70°C 



For Extended Status Register Reads 



NOTES: 

1. See AC Input/Output Reference Waveforms for timing measurements, Figures 6 and 7. 

2. OE# may be delayed up to tELQV-tGLQV after the falling edge of CE# without impact on tELQV- 

3. Sampled, not 100% tested. 

4. This timing parameter is used to latch the correct BSR data onto the outputs. \ 

5. Device Speeds are defined as: 

70/80 ns at Vcc = 5.0V equivalent to 
120 nsatVcc = 3.3V 
100 ns at Vcc = 5.0V equivalent to 
150 ns at V C c = 3.3V 

6. See AC Input/Output Reference Waveforms and AC Testing Load Circuits for High Speed Test Configuration. 

7. See Standard AC Input/Output Reference Waveforms and AC Testing Load Circuit. 
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Figure 11. Read Timing Waveforms 
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NOTE: 

1. CE X # is defined as the latter of CEq# or CEi # going Low or the first of CEq# or CEi # going High. 


Figure 12. BYTE# Timing Waveforms 


IPI^iyiMDIMSY 
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5.7 Power-Up and Reset Timings: COMMERCIAL TEMPERATURE 


POWER UP 



VALID 

5.0V OUTPUTS 


Figure 13. Vcc Power-Up and RP# Reset Waveforms 


Symbol Parameter 


tpLYL RP# Low to 3/5# Low (High) 

tpLYH 


3/5# Low (High) to RP# High 


RP# Low to Vcc at 4.5V Minimum 
(to Vcc at 3.0V min or 3.6V max) 


Address Valid to Data Valid 
for V C c = 5V ± 10 % 


tpHQV RP# High to Data Valid for 3 480 ns 

V C c = 5V±10% 

NOTES: 

CE 0 #, CE-i # and OE# are switched low after Power-Up. 

1 . Minimum of 2 jas is required to meet the specified tpHQV times. 

2. The power supply may start to switch concurrently with RP# going Low. 

3. The address access time and RP# high to data valid time are shown for 5V Vcc operation. Refer to the AC Characteris- 
tics Read Only Operations 3.3V Vcc operation and all other speed options. 





JULS 


JLLS 


flS 

80 

ns 

480 

ns 


PRUUDlliiOAOOT 
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5.8 AC Characteristics for WE #— Controlled Command Write Operations: 
COMMERCIAL TEMPERATURE^) 


Vcc = 3.3V ± 0.3V T a = 0°c to +70°C 


j Versions 


Symbol Parameter 


Uvav Write Cycle Time 


typwH I Vpp Setup to WE# Going High 


RP# Setup to CE# Going Low 


tELWL CE# Setup to WE# Going Low 


Address Setup to WE# 
Going High 


Data Setup to WE# Going High 


WE# Pulse Width 


Data Hold from WE# High 


Address Hold from WE# High 


28F016SA-120 


28F016SA-150 


Notes Min Typ Max Min 



tsssM 

CE# Hold from WE# High 


10 



■El 



ns 

n 

WE# Pulse Width High 


45 

■a 


wm 





Read Recovery before Write 


0 

■ ■ 





ns 


WE# High to RY/BY# Going Low 









tRHPL 

RP# Hold from Valid Status 
Register (CSR, GSR, BSR) Data 
and RY/BY# High 

3 

0 

■ 


0 



ns 

tpHWL 

RP# High Recovery to 
WE# Going Low 


1 



i 



JUS 

tWHGL 

Write Recovery before Read 


wm 



mjjii 



ns 

*QWL 

Vpp Hold from Valid Status 
Register (CSR, GSR, BSR) Data 
and RY/BY# High 

■ 

■ 

■ 


■ 

■ 

■ 

fJbS 

tWHQVl 

Duration of Word/Byte 
Write Operation 

4,5 

5 

9 



H 



*WHQV2 

Duration of Block 
Erase Operation 

■ 

0.3 

■ 

10 

0.3 

■ 


sec 
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AC Characteristics for WE# — Controlled Command Write Operations^) (Continued) 

Vcc = 5.0V ± 0.5V T a = 0°CtO +70-C 


Versions 

Vcc ±5% 

28F016SA-070 



Unit 

V C c ± io% 


28F016SA-080 

28F016SA-100 

Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Min 

Typ 

Max 

Min 

Typ 

Max 

tAVAV 

Write Cycle Time 


70 



80 



100 



ns 

tVPWH 

Vpp Setup to WE# 
Going High 

3 

100 



100 



100 



ns 


RP# Setup to CE# 
Going Low 











11 

*ELWL 

CE# Setup to WE# 
Going Low 


0 


■ 

■ 






Q 

UVWH 

Address Setup to 
WE# Going High 


50 


■ 







Q 

tDVWH 

Data Setup to WE# 
Going High 




■ 



■ 




Q 

tWLWl-: 

WE# Pulse Width 


Q 



50 



50 




tWHDX 

Data Hold from 
WE# High 

2 

0 



0 



0 



Q 

tWHAX 

Address Hold from 
WE# High 

2 

D 


■ 

10 



10 



| 

tWHEH 

CE# Hold from 
WE# High 


H 



10 



10 



ns 

tWHWL 

WE# Pulse Width 
High 





30 




■ 


n | 

tGHWL 

Read Recovery 
before Write 


0 


■ 


■ 

■ 

0 


H 


tWHRL 

WE# High to RY/ 
BY# Going Low 




100 







n 

tRHPL 

RP# Hold from 
Valid Status 
Register (CSR, 
GSR, BSR) Data 
and RY/BY# High 

3 

0 



0 



0 



ns 

tpHWL 

RP# High 
Recovery to WE# 
Going Low 


1 



1 



1 



jjlS 

tWHGL 

Write Recovery 
before Read 


60 



65 



80 



ns 

tQVVL 

Vpp Hold from Valid 
Status Register 
(CSR, GSR, BSR) 
Data and RY/BY# 
High 


0 



0 



0 



JLtS 

tWHQVl 

Duration of Word/ 
Byte Write 
Operation 

4,5 

4.5 

6 

Note 7 

4.5 

6 

Note 7 

4.5 

6 

Note 7 

fXS 

tWHQv2 

Duration of Block 
Erase Operation 

4 

0.3 


10 

0.3 


10 

0.3 


10 

sec 
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NOTES: 

CE# is defined as the latter of CEo# or CE-| # going Low or the first of CEo# or CE-| # going High. 

1 . Read timings during write and erase are the same as for normal read. 

2. Refer to command definition tables for valid address and data values. 

3. Sampled, but not 100% tested. 

4. Write/Erase durations are measured to valid Status Register (CSR) Data. 

5. Word/Byte write operations are typically performed with 1 Programming Pulse. 

6. Address and Data are latched on the rising edge of WE# for all Command Write operations. 

7. This information will be available in a technical paper. Please call Intel’s Application Hotline or your local sales office for 
more information. 



Figure 14. AC Waveforms for Command Write Operations 
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5.9 AC Characteristics for CE # — Controlled Command Write Operations: 
COMMERCIAL TEMPERATURE^) 

Vqc = 3.3V ± 0.3V T a = 0°C to + 70°C 


Versions 

28F016SA-120 

28F016SA-150 

Unit 

Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Min 

Typ 

Max 

tAVAV 

Write Cycle Time 


120 



150 



ns 

tVPEH 

Vpp Setup to CE# Going high 

3 







KM 

tpHWL 

RP# Setup to WE# Going Low 









tWLEL 

WE# Setup to CE# Going Low 


0 



0 





Address Setup to 
CE# Going High 

2,6 

75 





■ 

Q 

^DVEH 


2,6 

75 







tELEH 

CE# Pulse Width 


o 



75 



ns 

*EHDX 

Data Hold from CE# High 

2 

na 



10 



ns 

tEHAX 

Address Hold from CE# High 

2 

na 



10 



BUM 

tEHWH 

WE# Hold from CE# High 


■a 



■a 




tEHEL 

CE# Pulse Width High 


45 



D 





Read Recovery before Write 


0 



0 




tEHRL 

CE# High to RY/BY# Going Low 



1 






*RHPL 

RP# Hold from Valid Status 
Register (CSR, GSR, BSR) Data 
and RY/BY# High 

3 

0 

■ 


0 



ns 

tpHEL 

RP# High Recovery to 
CE# Going Low 


i 


■ 

■ 

■ 


JUS 

tEHGL 

Write Recovery before Read 





120 





Vpp Hold from Valid Status 
Register (CSR, GSR, BSR) Data 
at RY/BY# High 


0 



0 

■ 


D 

tEHQVl 

Duration of Word/Byte 
Write Operation 

4,5 

5 

9 

Note 7 

5 

9 

Note 7 

JLtS 

tEHQv2 

Duration of Block 
Erase Operation 

4 

0.3 


10 

0.3 


10 

sec 
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AC Characteristics for CE# — Controlled Command Write Operations^) (Continued) 
V C c = 5.0V ± 0.5V, T a = 0° to +70°C 


V C c±5% 28F016SA-070 


V CC ±10% 


Symbol Parameter 


1 avav Write Cycle Time 


t V pEH V P p Setup to CE # 
Going High 


28F016SA-080 28F016SA-100 Unit 

Notes | Min Typ Max Min Typ Max Min | Typ | Max 

70 80 



Min 

Typ 

70 


100 


480 


0 


50 


50 




Iehqv 2 Duration of Block 
Erase Operation 
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NOTES: 

CE# is defined as the latter of CEq# or CEi # going Low or the first of CEo# or CEi # going High. 

1. Read timings during write and erase are the same as for normal read. 

2. Refer to command definition tables for valid address and data values. 

3. Sampled, but not 100% tested. 

4. Write/ Erase durations are measured to valid Status Data. 

5. Word/Byte write operations are typically performed with 1 Programming Pulse. 

6. Address and Data are latched on the rising edge of CE# for all Command Write Operations. 

7. This information will be available in a technical paper. Please call Intel’s Application Hotline or your local sales office for 
more information. 


DEEP WRITE DATArWRITE OR 
POWER-DOWN ERASE SETUP COMMAND 


WRITE VALID ADDRESS 
& DATA (DATA-WRITE) OR 
ERASE CONFIRM COMMAND 


AUTOMATED DATA-WRITE 
OR ERASE DELAY 


WRITE READ EXTENDED 
REGISTER COMMAND 


READ EXTENDED 
STATUS REGISTER DATA 



NOTES: 

1. This address string depicts Data-Write/Erase cycles with corresponding verification via ESRD. 

2. This address string depicts Data-Write/Erase cycles with corresponding verification via CSRD. 

3. This cycle is invalid when using CSRD for verification during Data-Write/Erase operations. 

4. CE X # is defined as the latter of CE 0 # or CEi # going Low or the first of CE 0 # or CEi # going High. 

5. RP# low transition is only to show tRHPU not valid for above Read and Write cycles. 


Figure 15. Alternate AC Waveforms for Command Write Operations 
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5.10 AC Characteristics for Page Buffer Write Operations: COMMERCIAL 
TEMPERATURES) 

Vcc = 3.3V ± 0.3V T a - 0°C to +70°C. 


Versions 

28F016SA-120 

28F016SA-150 

Unit 

Symbol 

Parameter 

Notes 



Max 

Min 

Typ 

Max 

tAVAV 

Write Cycle Time 


El 






ns 

*ELWL 

CE# Setup to WE# Going Low 


■a 



10 



ns 


Address Setup to WE# Going Low 

3 

■ 



0 



ns 


Data Setup to WE# Going High 

2 




50 





WE# Pulse Width 


75 






ns 


Data Hold from WE# High 

2 




10 




BSSill 

Address Hold from WE# High 

2 

10 



10 



ns 


CE# Hold from WE# High 








ns 


WE# Pulse Width High 





75 





Read Recovery before Write 


0 



0 




tWHGL 

Write Recovery before Read 


95 



120 



ns 


V C c = 5.0V ± 0.5V, T a = 0°C to +70°C 


Versions 

28F016SA-070 

28F016SA-080 

28F016SA-100 

Unit 

Symbol 

Parameter 

Notes 


Typ 

Max 

Min 

Typ 

Max 

Min 

Typ 

Max 

tAVAV 

Write Cycle Time 


mm 













0 


B 

B 

B 

B 

B 

B 

B 

ns 

tAVWL 

Address Setup to 
WE# Going Low 

3 

0 


B 

0 

B 

B 

B 


B 

ns 

tDVWH 

Data Setup to 
WE# Going High 

2 

50 


B 

50 

B 

B 

m 

B 

B 

ns 

tWLWH 

WE# Pulse Width 


o 



50 






ns 

tWHDX 

Data Hold from 
WE# High 

2 

n 


fl 

0 

B 

B 

0 

B 

B 

ns 

tWHAX 

Address Hold 
from WE# High 

2 

B 



10 


B 


fl 

fl 


tWHEH 

CE# Hold from 
WE# High 


B 


B 

10 

fl 

B 

fl 

B 

B 

ns 

tWHWL 

WE# Pulse Width 
High 











ns 

tGHWL 

Read Recovery 
before Write 


0 


B 

0 

B 


0 

B 


ns 

tWHGL 

Write Recovery 
before Read 


60 



65 



80 



ns 


NOTES: 

CE# is defined as the latter of CEo# or CEi # going Low or the first of CEo# or CEi # going High. 

1. These are WE# -controlled write timings, equivalent CE# -controlled write timings apply. 

2. Sampled, but not 100% tested. 

3. Address must be valid during the entire WE# Low pulse or the entire CE# Low pulse for CE# -controlled writes. 
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Figure 16. Page Buffer Write Timing Waveforms 
(Loading Data to the Page Buffer) 
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5.1 1 Erase and Word/By te Write Performance, Cycling Performance and 
Suspend Latency( ■> 3 ) 

Vcc = 3.3V ± 0.3V, V PP = 12.0V ± 0.6V, T A = 0°C to + 70°C 



Parameter 

Notes 

Min 

Typ 

Max 




Page Buffer Byte Write Time 

1.2,4 


3.26 

Note 6 







6.53 

Note 6 



tWHRHl 

Word/Byte Write Time 

1,2 


9 

Note 6 

1 


t WHRH2 

Block Write Time 

1,2 


0.6 

2.1 

Sec 


t\WHRH3 

Block Write Time 

1,2 


0.3 

1.0 

Sec 

Word Write Mode 


Block Erase Time 

1,2 


0.8 





Full Chip Erase Time , 

1,2 







Erase Suspend Latency Time 
to Read 

| 


mm 

■ 

El 



Erase Suspend Latency Time 
to Write 

■ 



■ 

q 



Erase Cycles 

5 


KlIllIEil 





V C C = 5.0V ± 0.5V, V PP = 12.0V ± 0.6V, T A = 0°C to + 70°C 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 


Page Buffer Byte Write Time 

1,2,4 


2.76 v 

Note 6 

JXS 



Page Buffer Word Write Time 

1,2,4 


5.51 

Note 6 

jas 



Word Byte/ Write Time 

1,2 


6 


JULS 



Block Write Time 



0.4 

mm 



*WHRh 3 

Block Write Time 

1,2 


0.2 

1.0 




Block Erase Time 

1,2 


0.6 

10 




Full Chip Erase Time 

1,2 


19.2 


Sec 



Erase Suspend Latency Time 
to Read 



5.0 


JULS 



Erase Suspend Latency Time 
to Write 



8.0 


julS 



Erase Cycles 

5 

100,000 

1,000,000 


Cycles 



NOTES: 

1. 25°C, Vcc = 3.3V or 5V nominal, 10K cycles. 

2. Excludes system-level overhead. 

3. These performance numbers are valid for all speed versions. 

4. This assumes using the full Page Buffer to Write to Flash (256 bytes or 128 words). 

5. Typical 1,000,000 cycle performance assumes the application uses block retirement techniques. 

6. This information will be available in a technical paper. Please call Intel’s Application hotline or your local sales office for 
more information. 
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6.0 DERATING CURVES 




Access Time (ns) 







Figure 22. Ipp during Word Write Operation Figure 23. Ipp during Page Buffer Write Operation 


3 




3-399 





28F016SA 


intel 

7.0 MECHANICAL SPECIFICATIONS FOR TSOP 
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DEVICE NOMENCLATURE AND ORDERING INFORMATION 


D 

A 

2 

8 

F 

o 

1 

6 

CO 

> 

— 

0 

7 

o 



DA = COMMERCIAL 
56-LEAD SSOP 
E = COMMERCIAL 
56-LEAD TSOP 


70 ns 
100 ns 


290489-29 


Option 

Order Code 

Valid Combinations 

V C c = 3.3V ± 0.3V, 
50 pF Load 

Vcc = 5.0V ± 10%, 
100 pF Load 

Vcc = 5.0V ± 5%, 
30 pF Load 

1 

E28F016SA-070 

E28F016SA-120 

E28F016SA-080 

E28F016SA-070 

2 

E28F016SA-100 

E28F016SA-150 

* E28F016SA-100 


3 

DA28FQ1 6SA-070 

DA28F01 6SA-1 20 

DA28F01 6SA-080 

DA28F01 6SA-070 

4 

DA28F01 6SA-1 00 

DA28F01 6SA-1 50 

DA28F01 6SA-1 00 



ADDITIONAL INFORMATION 



Item 

Order Number 


28F016SA 16-Mbit FlashFileTM Memory User’s Manual 

297372 


DD28F032SA 32-Mbit FlashFileTM Memory Data Sheet 

290489 


28F016SV FlashFileTM Memory Data Sheet 

290528 


28F008SA Data Sheet 

290435 

AP-393 

“28F016SV Compatibility with 28F016SA” 

292144 

AP-378 

“System Optimization Using the Enhanced Features of the 28F016SA” 

292127 

AP-377 

“28F016SA Software Drivers” 

292126 

AP-375 

“Upgrade Considerations from the 28F008SA to the 28F016SA” 

292124 

AP-357 

“Power Supply Solutions for Flash Memory” 

292092 

AP-374 

“Flash Memory Write Protection Techniques” 

292123 

AP-607 

“Multi-Site Layout Planning with Intel’s FlashFileTM Components Including ROM” 

292159 


“Small and Low-Cost Power Supply Solution for Intel’s Flash Memory Products” 

297534 

ER-33 

“ETOXtm Flash Memory Technology— Insight to Intel’s Fourth Generation 
Process Innovation” 

294016 


FLASHBuilder Design Resource Tool 

297508 


Please check with Intel Literature for availability. 


DATASHEET REVISION HISTORY 


Number 

Description 

-002 

— Added 56-Lead SSOP Package 

— Separated AC Read Timing Specs Tavel> t avgl for Extended Status Register Reads 

— Modified DEVICE NOMENCLATURE 

— Added ORDERING INFORMATION 

— Added Page Buffer Typical Write Performance numbers 

— Added Typical Erase Suspend Latencies 

— For Iqcd (Deep Power-Down current, BYTE# must be at CMOS levels) 

— Added SSOP package mechanical specifications 
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EXTENDED TEMPERATURE 28F016SA 
16 MBIT (1 MBIT x 16, 2 MBIT x 8) FlashFileTM MEMORY 


■ Extended Temperature Operation 
40°C to +85°C 

■ User-Selectable 3.3V or 5V Vcc 

■ 100 ns Maximum Access Time at 5V 
(Extended Temperature Range) 

■ 1 Million Typical Erase Cycles per 
Block 

■ 20 MB/sec Burst Write Transfer Rate 

■ User-Configurable x8 or x16 Operation 

■ 56-Lead 1.8 mm x 16 mm x 23.7 mm 
SSOP Package 


■ Revolutionary Architecture 

— Multiple Command Execution 
— Write during Erase 
— Command Super-Set of the Intel 
28F008SA 

— Page Buffer Write 

■ 1 mA Typical Iqc in Static Mode 
n 3 /xA Typical Deep Power-Down 

■ 32 Independently Lockable Blocks 

■ State-of-the-Art 0.6 jam ETOXtm iv 
F lash Technology 


Intel’s 28F016SA 16-Mbit FlashFileTM memory is a revolutionary architecture which is the ideal choice for 
designing embedded direct-execute code and mass storage data/file flash memory systems. With innovative 
capabilities, low-power, extended temperature operation and high read/write performance, the 28F016SA 
enables the design of truly mobile, high-performance communications and computing products. 


The 28F016SA is the highest density, highest performance non-volatile read/write solution for solid-state 
storage applications. Its symmetrically blocked architecture (100% compatible with the 28F008SA 8-Mbit 
FlashFile memory), extended cycling, extended temperature operation, flexible Vqq, fast write and read per- 
formance and selective block locking provide highly flexible memory components suitable for resident flash 
arrays, high-density memory cards and PCMCIA-ATA flash drives. The 28F016SA dual read voltage enables 
the design of memory cards which can interchangeably be read/written in 3.3V and 5.0V systems. Its x8/x16 
architecture allows optimization of the memory-to-processor interface. Its high read performance and flexible 
block locking enable both storage and execution of operating systems and application software. Manufactured 
on Intel’s 0.6 jam ETOXtm iv process technology, the 28F016SA is the most cost effective, highest density 
monolithic 3.3V FlashFile memory. 
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EXTENDED TEMPERATURE 28F016SA 
16 MBIT (1 MBIT x 16, 2 MBIT x 8) FlashFileTM MEMORY 
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1.0 INTRODUCTION 

The documentation of the Intel 28F016SA memory 
device includes this datasheet, a detailed user’s 
manual, a number of application notes, all of which 
are referenced at the end of this datasheet. 

The datasheet is intended to give an overview of the 
chip feature-set and of the operating AC/ DC specifi- 
cations. The 28F016SA User’s Manual provides 
complete descriptions of the user modes, system in- 
terface examples and detailed descriptions of all 
principles of operation. It also contains the full list of 
software algorithm flowcharts, and a brief section on 
compatibility with the Intel 28F008SA. 


1.1 Product Overview 

The 28F016SA is a high-performance, 16-Mbit 
(16,777,216-bit) block erasable non-volatile random 
access memory organized as either 1 MWord x 1 6 or 
2 MByte x 8. The 28F016SA includes thirty-two 
64-KB (65,536) blocks or thirty-two 32-KW (32,768) 
blocks. A chip memory map is shown in Figure 3. 

The implementation of a new architecture, with 
many enhanced features, will improve the device op- 
erating characteristics and results in greater product 
reliability and ease of use. 

Among the significant enhancements on the 
28F016SA: 

• 3.3V Low Power Capability 

• Improved Write Performance 

• Dedicated Block Write/ Erase Protection 

A 3/5# input pin reconfigures the device internally 
for optimized 3.3V or 5.0V read/write operation. 

The 28F01 6SA will be available in a 56-lead, 1 .8 mm 
thick, 16 mm x 23.7mm SSOP package. This form 
factor and pinout allow for very high board layout 
densities. 

A Command User Interface (CUI) serves as the sys- 
tem interface between the microprocessor or micro- 
controller and the internal memory operation. 

Internal Algorithm Automation allows Byte/Word 
Writes and Block Erase operations to be executed 
using a Two-Write command sequence to the CUI in 
the same way as the 28F008SA 8-Mbit FlashFile 
memory. 


A Superset of commands have been added to the 
basic 28F008SA command-set to achieve higher 
write performance and provide additional capabili- 
ties. These new commands and features include: 

• Page Buffer Writes to Flash 

• Command Queuing Capability 

• Automatic Data Writes during Erase 

• Software Locking of Memory Blocks 

• Two-Byte Successive Writes in 8-Bit Systems 

• Erase All Unlocked Blocks 

Writing of memory data is performed in either byte or 
word increments typically within 6 ju,s, a 33% im- 
provement over the 28F008SA. A Block Erase oper- 
ation erases one of the 32 blocks in typically 0.6 sec, 
independent of the other blocks, which is about 65% 
improvement over the 28F008SA. 

Each block can be written and erased a minimum of 
1 00,000 cycles. Systems can achieve typically 1 mil- 
lion Block Erase Cycles by providing graceful block 
retirement. This technique has already been em- 
ployed in Hard Disk Drive designs. Additionally, wear 
leveling of block erase cycles can be used to mini- 
mize the write/erase time differences across blocks. 

The 28F016SA incorporates two Page Buffers of 
256 bytes (128 words) each to allow page data 
writes. This feature can improve a system write per- 
formance by up to 4 times over previous flash mem- 
ory devices. 

All operations are started by a sequence of Write 
commands to the device. Three Status Registers 
(described in detail later) and a RY/BY# output pin 
provide information on the progress of the requested 
operation. 

While the 28F008SA requires an operation to com- 
plete before the next operation can be requested, 
the 28F016SA allows queuing of the next operation 
while the memory executes the current operation. 
This eliminates system overhead when writing sev- 
eral bytes in a row to the array or erasing several 
blocks at the same time. The 28F016SA can also 
perform write operations to one block of memory 
while performing Erase of another block. 
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The 28F016SA provides user-selectable block lock- 
ing to protect code or data such as Device Drivers, 
PCMCIA card information, ROM-Executable O/S or 
Application Code. Each block has an associated 
non-volatile lock-bit which determines the lock 
status of the block. In addition, the 28F016SA has a 
master Write Protect pin (WP#) which prevents any 
modifications to memory blocks whose lock-bits are 
set. 

The 28F016SA contains three types of Status Reg- 
isters to accomplish various functions: 

• A Compatible Status Register (CSR) which is 
100% compatible with the 28F008SA FlashFile 
memory’s Status Register. This register, when 
used alone, provides a straightforward upgrade 
capability to the 28F016SA from a 28F008SA- 
based design. 

• A Global Status Register (GSR) which informs 
the system of command Queue status, Page 
Buffer status, and overall Write State Machine 
(WSM) status. 

• 32 Block Status Registers (BSRs) which provide 
block-specific status information such as the 
block lock-bit status. 

The GSR and BSR memory maps for Byte-Wide and 
Word-Wide modes are shown in Figures 4a and 4b. 

The 28F016SA incorporates an open drain RY/BY# 
output pin. This feature allows the user to OR-tie 
many RY/BY# pins together in a multiple memory 
configuration such as a Resident Flash Array. 

Other configurations of the RY/BY# pin are en- 
abled via special CUI commands and are described 
in detail in the 28F016SA User’s Manual. 

The 28F016SA also incorporates a dual chip-enable 
function with two input pins, CEq# and CEi#. 
These pins have exactly the same functionality as 
the regular chip-enable pin, CE#, on the 28F008SA. 
For minimum chip designs, CEi# may be tied to 
ground and use CEq# as the chip enable input. The 
28F016SA uses the logical combination of these two 
signals to enable or disable the entire chip. Both 
CEq# and CEi# must be active low to enable the 
device and if either one becomes inactive, the chip 
will be disabled. This feature, along with the open 
drain RY/BY# pin, allows the system designer to 
reduce the number of control pins used in a large 
array of 1 6-Mbit devices. 


The BYTE# pin allows either x8 or x16 read/writes 
to the 28F016SA. BYTE# at logic low selects 8-bit 
mode with address Aq selecting between low byte 
and high byte. On the other hand, BYTE# at logic 
high enables 16-bit operation with address Ai be- 
coming the lowest order address and address Ao is 
not used (don’t care). A device block diagram is 
shown in Figure 1 . 

The 28F016SA is specified for a maximum access 
time of 100 ns (tACc) at 5.0V operation (4.5V to 
5.5V) over the extended temperature range (~45°C 
to + 85°C). A corresponding maximum acesss time 
of 150 ns at 3.3V (3.0V to 3.6V and -45°C to 
+ 85°C) is achieved for reduced power consumption 
applications. 

The 28F016SA incorporates an Automatic Power 
Saving (APS) feature which substantially reduces 
the active current when the device is in static mode 
of operation (addresses not switching). 

In APS mode, the typical Ice current is 1 mA at 5.0V 
(0.8 mA at 3.3V). 

A Deep Power-Down mode of operation is invoked 
when the RP# (called PWD on the 28F008SA) pin 
transitions low. This mode brings the device power 
consumption to less than 3.0 jmA, typically, and pro- 
vides additional write protection by acting as a de- 
vice reset pin during power transitions. A reset time 
of 550 ns is required from RP# switching high until 
outputs are again valid. In the Deep Power-Down 
state, the WSM is reset (any current operation will 
abort) and the CSR, GSR and BSR registers are 
cleared. 

A CMOS Standby mode of operation is enabled 
when either CEq# or CEi# transitions high and 
RP# stays high with all input control pins at CMOS 
levels. In this mode the device typically draws an Ice 
standby current of 70 jmA. 


2.0 DEVICE PINOUT 

The 28F016SA 56L SSOP pinout configuration is 
shown in Figure 2. 
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Figure 1. 28F016SA Block Diagram Architectural Evolution Includes Page 


Buffers, Queue Registers and Extended Status Registers 
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2.1 Lead Descriptions 


Symbol 

Type 

Name and Function 

A 0 

INPUT 

BYTE-SELECT ADDRESS: Selects between high and low byte when 
device is in x8 mode. This address is latched in x8 Data Writes. Not used in 
x16 mode (i.e., the Aq input buffer is turned off when BYTE# is high). 

Ai-A 15 

INPUT 

WORD-SELECT ADDRESSES: Select a word within one 64-KByte block. 
Aq-i 5 selects 1 of 1024 rows, and A-j _i 5 selects 16 of 512 columns. These 
addresses are latched during Data Writes. 

A 16 -A 20 

INPUT 

BLOCK-SELECT ADDRESSES: Select 1 of 32 Erase block. These 
addresses are latched during Data Writes, Erase and Lock-Block 
operations. 

DQq“DQ7 

INPUT/ 

OUTPUT 

LOW-BYTE DATA BUS: Inputs data and commands during CUI write 
cycles. Outputs array, buffer, identifier or status data in the appropriate 
Read mode. Floated when the chip is de-selected or the outputs are 
disabled. 

dq 8 -dq 15 

INPUT/ 

OUTPUT 

HIGH-BYTE DATA BUS: Inputs data during x16 Data-Write operations. 
Outputs array, buffer or identifier data in the appropriate Read mode; not 
used for Status Register reads. Floated when the chip is de-selected or the 
outputs are disabled. 

CE 0 #,CE 1 # 

irSPUT 

CHIP ENABLE INPUTS: Activate the device’s control logic, input buffers, 
decoders and sense amplifiers. With either CEq# or CEi # high, the device 
is de-selected and power consumption reduces to Standby levels upon 
completion of any current Data-Write or Erase operations. Both CEq# and 
CEi * must be low to select the device. 

All timing specifications are the same for both signals. Device Selection 
occurs with the latter falling edge of CEq# or CEi The first rising edge of 
CEq# or CEi # disables the device. 

RP# 

INPUT 

RESET/POWER-DOWN: RP# low places the device in a Deep Power- 
Down state. All circuits that static power, even those circuits enabled in 
standby mode, are turned off. When returning from Deep Power-Down, a 
recovery time of 400 ns is required to allow these circuits to power-up. 

When RP# goes low, any current or pending WSM operation(s) are 
terminated, and the device is reset. All Status Registers return to ready 
(with all status flags cleared). 

OE# 

INPUT 

OUTPUT ENABLE: Gates device data through the output buffers when low. 
The outputs float to tri-state off when OE# is high. 

NOTE: 

CE X # overrides OE#, and OE# overrides WE#. 

WE# 

INPUT 

WRITE ENABLE: Controls access to the CUI, Page Buffers, Data Queue 
Registers and Address Queue Latches. WE# is active low, and latches 
both address and data (command or array) on its rising edge. 

RY/BY# 

OPEN DRAIN 
OUTPUT 

READY/BUSY: Indicates status of the internal WSM. When low, it indicates 
that the WSM is busy performing an operation. RY/BY# high indicates that 
the WSM is ready for new operations (or WSM has completed all pending 
operations), or Erase is Suspended, or the device is in deep power-down 
mode. This output is always active (i.e., not floated to tri-state off when 
OE# or CEq#, CEi # are high), except if a RY/BY# Pin Disable command 
is issued. 
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2.1 Lead Descr 

iptions (Continued) 

Symbol 

Type 

Name and Function 

WP# 

INPUT 

WRITE PROTECT: Erase blocks can be locked by writing a non-volatile lock-bit for 
each block. When WP# is low, those locked blocks as reflected by the Block-Lock 
Status bits (BSR.6), are protected from inadvertent Data Writes or Erases. When 
WP# is high, all blocks can be Written or Erased regardless of the state of the lock- 
bits. The WP# input buffer is disabled when RP# transitions low (deep power-down 
mode). 

BYTE# 

INPUT 

BYTE ENABLE: BYTE# low places device in x8 mode. All data is then input or output 
on DQo_ 7 , and DQs-is float. Address Aq selects between the high and low byte. 
BYTE# high places the device in xl 6 mode, and turns off the Ao input buffer. Address 
Ai then becomes the lowest order address. 


INPUT 

3.3/5.0 VOLT SELECT: 3/5# high configures internal circuits for 3.3V operation. 
3/5# low configures internal circuits for 5.0V operation. 

NOTES: 

Reading the array with 3/5# high in a 5.0V system could damage the device. 
There is a significant delay from 3/5# switching to valid data. 

EH 

SUPPLY 

ERASE/WRITE POWER SUPPLY: For erasing memory array blocks or writing words/ 
bytes/pages into the flash array 

131 

SUPPLY 

DEVICE POWER SUPPLY (3.3V ± 0.3V, 5.0V ± 0.5V): Don’t leave any power pins 
floating. 


SUPPLY 

GROUND FOR ALL INTERNAL CIRCUITRY: Do not leave any ground pins floating. 

OSH 


NO CONNECT: No internal connection to die, lead may be driven or left floating. 
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3.0 MEMORY MAPS 



Figure 3. 28F016SA Memory Map (Byte-Wide Mode) 
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3.1 Extended Status Registers Memory Map 


X8 MODE 





A[20:0] 

1F0006H 


RESERVED 


GSR 



RESERVED 



BSR31 

1F0002H 


RESERVED 


RESERVED 



• 

• 

• 

• 

• 

n i nnn?n 




u » uwuin 



RESERVED 

000006H 

nnnnn^w 


RESERVED 


GSR 

UUuuUJn 

nnnnn ah 


RESERVED 

000003H 

nnnnn?H 


BSRO 


RESERVED 

nnnnn i h 


RESERVED 

uuuuu i n 

nnnnnnn 



uuuuuun 



290541-17 


X16 MODE 





A[20:1] 

F8003H 


RESERVED 


GSR 



RESERVED 



BSR31 

F8001H 


RESERVED 


RESERVED 



• 

• 

9 

9 

9 

9 

0800 1 H 






RESERVED 

nnnnxu 


RESERVED 

uuuuon 


GSR 

00002H 


RESERVED 


BSRO 

0000 1 H 


RESERVED 


RESERVED 

00000H 

290541-18 




Figure 4a. Extended Status Register Memory Figure 4b. Extended Status Register Memory 

Map (Byte-Wide Mode) Map (Word-Wide Mode) 
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4.0 BUS OPERATIONS, COMMANDS AND STATUS REGISTER DEFINITIONS 


4.1 Bus Operations for Word-Wide Mode (BYTE# = Vm) 


Mode 

Notes 

RP# 

CEt# 

CE 0 # 

OE# 

WE# 

Ai 

DQo-15 

RY/BY# 

Read 

1,2,7 

V|H 

V|L 

V|L 

V|L 

V|H 

X 

d out 

X 

Output Disable 

EH 




| 

V|H 

X 

High Z 

X 

Standby 

1 

■ 

■ 


H 




X 



■H 

El 








1 

1 








Deep Power-Down 

1,3 

V| L 

X 

X 

X 

X 

X 

High Z 

Voh 

Manufacturer ID 

4 

V|H 

V|L 

V|L 

V|L 

V|H 

VlL 

0089H 

Voh 

Device ID 

4 

V|H 

V|L 

V|L 

V|L 

V| H 

V|H 

66A0H 

Voh 

Write 

1,5,6 

V|H 

V|L 

V|L 

V| H 

V|L 

X 

Din 

X 


4.2 Bus Operations for Byte- Wide Mode (BYTE# = VyJ 


Mode 

Notes 

RP# 

CEi# 

CE 0 # 

OE# 

WE# 

Ao 

O 

O 

o 

RY/BY# 

Read 



V|L 

V| L 

V| L 

V|H 

X 

Dout 

X 

Output Disable 

1,6,7 

V|H 

V| L 

V|L 

V| H 

V| H 

X 

High Z 

X 

Standby 

1,6,7 

V| H 

V| L 

V|H 

X 

X 

X 

High Z 

X 




V| H 

VlL 









V| H 

V|H 






Deep Power-Down 

1,3 

V| L 

X 

X 

X 

X 

X 

High Z 

Voh 

Manufacturer ID 

4 

V|H 

V|L 

V|L 

V|L 

V|H 

V|L 

89H 

Voh 

Device ID 

4 

V| H 

V| L 

V|L 

V| L 

V| H 

V|H 

AOH 

Voh 

Write 

1,5,6 

V|H 

V| L 

V|L 

V| H 

V| L 

x 

Din 

X 


NOTES: 

1. X can be or V|l for address or control pins except for RY/BY#, which is either Vql or Voh- 

2. RY/BY# output is open drain. When the WSM is ready, Erase is suspended or the device is in deep power-down mode, 
RY/BY# will be at Vqh if it is tied to Vcc through a resistor. RY/BY# at Vqh is independent of OE# while a WSM 
operation is in progress. 

3. RP# at GND ± 0.2V ensures the lowest deep power-down current. 

4. Ao and A-| at Vil provide device manufacturer ID codes in x8 and x16 modes respectively. 

A 0 and A-| at Vih provide device ID codes in x8 and x16 modes respectively. All other addresses are set to zero. 

5. Commands for different Erase operations, Data Write operations or Lock-Block operations can only be successfully 
completed when V PP = V PP h. 

6. While the WSM is running, RY/BY# in Level-Mode (default) stays at Vql until all operations are complete. RY/BY# 
goes to Vqh when the WSM is not busy or in erase suspend mode. 

7. RY/BY# may be at Vql while the WSM is busy performing various operations. For example, a Status Register read 
during a Write operation. 
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4.3 28F008SA— Compatible Mode Command Bus Definitions 


Command 

Notes 

First Bus Cycle 

Second Bus Cycle 

Oper 

Addr 

Data 

Oper 

Addr 

Data 

Read Array 


Write 

X 

FFH 

Read 

AA 

AD 


1 

Write 

X 

90H 

Read 

IA 

ID 

Read Compatible Status Register 

2 


X 



X 

CSRD 

Clear Status Register 

3 


X 

50H 




Word/ Byte Write 



X 

40 H 

Write 

WA 

WD 

Alternate Word/ Byte Write 


Write 

X 

10H 

Write 

WA 

WD 

Block Erase/Confirm 



X 

20H 

Write 

BA 

DOH 

Erase Suspend/ Resume 


Write 

X 

BOH 

Write 

X 

DOH 


ADDRESS 

AA = Array Address 
BA = Block Address 
IA = Identifier Address 
WA = Write Address 
X = Don’t Care 


DATA 

AD = Array Data 
CSRD = CSR Data 
ID = Identifier Data 
WD = Write Data 


NOTES: 

1. Following the Intelligent Identifier command, two Read operations access the manufacturer and device signature codes. 

2. The CSR is automatically available after device enters Data Write, Erase, or Suspend operations. 

3. Clears CSR.3, CSR.4 and CSR.5. Also clears GSR.5 and all BSR.5 and BSR.2 bits. 

See Status Register definitions. 
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4.4 28F016SA — Performance Enhancement Command Bus Definitions 


Command 

Mode 




Third Bus Cycle 

Oper 

Addr 

Data 

Oper 

Addr 

Data 

Oper 

Addr 

Data 

Read Extended 
Status Register 


■ 

Write 

X 

71 H 

Read 

RA 

GSRD 

BSRD 

■ 

■ 


Page Buffer Swap 


7 










Read Page Buffer 



Write 

X 




PD 




Single Load to 
Page Buffer 

■ 


Write 


m 

|g 



■ 

■ 


Sequential Load 
to Page Buffer 

wm 



X 

EOH 

Write 

X 

BCL 


X 

BCH 

x16 



X 

EOH 

Write 

X 

WCL 



WCH 

Page Buffer 
Write to Flash 

x8 



X 

OCH 

Write 


BBI’f 




x16 



X 

OCH 

Write 

n 


ES3 



Two-Byte Write 


3 

Hi 

X 

FBH 

Write 


iwsiwiii 

Write 

WA 

WD(H,L) 

Lock Block/Confirm 




X 



BA 

DOH 




Upload Status 
Bits/Confirm 



Write 

X 



X 

DOH 




Upload Device 
Information 




X 



H 

DOH 




Erase All Unlocked 
Blocks/Confirm 



Write 

X 



H 

DOH 




RY/BY# Enable 
to Level-Mode 


8 

Write 

X 



H 




■ 

RY/BY# Pulse- 
On-Write 



Write 

X 


m2 

H 





RY/BY# Pulse- 
On-Erase 


8 

Write 

X 

96H 

Hjgj| 

H 

03H 




RY/BY# Disable 


8 

Write 





04H 




Sleep 



Write 

X 

FOH 







Abort 



Write 

X 

80H 








ADDRESS 

BA = Block Address 
PA = Page Buffer Address 
RA = Extended Register Address 
WA = Write Address 
X = Don’t Care 


DATA 

AD = Array Data WC (L,H) = Word Count (Low, High) 

PD = Page Buffer Data BC (L,H) = Byte Count (Low, High) 

BSRD = BSR Data WD (L,H) = Write Data (Low, High) 

GSRD = GSR Data 
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NOTES: 

1 . RA can be the GSR address or any BSR address. See Figures 4a and 4b for Extended Status Register Memory Maps. 

2. Upon device power-up, all BSR lock-bits come up locked. The Upload Status Bits command must be written to reflect the 
actual lock-bit status. 

3. Aq is automatically complemented to load second byte of data. BYTE# must be at V||_. 

Aq value determines which WD/BC is supplied first: Aq = 0 looks at the WDL/BCL, Ao = 1 looks at the WDH/BCH. 

4. BCH/WCH must be at 00H for this product because of the 256-byte (128-word) Page Buffer size, and to avoid writing the 
Page Buffer contents to more than one 256-byte segment within an array block. They are simply shown for future Page 
Buffer expandability. 

5. In x16 mode, only the lower byte DQ 0 _7 is used for WCL and WCH. The upper byte DQs-is is a don’t care. 

6. PA and PD (whose count is given in cycles 2 and 3) are supplied starting in the 4th cycle, which is not shown. 

7. This command allows the user to swap between available Page Buffers (0 or 1 ). 

8. These commands reconfigure RY/BY# output to one of two pulse-modes or enable and disable the RY/BY# function. 

9. Write address, WA, is the Destination address in the flash array which must match the Source address in the Page 
Buffer. Refer to the 28F016SA User’s Manual. 

10. BCL = 00H corresponds to a Byte count of 1. Similarly, WCL = 00H corresponds to a Word count of 1. 


4.5 Compatible Status Register 


WSMS 

ESS 

ES 

DWS 

VPPS 

R 

R 

R 

7 

6 

5 

4 

3 

2 

1 

0 


NOTES: 

CSR.7 = WRITE STATE MACHINE STATUS RY/BY# output or WSMS bit must be checked to determine 
1 = Ready completion of an operation (Erase Suspend, Erase, or Data 

0 = Busy Write) before the appropriate Status bit (ESS, ES or DWS) is 

checked for success. 

CSR.6 = ERASE-SUSPEND STATUS 

1 = Erase Suspended 

0 = Erase In Progress/Completed 

CSR.5 = ERASE STATUS If DWS and ES are set to “1 ” during an erase attempt, an 

1 = Error In Block Erasure improper command sequence was entered. Clear the CSR 

0 = Successful Block Erase and attempt the operation again. 

CSR.4 = DATA-WRITE STATUS 

1 = Error in Data Write 

0 = Data Write Successful 

The VPPS bit, unlike an A/D converter, does not provide 
continuous indication of Vpp level. The WSM interrogates 
Vpp’s level only after the Data-Write or Erase command 
sequences have been entered, and informs the system if 
Vpp has not been switched on. VPPS is not guaranteed to 
report accurate feedback between Vppi_ and Vppn- 

CSR. 2-0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when polling the CSR. 


CSR.3 = Vpp STATUS 
1 = Vpp Low Detect, Operation Abort 
0 = Vpp OK 
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4.6 Global Status Register 


WSMS 

OSS 

DOS 

DSS 

QS 

PBAS 

PBS 

PBSS 

7 

6 

5 

4 

3 

2 

1 

0 


GSR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 
0 = Busy 

NOTES: 

1 . RY/BY # output or WSMS bit must be checked to 
determine completion of an operation (Block Lock, 
Suspend, any RY/BY# reconfiguration, Upload Status 
Bits, Erase or Data Write) before the appropriate Status 
bit (OSS or DOS) is checked for success. 

GSR.6 = OPERATION SUSPEND STATUS 
1 = Operation Suspended 
0 = Operation in Progress/Completed 


GSR.5 = DEVICE OPERATION STATUS 
1 = Operation Unsuccessful 
0 = Operation Successful or Currently 
Running 


GSR.4 = DEVICE SLEEP STATUS 
1 = Device in Sleep 
0 = Device Not in Sleep 


MATRIX 5/4 

0 0 = Operation Successful or Currently 
Running 

0 1 = Device in Sleep mode or Pending 

Sleep 

10 = Operation Unsuccessful 

1 1 = Operation Unsuccessful or 

Aborted 

If operation currently running, then GSR.7 = 0. 
If device pending sleep, then GSR.7 = 0. 

Operation aborted: Unsuccessful due to Abort 
command. 

GSR.3 = QUEUE STATUS 
1 = Queue Full 
0 = Queue Available 


GSR.2 = PAGE BUFFER AVAILABLE STATUS 
1 = One or Two Page Buffers Available 
0 = No Page Buffer Available 

The device contains two Page Buffers. 

GSR.1 = PAGE BUFFER STATUS 
1 = Selected Page Buffer Ready 

0 = Selected Page Buffer Busy 

GSR.O = PAGE BUFFER SELECT STATUS 

1 = Page Buffer 1 Selected 
0 = Page Buffer 0 Selected 

Selected Page Buffer is currently busy with WSM 
operation. 


NOTE: 

1. When multiple operations are queued, checking BSR.7 only provides indication of completion for that particular block. 
GSR.7 provides indication when all queued operations are completed. 
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4.7 Block Status Register 


BS 

BLS 

BOS 

BOAS 

QS 

VPPS 

VPPL 

R 

7 

6 

5 

4 

3 

2 

1 

0 


BSR.7 = BLOCK STATUS 
1 = Ready 
0 = Busy 

NOTES: 

1. RY/BY# output or BS bit must be checked to 
determine completion of an operation (Block Lock, 
Suspend, Erase or Data Write) before the appropriate 
Status bits (BOS, BLS) is checked for success. 

BSR.6 = BLOCK-LOCK STATUS 
1 = Block Unlocked for Write/Erase 
0 = Block Locked for Write/ Erase 


BSR.5 = BLOCK OPERATION STATUS 
1 = Operation Unsuccessful 

0 = Operation Successful or Currently Running 

BSR.4 = BLOCK OPERATION ABORT STATUS 

1 = Operation Aborted 

0 = Operation Not Aborted 

The BOAS bit will not be set until BSR.7 = 1. 

MATRIX 5/4 

0 0 = Operation Successful or 

Currently Running 
01= Not a Valid Combination 
10 = Operation Unsuccessful 

1 1 = Operation Aborted 

Operation halted via Abort Command. 

BSR.3 = QUEUE STATUS 
1 = Queue Full 
0 = Queue Available 


BSR.2 = V PP STATUS 
1 = Vpp Low Detect, Operation Abort 
0 = Vpp OK 



NOTE: 

BSR.1-0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when polling the BSRs. 

1. When multiple operations are queued, checking BSR.7 only provides indication of completion for that particular block. 
GSR.7 provides indication when all queued operations are completed. 




3-417 








28F016SA 


iny 


* WARNING: Stressing the device beyond the " Absolute 
Maximum Ratings ” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“ Operating Conditions ” is not recommended and ex- 
tended exposure beyond the “Operating Conditions " 
may affect device reliability. 


EXTENDED TEMPERATURE OPERATING CONDITIONS 


Vcc = 3.3V - 0.3V Systems 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 

Test Conditions 

Ta 

Operating Temperature, 
Extended Temperature 

1 

-40 

85 

°C 

Ambient Temperature 

Vcc 

Vcc w *th Respect to GND 

2 

BIS 

7.0 

V 


Vpp 

Vpp Supply Voltage with 
Respect to GND 

|| 

Eg] 

14.0 

V 


V 

Voltage on any Pin (except Vcc. Vpp) 
with Respect to GND 

H 


V CC + 0.5 

V 


1 

Current into any Non-Supply Pin 



±30 

mA 


■out 

Output Short Circuit Current 

4 


100 




5.0 ELECTRICAL SPECIFICATIONS 

5.1 Absolute Maximum Ratings* 

Temperature under Bias -40°C to + 85°C 

Storage Temperature - 65°C to + 1 25°C 


NOTICE: This data sheet contains information on 
products in the sampling and initial production phases 
of development. The specifications are subject to 
change without notice. Verify with your local Intel 
Sales office that you have the latest data sheet be- 
fore finalizing a design. 


Vcc = 5.0V ± 0.5V Systems 


Symbol 

Parameter 





Test Conditions 


Operating Temperature, 
Extended Temperature 

1 

-40 



Ambient Temperature 


Vcc with Respect to GND 

2 

B9 

Bi 

■■ 


Vpp 

Vpp Supply Voltage with Respect to GND 



nu 

mm 


V 

Voltage on any Pin (except Vcc. Vpp) 
with Respect to GND 

H 


7.0 

V 


H 

Current into any Non-Supply Pin 



±30 

mA 


■out 

Output Short Circuit Current 

4 


100 

mA 



NOTES: 

1. Operating temperature is for extended temperature product defined by this specification. 

2. Minimum DC voltage is -0.5V on input/output pins. During transitions, this level may undershoot to -2.0V for periods 
<20 ns. Maximum DC voltage on input/output pins is Vcc + 0.5V which, during transitions, may overshoot to Vcc + 
2.0V for periods <20 ns. 

3. Maximum DC voltage on Vpp may overshoot to + 14.0V for periods <20 ns. 

4. Output shorted for no more than one second. No more than one output shorted at a time. 
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5.2 Capacitance 

For a 3.3V ± 0.3V System: 


Symbol 

Parameter 

Notes 

Typ 

Max 

Units 

Test Conditions 

C|N 

Capacitance Looking into an 
Address/Control Pin 

1 

6 

8 

PF 

T a = 25°C,f = 1.0 MHz 

Gout 

Capacitance Looking into an 
Output Pin 

1 

8 

12 

PF 

T a = 25°C,f = 1.0 MHz 

Cload 

Load Capacitance Driven by 
Outputs for Timing Specifications 


■ 

50 

PF 

For Vqc = 3.3V ± 0.3V 


Equivalent Load Timing Circuit 



2.5 

ns 

50ft Transmission 
Line Delay 


For 5.0V ± 0.5V System: 


Symbol 

Parameter 

Notes 




Test Conditions 

C|N 

Capacitance Looking into 
an Address/Control Pin 

1 



PF 


C OUT 

Capacitance Looking 
into an Output Pin 

1 



PF 


Cload 

Load Capacitance Driven by 
Outputs for Timing Specifications 

1 

■ 


PF 

ForVcc = 5.0V ±0.5V 


Equivalent Testing Load Circuit 


■ 

2.5 

ns 

25ft Transmission 
Line Delay 


NOTE: 

1. Sampled, not 100% tested. 
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5.3 Timing Nomenclature 

All 3.3V system timings are measured from where signals cross 1 .5V. 

For 5.0V systems use the standard JEDEC cross point definitions. 

Each timing parameter consists of 5 characters. Some common examples are defined below: 

*CE *ELQV time(t) from CE# (E) going low (L) to the outputs (Q) becoming valid (V) 
tOE tGLQV time(t) from OE# (G) going low (L) to the outputs (Q) becoming valid (V) 
tACC tAVQV time(t) from address (A) valid (V) to the outputs (Q) becoming valid (V) 

Us tAVWH time(t) from address (A) valid (V) to WE# (W) going high (H) 

tDH tWHDX time(t) from WE# (W) going high (H) to when the data (D) can become undefined (X) 



Pin Characters 


Pin States 

A 

Address Inputs 

H 

High 

D 

Data Inputs 

L 

Low 

Q 

Data Outputs 

V 

Valid 

E 

CE# (Chip Enable) 

X 

Driven, but Not Necessarily Valid 

F 

BYTE# (Byte Enable) 

Z 

High Impedance 

G 

OE# (Output Enable) 



W 

WE# (Write Enable) 



P 

RP# (Deep Power-Down Pin) 



R 

RY/BY# (Ready Busy) 



V 

Any Volltage Level 



Y 

3/5# Pin (28F016SA Only) 



5V 

Vqc at 4.5V Minimum 



3V 

Vqc at 3.0V Minimum 




i 
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INPUT Y TEST POINTS <* X OUTPUT 

0.45 — s 5 

290541 -5 

AC test inputs are driven at Vqh (2.4 VTTL) for a Logic “1” and Vql (0-45 VTTL) for a Logic “0.” Input timing begins at 
V|h (2.0 VTTL) and V||_ (0.8 VTTL). Output timing ends, at V|h and V||_. Input rise and fall times (10% to 90%) <10 ns. 


Figure 5. Transient Input/Output Reference Waveform (Vcc = 5.0V ± 10%) 
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AC test inputs are driven at 3.0V for a Logic “1” and 0.0V for a Logic “0.” Input timing begins, and output timing ends, at 
1.5V. Input rise and fall times (10% to 90%) <10 ns. 


Figure 6. Transient Input/Output Reference Waveform (Vcc = 3.3V ± 0.3V) 
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Figure 7. Transient Equivalent Testing Load Circuit (Vcc = 5.0V ± 10%) 
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Figure 8. Transient Equivalent Testing Load Circuit (Vcc = 3.3V ± 0.3V) 
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5.4 DC Characteristics: EXTENDED TEMPERATURE OPERATION 


Vcc = 3-3V ± 0.3V, T a = — 40°C to +85°C 


Symbol 

Parameter 





Units 

Test Conditions 

m 

Input Load Current 

■ 


i 



Vcc = Vcc Max, 
Vin = Vcc or GND 


Output Leakage Current 



■ 


jllA 

Vcc = Vcc Max, 
Vin = Vcc ° r gnd 

lees 

Vcc Standby 
Current 

1,5 

1 

70 

250 

/aA 

Vcc = v cc Max, 

CEo^, CE-| #, RP# = Vcc 

± 0.2V 

BYTE#, WP# = V C c ± 0.2V 
or GND ± 0.2V 




i 


■ 

mA 

Vcc = Vcc Max, 
CE 0 #,CE 1 #,RP# = V| H 
BYTE#, WP# = V| H orV|i_ 

•CCD 

Vcc Deep Power- 
Down Current 

1 

■ 

3 

H 


RP# = GND ± 0.2V 
BYTE# = V C c ± 0.2V or 
GND ± 0.2V 

IccrI 

Vcc Read Current 

1,4,5 


30 

40 

mA 

Vcc = Vcc Max 
CMOS:CE 0 #,CE 1 # = GND 
± 0.2V 

BYTE# = GND ± 0.2V or 
V CC ± 0.2V 

Inputs = GND ± 0.2V or 
V CC ± 0.2V 
TTL: CE 0 #,CE 1 # V| L , 

BYTE# V| L orV, H 
INPUTS = V, L or V IH , 
f = 6.67 MHz, Iqut = 0 mA 

Iccr2 

Vcc Read Current 

1,4,5 


15 


mA 

Vcc = Vcc Max 

CMOS:CE 0 #,CE 1 # = GND 
± 0.2V 

BYTE# = GND ± 0.2V or 
V CC ± 0.2V 

Inputs = GND ± 0.2V or 
V CC ± 0.2V 

TTL:CE 0 #,CE 1 # = V| L , 
BYTE# = V| L or V, H 

INPUTS = V, L or V IH , 
f — 4 MHz, Iqut = 0 mA 
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5.4 DC Characteristics: EXTENDED TEMPERATURE OPERATION 


Vcc = 3.3V ± 0.3V, T a = — 40°C to +85°C (Continued) 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

•ccw 

Vqc Write Current 

1 


8 

12 

mA 

Word/Byte Write in Progress 
Vpp = 12.0V ±5% 

•CCE 

Vcc Block Erase 
Current 

1 


6 

12 

mA 

Block Erase in Progress 
Vpp = 12.0V ± 5% 

Icces 

Vcc Erase 
Suspend Current 

1,2 


3 

6 

mA 

CEq#, CE-i # = V|h 
B lock Erase Suspended 

•pps 

ipPR 

Vpp Standby/Read 
Current 

■ 


±1 

BIBB 

jllA 

Vpp ^ Vcc 




/aA 

Vpp > Vcc 

IpPD 

Vpp Deep Power- 
Down Current 

■ 

■ 


H 

juA 

RP# = GND ± 0.2V 

IppW 

Vpp Write Current 

1 


10 

15 

mA 

Vpp = 12.0V ± 5% 
Word/Byte Write in Progress 

•PPE 

Vpp Erase Current 

1 


4 

10 

mA 

Vpp = 12.0V ± 5% 
Block Erase in Progress 


Vpp Erase 
Suspend Current 

1 


65 

200 

juA 

Vpp = Vpph. 

Block Erase Suspended 

WStHk 





0.8 

V 


■ 




■ 

Vcc 
+ 0.3 

V 


| 

Output Low 
Voltage 



■ 

0.4 

V 

Vcc = Vcc Min and 
Iol = 4 mA 

VoH (1) 

Output High 
Voltage 


m 

■ 


V 

Ioh = — 2.0 mA 
Vcc = Vcc Min 

gjgjj 

Vcc 

-0.2 

■ 


V 

•oh = — 1 00 jllA 
Vcc = Vcc Min 

VppL 

Vpp during 
Normal Operations 

3 


■ 


V 


VppH 

Vpp during 
Write/ Erase 
Operations 

3 


12.0 

12.6 

V 


V|_KO 

Vcc Erase/Write 
Lockout Voltage 


1.5 

■ 


V 



NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 3.3V, Vpp = 12.0V, T = 25°C. These currents 
are valid for all product versions (package and speeds). 

2. Icces is specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum 
of Icces and Iccr- 

3. Block Erases, Word/Byte Writes and Lock Block operations are inhibited when Vpp ^ Vppi_ and not guaranteed in the 
range between Vppn(min) and VppL(max). 

4. Automatic Power Savings (APS) reduces Iccr to <1 mA in static operation. 

5. CMOS Inputs are either Vcc ± 0.2V or GND ± 0.2V. TTL Inputs are either Vil or Vih- 
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5.5 DC Characteristics: EXTENDED TEMPERATURE OPERATION 


V C c = 5.0V ± 0.5V, T a = — 40°C to + 85°C 



Parameter 

Notes 




Units 

Test Conditions 

>LI 

Input Load Current 

1 


■ 

H 



>lo 

Output Leakage 
Current 

1 



±10 

juiA 

v cc = v cc Max 
V|N = Vcc or GND 

lees 

Vcc Standby 
Current 

1,5 


70 



V cc == Vqq Max 

CE 0 #, CEi #, RP# = V C c ± 0.2V 
BYTE#, WP# = V C c ± 0.2V 
or GND ± 0.2V 


2 



Vcc “ Vcc Max 
CE 0 #,CE 1 #,RP# = V| H 
BYTE#, WP# = V| H or V| L 

>CCD 

Vcc Deep Power- 
Down Current 

1 


10 

60 

JLtA 

RP# = GND ± 0.2V 
BYTE# = V C c ± 0.2V or 
GND ± 0.2V 

■CCR 1 

Vcc Read Current 

1,4,5 


55 

70 

mA 

Vcc = Vcc Max, 

CMOS: CE 0 # ,CE 1 # = GND ± 0.2V 
BYTE# = GND ± 0.2V or 
V CC ± 0.2V 
Inputs = GND ± 0.2V 
or V C c ± 0 . 2 V 
TTL:CE 0 #,CE 1 # = V !L , 

BYTE# = V| L or V, H 
Inputs = V|LorV|H, 
f = 10 MHz, Iout = 0 mA 

ICCR 2 

Vcc Read Current 

1,4,5 



35 

mA 

Vcc = Vcc Max, 

CMOS: CE 0 #, CEi # = GND ± 0.2V 
BYTE# = GND ± 0.2V or 
V CC ± 0.2V 

Inputs = GND ± 0.2V or 
V CC ± 0.2V 

TTL:CE 0 #,CE 1 # = V, L> 

BYTE# = V, L orV| H 
Inputs = Vil or V|h, 
f — 5 MHz, Iout = 0 mA 
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5.5 DC Characteristics 


Vcc = 5.0V ± 0.5V, T a = — 40°C to + 85°C (Continued) 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

•ccw 

Vcc Write Current 

1 


25 

35 

mA 

Word/Byte in Progress 
Vpp = 12.0V ± 5% 

>CCE 

V C c Erase 
Suspend Current 

1 


18 

25 

mA 

Block Erase in Progress 
Vpp = 12.0V ± 5% 


Vcc Block Erase 
Current 

1,2 


5 

10 

mA 

CE 0 #, CE-J # = V|h 
B lock Erase Suspended 

Ipps 

•PPR 

Vpp Standby/Read 
Current 



± 1 

± 10 

juA 

Vpp ^ Vcc 




■ 

Vpp > Vcc 


Vpp Deep Power- 
Down Current 

1 



H 


RP# = GND ± 0.2V 


Vpp Write Current 

■ 


■ 

SI 


Vpp = 12.0V ± 5% 
Word/Byte Write in Progress 

>PPE 

Vpp Block Erase 
Current 



5 

H 


Vpp = 12.0V ± 5% 
Block Erase in Progress 


Vpp Erase 
Suspend Current 

1 


65 

200 

juA 

Vpp = Vpp(-|, Block 
Erase Suspended 

V|L 

Input Low Voltage 


-0.5 



mm 


V|H 

Input High Voltage 


2.0 


E73I 

M 


V 0 L 

Output Low 
Voltage 





■ 

V CC = v cc Min 
Iol = 5.8 mA 

Voh (1) 

Output High 
Voltage 


0.85 

Vcc 

- 


V 

Ioh = _2 -5 mA 
Vcc = v cc Min 

Voh (2) 

1 < 
°0 

Ioh = — 1 00 /xA 
Vcc = v cc Min 

VppL 

Vpp during Normal 
Operations 

3 

0.0 


6.5 

V 


VppH 

Vpp during 
Write/ Erase 
Operations 


11.4 

12.0 

12.6 

V 


V LKO 

Vcc Write/Erase 
Lockout Voltage 


1.5 



V 



NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, Vpp = 12.0V, T = 25°C. These currents 
are valid for all product versions (package and speeds). 

2. Icces is specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum 
of Icces and Iccr- 

3. Block Erases, Word/Byte Writes and Lock Block operations are inhibited when Vpp ^ Vppi_ and not guaranteed in the 
ranges between Vppn(min), and Vppi_(max). 

4. Automatic Power Saving (APS) reduces Iccr to <3 mA typical in Static operation. 

5. CMOS Inputs are either Vcc - 0.2V or GND ± 0.2V. TTL Inputs are either V|j_ or V|p. 
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5.6 AC Characteristics— Read Only Operations^): EXTENDED TEMPERATURE 
OPERATION 

Vcc = 3.3V ±0.3V, T a = — 45°C to + 85°C 


Versions( 5 ) 

28F016SA-150 



Parameter 

Notes 

Min 

Max 


Read Cycle Time 


150 


ns 


Address to Output Delay 



150 

ns 

m 

CE# to Output Delay 

2,6 


150 

ns 

WSSM 

RP# High to Output Delay 



750 

ns 

l GLQV 

OE# to Output Delay 

2 


50 

ns 

tELQX 

CE# to Output in Low Z 

3,6 

0 


ns 

tEHQZ 

CE# to Output in High Z 

3,6 


55 

ns 


OE # to Output in Low Z 

3 

0 


ns 


OE# to Output in High Z 

3 


40 

ns 

tQH 

Output Hold from Address, CE# or OE# 
Change, Whichever Occurs First 


0 


ns 


BYTE# to Output Delay 

3 


150 

ns 


BYTE# Low to Output in High Z 

3 


40 

ns 

*ELFL 

l ELFH 

CE# Low to BYTE# High or Low 



5 

ns 

For Extended Status Register Reads 

l AVEL 

Adress Setup to CE# Going Low 

3,4 

0 


ns 

tAVGL 

Adress Setup to DE# Going Low 

HI 

0 


ns 
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5.6 AC Characteristics— Read Only Operation^): EXTENDED TEMPERATURE 

OPERATION (Continued) 

Vcc = 5.0V ±0.5V, T a = — 40°C to + 85°C 


Versions( 5 ) 

28F016SA-100 

Units 

Symbol 

Parameter 

Notes 

Min 

Max 

UvA V 

Read Cycle Time 


100 


ns 

*AVQV 

Address to Output Delay 



100 

ns 

*ELQV 

CE# to Output Delay 

2,6 


100 

ns 

tpHQV 

RP# High to Output Delay 



550 

ns 

| 

OE# to Output Delay 

2 


40 

ns 

wmm 

CE# to Output in Low Z 

3,6 

0 


ns 


CE# to Output in High Z 

3,6 


35 

ns 

*GLQX 

OE# to Output in Low Z 

3 

0 


ns 

tGHQZ 

OE# to Output in High Z 

3 


35 

ns 

tQH 

Output Hold from Address, CE# or OE# 
Change, Whichever Occurs First 


0 



■s 

BYTE# to Output Delay 

3 



mgm 

*FLQZ 


3 


30 

ns 

*ELFL 

tELFH 

CE# Low to BYTE# High or Low 

3,6 


5 

ns 

For Extended Status Register Reads 

tAVEL 

Adress Setup to CE # Going Low 

3,4 

0 


ns 

*AVGL 

Adress Setup to DE# Going Low 

3,4 

0 


ns 


NOTES: 

1 . See AC Input/Output Reference Waveforms for timing measurements, Figures 5 and 6. 

2. OE# may be delayed up to tELQV-tGLQV after the falling edge of CE#, without impacting tfr|_QV- 

3. Sampled, not 100% tested. 

4. This timing parameter is used to latch the correct BSR data onto the outputs. 

5. Device speeds are defined as: 

1 00 ns at Vcc = 5.0V equivalent to 
150 ns at V C c = 3.3V 

6. CEx# is defined as the latter of CE 0 # or CE-| # going low, or the first of CEq# or CEi # going high. 
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Figure 10. BYTE# Tinning Waveforms 
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5.7 Power-Up and Reset Timings: EXTENDED TEMPERATURE OPERATION 




NOTES: 

CEq#, CEi # and OE# are switched low after Power-Up. 

1 . Minimum of 2 juts is required to meet the specified tpnQv times. 

2. The power supply may start to switch concurrently with RP# going low. 

3. The address access time and RP# high to data valid time are shown for 5V V<x operation. Refer to the AC Characteris- 
tics Read Only Operations 3.3V Vcc operation and ail other speed options. 
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5.8 AC Characteristics for WE# — Controlled Command Write Operations^): 
EXTENDED TEMPERATURE OPERATION 

V C c = 3.3V ± 0.3V, T a = — 40°C to +85°C 


Versions 

28F016SA-150 

Units 

Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

UVAV 

Write Cycle Time 


150 



ns 

WPWH 

Vpp Setup to WE# Going High 

3 

100 



ns 

tpHEL 


7 

480 



ns 


CE# Setup to WE# Going Low 

7 

10 



ns 

*AVWH 

Address Setup to WE# Going High 


75 



ns 

tDVWH 

Data Setup to WE# Going High 

2,6 

75 



ns 

tWLWH 

WE# Pulse Width 


75 



ns 


Data Hold from WE# High 

2 

10 




tWHAX 

Adderss Hold from WE# High 

2 

10 




tWHEH 

CE# Hold from WE# High 

7 

10 



ns 

tWHWL 

WE# Pulse Width High 


75 



ns 

*GHWL 

Read Recovery before Write 


0 



ns 

tWHRL 

WE# High to RY/BY# Going Low 




100 

ns 

tRHPL 

RP# Hold from Valid Status Register (CSR, 
GSR, BSR) Data and RY/BY# High 

3 

0 



ns 

tPHWL 

RP# High Recovery to WE# Going Low 


1 



JLLS 

Emm 







4 QWL 






^9 

tWHQV (1) 

Duration of Word/Byte Write Operation 


5 

9 

(Note 8) 

JUS 

tWHQV (2) 

Duration of Block Erase Operation 

4 

0.3 


12 

sec 
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5.8 AC Characteristics for WE# — Controlled Command Write Operations^): 
EXTENDED TEMPERATURE OPERATION (Continued) 

Vcc = 5.0V ± 0.5V, T a = — 40°C to +85°C 


Versions 

28F016SA-100 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

llfffli 

Write Cycle Time 


100 





Vpp Setup to WE# Going High 

3 




ns 



7 

480 



ns 

*ELWL 

CE# Setup to WE# Going Low 

7 

0 



ns 

*AVWH 

Address Setup to WE# Going High 

2,6 

50 



ns 

tDVWH 

Data Setup to WE# Going High 

2,6 






WE# Pulse Width 


50 



ns 


Data Hold from WE# High 

2 

0 



ns 

E5 

Address Hold from WE# High 

2 

10 



ns 

Hi 

CE# Hold from WE# High 

7 

10 





WE# Pulse Width High 


50 



ns 

KB9I 

Read Recovery before Write 


0 




tWHRL 

WE# High to RY/BY# Going Low 




100 

ns 

tRHPL 

RP# Hold from Valid Status Register (CSR, 
GSR, BSR) Data and RY/BY# High 


0 



m 


RP# High Recovery to WE# Going Low 


1 



■39 

IBSH 

Write Recovery before Read 


80 

1 


ns 


Vpp Hold from Valid Status Register (CSR, 
GSR, BSR) Data and RY/BY# High 

3 

0 



fxS 

*WHQV (1) 

Duration of Word/Byte Write Operation 

4,5 

4.5 

6 

(Note 8) 

fxs 

tWHQV (2) 

Duration of Block Erase Operation 

4 

0.3 


10 

sec 


NOTES: 

1. Read timings during write and erase are the same as for normal read. 

2. Refer to command definition tables for valid address and data values. 

3. Sampled, not 100% tested. 

4. Write/Erase durations are measured to valid Status Register (CSR) Data. 

5. Word/Byte Write operations are typically performed with 1 Programming Pulse. 

6. Address and Data are latched on the rising edge of WE# for all Command Write operations. 

7. CEx# is defined as the latter of CEo# or CE-j # going low, or the first of CE 0 # or CE-| # going high. 

8. This information will be available in a technical paper. Please call Intel’s Application Hotline or your local sales office. 
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Figure 12. AC Waveforms for Command Write Operations 
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5.9 AC Characteristics for CE#— Controlled Command Write Operations^): 
EXTENDED TEMPERATURE OPERATION 

Vcc = 3.3V ±0.3V, T a = — 40°C +85°C 


Versions 

28F0165A-150 

Units 

Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

*AVAV 

Write Cycle Time 





BOI 

tpHWL 

RP# Setup to WE# Going Low 


480 



1 

*VPEH 

Vpp Setup to CE# Going High 

3,7 

100 



ns 

tWLEL 

WE# Setup to CE# Going Low 

7 

0 



ns 

UVEH 

Address Setup to CE# Going High 

2, 6,7 





*DVEH 

Data Setup to CE# Going High 

2, 6, 7 





f ELEH 

CE# Pulse Width 

7 




1 

*EHDX 

Data Hold from CE# High 

mm 

10 



ns 

tEHAX 

Address Hold from CE# High 

2,7 

10 



ns 

tEHWH 

WE# Hold from CE# High 


10 



ns 

feHEL 

CE# Pulse Width High 

7 




ns 

l GHEL 

Read Recovery before Write 


0 



ns 

19 

CE# High to RY/BY# Going Low 

7 



100 

ns 

tRHPL 

RP# Hold from c Valid Status Register (CSR, 
GSR, BSR) Data and RY/BY# High 





ns 

tpHEL 

RP# High Recovery to CE# Going Low 

7 

1 





Write Recovery before Read 





■s 


Vpp Hold from Valid Status Register (CSR, 
GSR, BSR) Data and RY/BY# High 


0 



n 

*EHQV (1) 

Duration of Word/ Byte Write Operation 

4,5 

5 

9 

(Note 8) 

fXS 

tEHQV (2) 

Duration of Block Erase Operation 

4 

0.3 


12 

sec 
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5.9 AC Characteristics for CE# — Controlled Command Write Operations^): 
EXTENDED TEMPERATURE OPERATION (Continued) 

V C c = 5.0V ± 0.5V, T a = — 40°C + 85°C 


Versions 

28F016SA-100 

Units 

Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

tAVAV 

Write Cycle Time 


100 



ns 

tpHWL 

RP# Setup to CE# Going Low 


480 



ns 

tVPEH 

Vpp Setup to CE# Going High 

3,7 

100 



ns 

tWLEL 

WE# Setup to CE# Going Low 

7 

0 



ns 

*AVEH 

Address Setup to CE# Going High 

2,6,7 

50 



ns 

tDVEH 

Data Setup to CE# Going High 

2,6,7 

50 



ns 

*ELEH 

CE# Pulse Width 

7 





*EHDX 

Data Hold from CE# High 

2,7 

0 




!!■ 

Address Hold from CE# High 

2,7 

10 




tEHWH 

WE# Hold from CE# High 


10 



ns 

tEHEL 

CE# Pulse Width High 

7 

50 



ns 

assn 

Read Recovery before Write 


0 



ns 

ISEfli 

CE# High to RY/BY# Going Low 

7 



100 

■ai 


RP# Hold from Valid Status Register (CSR, 
GSR, BSR) Data and RY/BY# High 

3 

0 



El 

tpHEL 

RP# High Recovery to CE # Going Low 

7 

1 



JlS 

tEHGL 

Write Recovery before Read 


80 



ns 


Vpp Hold from Valid Status Register (CSR, 
GSR, BSR) Data and RY/BY# High 





JlS 

*EHQV (1) 

Duration of Word/Byte Write Operation 

4,5 

4.5 

6 

(Note 8) 

JUS 

tEHQV (2) 

Duration of Block Erase Operation 

4 

0.3 


10 

sec 


NOTES: 

1 . Read timings during write and erase are the same as for normal read. 

2. Refer to command definition tables for valid address and data values. 

3. Sampled, not 100% tested. 

4. Write/Erase durations are measured to valid Status Data. 

5. Word/Byte Write operations are typically performed with 1 Programming Pulse. 

6. Address and Data are latched on the rising edge of CE# for all Command Write operations. 

7. CEx# is defined as the latter of CE 0 # or CE-| # going low, or the first of CE 0 # or CE-j # going high. 

8. This information will be available in a technical paper. Please call Intel’s Application Hotline or your local sales office. 
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DEEP WRITE DATA-WRITE OR p^ JA ( DATA _ WR | Tt; ) 0 R AUTOMATED DATA-WRITE WRITE READ EXTENDED READ EXTENDED 

POWER-DOWN ERASE SETUP COMMAND ERASE C0NF)RM COMMAND 0R ERASE DELAY REGISTER COMMAND STATUS REGISTER DATA 



NOTES: 

1. This address string depicts Data-Write/Erase cycles with corresponding verification via ESRD. 

2. This address string depicts Data-Write/Erase cycles with corresponding verification via CSRD. 

3. This cycle is invalid when using CSRD for verification during Data Write/Erase operations. 

4. CEx# is defined as the latter of CEq# or CEi # going low or the first of CEo# or CE-| # going high. 

5. RP# low transition is only to show tRHPU not valid for above Read and Write cycles. 


Figure 13. Alternate AC Waveforms for Command Write Operations 
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5.10 AC Characteristics for WE# — Controlled Page Buffer Write Operations^): 
EXTENDED TEMPERATURE OPERATION 

V C c = 3-3V ± 0.3V, T a = — 40°C to +85°C 


Versions 

28F016SA-150 

Units 

Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

*AVAV 

Write Cycle Time 


150 



ns 

tELWL 

CE# Setup to WE# Going Low 

4 

10 



ns 

UVWL 

Address Setup to WE# Going Low 

3 

0 



ns 


Data Setup to WE# Going High 

2 

50 



ns 


WE# Pulse Width 


75 



ns 



2 

10 



ns 


Address Hold from WE# High 

2 

10 



ns 


CE# Hold from WE# High 

4 

10 



ns 

■1!H 

WE# Pulse Width High 


75 



ns 

tGHWL 

Read Recovery before Write 


0 



ns 

tWHGL 

Write Recovery before Read 


120 



ns 
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5.10 AC Characteristics for WE# — Controlled Page Buffer Write Operations^): 
EXTENDED TEMPERATURE OPERATION (Continued) 

Vcc = 5.0V ± 0.5V, T a = — 40°C to +85°C 


Versions 

28F016SA-100 

Units 

Symbol 

Parameter 

Notes 





Write Cycle Time 


100 



ns 

tELWL 

CE# Setup to WE# Going Low 

4 

0 



ns 

*AVWL 

Address Setup to WE# Going Low 

3 

0 



ns 

tDVWH 

Data Setup to WE# Going High 

2 

50 



ns 

tWLWH 

WE# Pulse Width 


50 



ns 


Data Hold from WE# High 

2 

0 



ns 


Address Hold from WE# High 

2 

10 



ns 

tWHEH 

CE# Hold from WE# High 

4 

10 



ns 


WE# Pulse Width High 


50 



ns 

— 

Read Recovery before Write 


0 



ns 

Id 

Write Recovery before Read 


80 



ns 


NOTES: 

1. These are WE# -controlled write timings, equivalent CE# -controlled write timings apply. 

2. Sampled, not 100% tested. 

3. Address must be valid during the entire WE# low pulse or the entire CE# pulse for CE# -controlled writes. 

4. CEx# is defined as the latter of CEq# or CE-| # going low, or the first of CEq# or CE-j # going high. 
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Figure 14. Page Buffer Write Timing Waveforms 
(Loading Data to the Page Buffer) 


5.1 1 Erase and Word/Byte Write Performance, Cycling Performance and 
Suspend Latency^): EXTENDED TEMPERATURE OPERATION 

Vcc = 3.3V ± 0.3V, Vpp = 12.0V ± 0.6V, T A = -40°C to +85°C 


Symbol 

Parameter 

Notes 

Min 

TypO) 

Max 

Units 

Test Conditions 


Page Buffer Byte Write Time 

1,2,4 


3.26 

Note 6 

jUS 



Page Buffer Word Write Time 

1,2,4 


6.53 

Note 6 

/XS 


tWHRH (1) 

Word/Byte Write Time 

1,2 


9 

Note 6 



tWHRH (2) 

Block Write Time 

1,2 


0.6 

2.1 


Byte Write Mode 

*whrh (3) 

Block Write Time 



0.3 

1.0 

sec 



Block Erase Time 

1,2 


1.5 

12 

sec 



Full Chip Erase Time 

1,2 


48 


sec 



Erase Suspend Latency 
Time to Read 



7.0 


jUS 



Erase Suspend Latency 
Time to Write 



10.0 


jUS 



Erase Cycles 

5 

100,000 

1,000,000 


Cycles 
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5.1 1 Erase and Word/Byte Write Performance, Cycling Performance and 

Suspend LatencyU.3): EXTENDED TEMPERATURE OPERATION (Continued) 

Vcc = 5.0V ± 0.5V, Vpp = 12.0V ± 0.6V, T A = -40°C to +85°C 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 


Page Buffer Byte Write Time 

1,2,4 


2.76 

Note 6 




Page Buffer Word Write Time 

1,2,4 


5.51 

Note 6 



tWHRH (1) 

Word/Byte Write Time 

1,2 


6 

Note 6 

fJLS 


tWHRH (2) 

Block Write Time 

1.2 


0.4 


sec 

Byte Write Mode 

tWHRH (3) 

Block Write Time 

1,2 


0.2 



Word Write Mode 


Block Erase Time 



1.3 





Full Chip Erase Time 

1,2 


41.6 


sec 



Erase Suspend Latency 
Time to Read 


m 


■ 

jULS 



Erase Suspend Latency 
Time to Write 




■ 

flS 



Erase Cycles 

5 

100,000 

1,000,000 





NOTES: 

1. 25°C, Vqc = 3.3V or 5.0V nominal, 10K cycles. 

2. Excludes system-level overhead. 

3. These performance numbers are valid for all speed versions. 

4. This assumes using the full Page Buffer to Write to Flash (256 Bytes or 128 Words). 

5. Typical 1,000,000 cycles performance assumes the application uses block retirement techniques. 

6. This information will be available in a technical paper. Please call Intel’s Application hotline or your local sales office for 
more information. 
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DEVICE NOMENCLATURE/ORDERING INFORMATION 
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D 

T 

2 

8 

F 

0 

1 

6 

CO 

A 

- 


0 

0 


DT = EXTENDED 
56-LEAD SSOP 


J 


ACCESS SPEED 
1 00 ns (5V). 150 ns 


290541-16 


Valid Combinations 


Order Code 

V CC = 3.3V ±0.3V 

Vcc = 5-OV ± 10% 

DT28F016SA 100 

DT28F016SA-150 

DT28F01 6SA-1 00 


ADDITIONAL INFORMATION 



Item 

Order Number 


Commercial Temperature 28F016SA 16 Mbit FlashFile 

290489 


Commercial Temperature 28F016SV SmartVoltage 16 Mbit 

290528 


28F008SA 8 Mbit FlashFile Memory 

290429 

AP-393 

28F01 6SV Compatibility with 28F01 6SA 

292144 


28F016SA User’s Manual 

297372 

AP-377 

28F01 6SA Software Drivers 

292126 

AP-378 

System Optimization Using the Enhanced Features of the 28F016SA 

292127 

AP-375 

Upgrade Considerations from the 28F0008SA to the 28F016SA . 

292124 

AP-357 

Power Supply Solutions for Flash Memory 

292092 

AP-374 

Flash Memory Write Protection Techniques 

292123 


FLASHBuilder Design Resource Utility 

297508 

AP-607 

Multi-Site Layout Planning with Intel’s FlashFileTM Components 
Including ROM Capability 

292159 


Small and Low-Cost Power Supply Solution for Intel’s Flash Memory 
Products 

297534 

ER-33 

ETOXtm Flash Memory Technology— Insight to Intel’s Fourth 
Generation Process Innovation 

294016 


Please check with Intel Literature for availability. 


DATASHEET REVISION HISTORY 


Number 

Description 

001 

Original Version 
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28F008SA 

8-MBIT (1-MBIT x 8) FlashFileTM MEMORY 

Extended Temperature Specifications Included 


m High-Density Symmetrically Blocked ■ 

Architecture 

— Sixteen 64-Kbyte Blocks B 

■ Extended Cycling Capability _ 

— 100,000 Block Erase Cycles 

— 1.6 Million Block Erase 
Cycles per Chip 

■ Automated Byte Write and Block Erase H 

— Command User Interface 

— Status Register ■ 

■ System Performance Enhancements 

— RY/BY # Status Output ■ 

— Erase Suspend Capability 

■ Deep-Powerdown Mode 

— 0.20 jutA Ice Typical 

Intel’s 28F008SA 8-Mbit FlashFileTM Memory is the highest density nonvolatile read/write solution for solid 
state storage. The 28F008SA’s extended cycling, symmetrically blocked architecture, fast access time, write 
automation and low power consumption provide a more reliable, lower power, lighter weight and higher per- 
formance alternative to traditional rotating disk technology. The 28F008SA brings new capabilities to portable 
computing. Application and operating system software stored in resident flash memory arrays provide instant- 
on, rapid execute-in-place and protection from obsolescence through in-system software updates. Resident 
software also extends system battery life and increases reliability by reducing disk drive accesses. 

For high density data acquisition applications, the 28F008SA offers a more cost-effective and reliable alterna- 
tive to SRAM and battery. Traditional high density embedded applications, such as telecommunications, can 
take advantage of the 28F008SA’s nonvolatility, blocking and minimal system code requirements for flexible 
firmware and modular software designs. 

The 28F008SA is offered in 40-lead TSOP (standard and reverse) and 44-lead PSOP packages. Pin assign- 
ments simplify board layout when integrating multiple devices in a flash memory array or subsystem. This 
device uses an integrated Command User Interface and state machine for simplified block erasure and byte 
write. The 28F008SA memory map consists of 16 separately erasable 64-Kbyte blocks. 

Intel’s 28F008SA employs advanced CMOS circuitry for systems requiring low power consumption and noise 
immunity. Its 85 ns access time provides superior performance when compared with magnetic storage media. 
A deep powerdown mode lowers power consumption to 1 ]llW typical thru Vqq, crucial in portable computing, 
handheld instrumentation and other low-power applications. The RP# power control input also provides 
absolute data protection during system powerup/down. 

Manufactured on Intel’s 0.8 micron ETOX process, the 28F008SA provides the highest levels of quality, 
reliability and cost-effectiveness. 


Very High-Performance Read 

— 85 ns Maximum Access Time 

SRAM-Compatible Write Interface 

Hardware Data Protection Feature 

— Erase/Write Lockout during Power 
Transitions 

Industry Standard Packaging 
-40-Lead TSOP, 44-Lead PSOP 

ETOX III Nonvolatile Flash Technology 

— 12V Byte Write/Block Erase 

Independent Software Vendor Support 

— Microsoft* Flash File System (FFS) 


* Microsoft is a trademark of Microsoft Corporation. 


November 1994 

Order Number: 290429-005 
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PRODUCT OVERVIEW 

The 28F008SA is a high-performance 8-Mbit 
(8,388,608 bit) memory organized as 1 Mbyte 
(1,048,576 bytes) of 8 bits each. Sixteen 64-Kbyte 
(65,536 byte) blocks are included on the 28F008SA. 
A memory map is shown in Figure 6 of this specifica- 
tion. A block erase operation erases one of the six- 
teen blocks of memory in typically 1.6 seconds, in- 
dependent of the remaining blocks. Each block can 
be independently erased and written 100,000 cy- 
cles. Erase Suspend mode allows system software 
to suspend block erase to read data or execute 
code from any other block of the 28F008SA. 

The 28F008SA is available in the 40-lead TSOP 
(Thin Small Outline Package, 1 .2 mm thick) and 44- 
lead PSOP (Plastic Small Outline) packages. Pin- 
outs are shown in Figures 2 and 4 of this specifica- 
tion. 

The Command User Interface serves as the inter- 
face between the microprocessor or microcontroller 
and the internal operation of the 28F008SA. 

Byte Write and Block Erase Automation allow 
byte write and block erase operations to be execut- 
ed using a two-write command sequence to the 
Command User Interface. The internal Write State 
Machine (WSM) automatically executes the algo- 
rithms and timings necessary for byte write and 
block erase operations, including verifications, 
thereby unburdening the microprocessor or micro- 
controller. Writing of memory data is performed in 
byte increments typically within 9 jus, an 80% im- 
provement over current flash memory products. Ipp 
byte write and block erase currents are 10 mA 
typical, 30 mA maximum. Vpp byte write and 
block erase voltage is 11.4V to 12.6V. 


intel. 

The Status Register indicates the status of the 
WSM and when the WSM successfully completes 
the desired byte write or block erase operation. 

The RY/BY # output gives an additional indicator of 
WSM activity, providing capability for both hardware 
signal of status (versus software polling) and status 
masking (interrupt masking for background erase, 
for example). Status polling using RY/BY# mini- 
mizes both CPU overhead and system power con- 
sumption. When low, RY/BY# indicates that the 
WSM is performing a block erase or byte write oper- 
ation. RY/BY# high indicates that the WSM is ready 
for new commands, block erase is suspended or the 
device is in deep powerdown mode. 

Maximum access time is 85 ns (tAcc) over the com- 
mercial temperature range (0°C to + 70°C) and over 
Vcc supply voltage range (4.5V to 5.5V and 4.75V to 
5.25V). Ice active current (CMOS Read) is 20 mA 
typical, 35 mA maximum at 8 MHz. 

When the CE# and RP# pins are at Vcc. the Ice 
CMOS Standby mode is enabled. 

A Deep Powerdown mode is enabled when the 
RP# pin is at GND, minimizing power consumption 
and providing write protection. Ice current in deep 
powerdown is 0.20 julA typical. Reset time of 400 ns 
is required from RP# switching high until outputs are 
valid to read attempts. Equivalently, the device has a 
wake time of 1 jms from RP# high until writes to the 
Command User Interface are recognized by the 
28F008SA. With RP# at GND, the WSM is reset 
and the Status Register is cleared. 
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Table 1. Pin Description 


Symbol 

Type 

Name and Function 

A0-A19 

INPUT 

ADDRESS INPUTS for memory addresses. Addresses are internally 
latched during a write cycle. 

DQ0-DQ7 

INPUT/OUTPUT 

DATA INPUT/OUTPUTS: Inputs data and commands during Command 
User Interface write cycles; outputs data during memory array, Status 
Register and Identifier read cycles. The data pins are active high and 
float to tri-state off when the chip is deselected or the outputs are 
disabled. Data is internally latched during a write cycle. 

CE# 

INPUT 

CHIP ENABLE: Activates the device’s control logic, input buffers, 
decoders, and sense amplifiers. CE# is active low; CE# high deselects 
the memory device and reduces power consumption to standby levels. 

RP# 

INPUT 

RESET/DEEP POWERDOWN: Puts the device in deep powerdown 
mode. RP# is active low; RP# high gates normal operation. RP# also 
locks out block erase or byte write operations when active low, providing 
data protection during power transitions. RP# active resets internal 
automation. Exit from Deep Powerdown sets device to read-array mode. 

OE# 

INPUT 

OUTPUT ENABLE: Gates the device’s outputs through the data buffers 
during a read cycle. OE# is active low. 

WE# 

INPUT 

WRITE ENABLE: Controls writes to the Command User Interface and 
array blocks. WE# is active low. Addresses and data are latched on the 
rising edge of the WE# pulse. 

RY/BY# 

OUTPUT 

READY/BUSY#: Indicates the status of the internal Write State 
Machine. When low, it indicates that the WSM is performing a block 
erase or byte write operation. RY/BY# high indicates that the WSM is 
ready for new commands, block erase is suspended or the device is in 
deep powerdown mode. RY/BY# is always active and does NOT float 
to tri-state off when the chip is deselected or data outputs are disabled. 

Vpp 


BLOCK ERASE/BYTE WRITE POWER SUPPLY for erasing blocks of 
the array or writing bytes of each block. 

NOTE: 

With Vpp < Vpplmax. memory contents cannot be altered. 

Vcc 


DEVICE POWER SUPPLY (5V ± 10%, 5V ± 5%) 



GROUND 
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7 L 

A 16 E 

A 15 E 

A u C 

A 13 E 

a 12 E 

CE# [ 

V CC £ 
VppC 
RP# C 

A 1 1 E 

A ioE 

A g [ 

A 8 E 
M 
A 6 E 


NC 

NC 

WE# 

OE# 

RY/BY# 

dq 7 

DQ 6 

DQ 5 

DQ 4 

V C C 

GND 

GND 

DQ, 

dq 2 

DQ 1 

DQ 0 

A 0 

A 1 


E=q 


;v 


Standard Pinout 


1 



40 

i NC 

2 

CJ 


39 

INC 

3 


38 

1 WE# 

4 



37 

lOE# 

5 



36 

1 RY/BY# 

6 



35 

ZZDDQj 

7 

8 


STANDARD PINOUT 

34 

33 

=]dq 6 

9 


E28F008SA 

32 


10 



31 

r" i Vqq 

1 1 


40 LEAD TSOP 

, 30 

iGNn 

12 

13 


1 0 mm x 20 mm 

29 

28 

1 GND 

=UDQ 3 

14 


TOP VIEW 

27 

lno 2 

15 



26 

i DQ 1 

16 



25 

ino 0 

17 



24 

HZ1A 0 

18 



23 


19 



22 

i a 2 

20 



21 

=* A 3 


Reverse Pinout 


REVERSE PINOUT 
F28F008SA 
40 LEAD TSOP 
1 0 mm x 20 mm 
TOP VIEW 


O 


a 17 
A 1 6 
A 1 5 
A 1 4 
A 1 3 
A 1 2 
CE# 

V CC 

V PP 

RP# 

A 1 1 
A 10 


Figure 2. TSOP Lead Configurations 



28F008SA 


intel 



Figure 3. TSOP Serpentine Layout 

NOTE: 

1. Connect ail Vcc and GND pins of each device to common power supply outputs. DO NOT leave Vcc or GND inputs 
disconnected. 

PRUUMOGOMW I 
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Figure 4. PSOP Lead Configuration 
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Figure 5. 28F008SA Array Interface to lntel386SL Microprocessor Superset through PI Bus 
(Including RY/BY# Masking and Selective Powerdown), for DRAM Backup during System SUSPEND, 
Resident O/S and Applications and Motherboard Solid-State Disk. 
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PRINCIPLES OF OPERATION 

The 28F008SA includes on-chip write automation to 
manage write and erase functions. The Write State 
Machine allows for: 100% TTL-level control inputs; 
fixed power supplies during block erasure and byte 
write; and minimal processor overhead with RAM- 
like interface timings. 

After initial device powerup, or after return from 
deep powerdown mode (see Bus Operations), the 
28F008SA functions as a read-only memory. Manip- 
ulation of external memory-control pins allow array 
read, standby and output disable operations. Both 
Status Register and intelligent identifiers can also be 
accessed through the Command User Interface 
when Vpp = Vppi_. 

This same subset of operations is also available 
when high voltage is applied to the Vpp pin. In addi- 
tion, high voltage on Vpp enables successful block 
erasure and byte writing of the device. All functions 
associated with altering memory contents — byte 
write, block erase, status and intelligent identifier- 
are accessed via the Command User Interface and 
verified thru the Status Register. 

Commands are written using standard microproces- 
sor write timings. Command User Interface contents 
serve as input to the WSM, which controls the block 
erase and byte write circuitry. Write cycles also inter- 
nally latch addresses and data needed for byte write 
or block erase operations. With the appropriate com- 
mand written to the register, standard microproces- 
sor read timings output array data, access the intelli- 
gent identifier codes, or output byte write and block 
erase status for verification. 

Interface software to initiate and poll progress of in- 
ternal byte write and block erase can be stored in 
any of the 28F008SA blocks. This code is copied to, 
and executed from, system RAM during actual flash 
memory update. After successful completion of byte 
write and/or block erase, code/data reads from the 
28F008SA are again possible via the Read Array 
command. Erase suspend/resume capability allows 
system software to suspend block erase to read 
data and execute code from any other block. 


FFFFF 

F0000 
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DFFFF 

D0000 

CFFFF 
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BFFFF 
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AFFFF 
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9FFFF 
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4FFFF 

40000 
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00000 
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64-Kbyte Block 

64-Kbyte Block 

64-Kbyte Block 

64-Kbyte Block 
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64-Kbyte Block 

64-Kbyte Block 

64-Kbyte Block 



Figure 6. Memory Map 


Command User Interface and Write 
Automation 

An on-chip state machine controls block erase and 
byte write, freeing the system processor for other 
tasks. After receiving the Erase Setup and Erase 
Confirm commands, the state machine controls 
block pre-conditioning and erase, returning progress 
via the Status Register and RY/BY# output. Byte 
write is similarly controlled, after destination address 
and expected data are supplied. The program and 
erase algorithms of past Intel flash memories are 
now regulated by the state machine, including pulse 
repetition where required and internal verification 
and margining of data. 
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Data Protection 

Depending on the application, the system designer 
may choose to make the Vpp power supply switcha- 
ble (available only when memory byte writes/block 
erases are required) or hardwired to Vppn- When 
Vpp = VppL, memory contents cannot be altered. 
The 28F008SA Command User Interface architec- 
ture provides protection from unwanted byte write or 
block erase operations even when high voltage is 
applied to Vpp. Additionally, all functions are dis- 
abled whenever Vqq is below the write lockout volt- 
age V|_ko» or when RP# is at V|[_. The 28F008SA 
accommodates either design practice and encour- 
ages optimization of the processor-memory inter- 
face. 

The two-step byte write/block erase Command User 
Interface write sequence provides additional soft- 
ware write protection. 


The first task is to write the appropriate read mode 
command to the Command User Interface (array, in- 
telligent identifier, or Status Register). The 
28F008SA automatically resets to Read Array mode 
upon initial device powerup or after exit from deep 
powerdown. The 28F008SA has four control pins, 
two of which must be logically active to obtain data 
at the outputs. Chip Enable (CE#) is the device se- 
lection control, and when active enables the select- 
ed memory device. Output Enable (OE#) is the data 
input/output (DQ 0 -DQ 7 ) direction control, and when 
active drives data from the selected memory onto 
the I/O bus. RP# and WE# must also be at V|h- 
Figure 1 0 illustrates read bus cycle waveforms. 


Output Disable 

With OE# at a logic-high level (Vm), the device out- 
puts are disabled. Output pins (DQ 0 -DQ 7 ) are 
placed in a high-impedance state. 


BUS OPERATION 

Flash memory reads, erases and writes in-system 
via the local CPU. All bus cycles to or from the flash 
memory conform to standard microprocessor bus 
cycles. 


Read 

The 28F008SA has three read modes. The memory 
can be read from any of its blocks, and information 
can be read from the intelligent identifier or Status 
Register. Vpp can be at either Vppi_ or Vppn- 


Standby 

CE# at a logic-high level (Vm) places the 28F008SA 
in standby mode. Standby operation disables much 
of the 28F008SA’s circuitry and substantially reduc- 
es device power consumption. The outputs (DQo- 
DQ 7 ) are placed in a high-impedence state indepen- 
dent of the status of OE#. If the 28F008SA is dese- 
lected during block erase or byte write, the device 
will continue functioning and consuming normal ac- 
tive power until the operation completes. 


Table 2. Bus Operations 


Mode 

Notes 

RP# 

CE# 

OE# 

WE# 

Ao 

Vpp 

0 

0 

0 

RY/BY# 

Read 

1,2,3 

V|H 

V| L 

V,L 

V|H 

X 

X 

d out 

X 

Output Disable 

3 

V| H 

V|L 

V|H 

V|H 

X 

X 

High Z 

X 

Standby 

3 

V|H 

V|H 

X 

X 

X 

X 

High Z 

X 

Deep PowerDown 


V|L 

X 

X 

X 

X 



■jSjflj 

Intelligent Identifier (Mfr) 


V| H 

V|L 



VlL 



■ ■ 

Intelligent Identifier (Device) 






Vih 


A2H 

VoH 

Write 

3, 4,5 

V|H 

V| L 

V|H 

V| L 

X 

X 

Din 

X 


NOTES: 

1 . Refer to DC Characteristics. When Vpp = Vppi_, memory contents can be read but not written or erased. 

2. X can be V||_ or Vih for control pins and addresses, and Vppi_ or Vppn for Vpp. See DC Characteristics for Vppi_ and Vppn 
voltages. 

3. RY/BY# is Vql when the Write State Machine is executing internal block erase or byte write algorithms. It is Vqh when 
the WSM is not busy, in Erase Suspend mode or deep powerdown mode. 

4. Command writes involving block erase or byte write are only successfully executed when Vpp = Vppn- 

5. Refer to Table 3 for valid Din during a write operation. 
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Deep Power-Down 

The 28F008SA offers a deep power-down feature, 
entered when RP# is at V||_. Current draw thru Vcc 
is 0.20 julA typical in deep power-down mode, with 
current draw through Vpp typically 0.1 /xA. During 
read modes, RP#-low deselects the memory, 
places output drivers in a high-impedence state and 
turns off all internal circuits. The 28F008SA requires 
time tpHQv (see AC Characteristics-Read-Only Op- 
erations) after return from powerdown until initial 
memory access outputs are valid. After this wakeup 
interval, normal operation is restored. The Com- 
mand User Interface is reset to Read Array, and the 
upper 5 bits of the Status Register are cleared to 
value 10000, upon return to normal operation. 

During block erase or byte write modes, RP# low 
will abort either operation. Memory contents of the 
block being altered are no longer valid as the data 
will be partially written or erased. Time tpnwL after 
RP# goes to logic-high (Vm) is required before an- 
other command can be written. 

This use of RP# during system reset is important 
with automated write/erase devices. When the sys- 
tem comes out of reset it expects to read from the 
flash memory. Automated flash memories provide 


Table 3. Command Definitions 


Command 

Bus 

Cycles 

Req’d 

Notes 

First Bus Cycle 

Second Bus Cycle 

Operation 

Address 

Data 

Operation 

Address 

Data 

Read Array/ Reset 

1 

1 


X 

I35H1 




Intelligent Identifier 

3 

mi 

Write 

X 

Kim 


IA 

Hf*! 

Read Status Register 

2 

3 


X 



X 

lijM 

Clear Status Register 

1 



X 





Erase Setup/ Erase Confirm 

2 


Write 

BA 



BA 


Erase Suspend/Erase Resume 

2 


Write 

X 



X 


Byte Write Setup/Write 

2 


Write 

WA 

40H 




Alternate Byte Write Setup/Write 

2 


Write 

WA 

10H 

Write 

WA 



status information when accessed during write/ 
erase modes. If a CPU reset occurs with no flash 
memory reset, proper CPU initialization would not 
occur because the flash memory would be providing 
the status information instead of array data. Intel’s 
Flash Memories allow proper CPU initialization fol- 
lowing a system reset through the use of the RP# 
input. In this application RP# is controlled by the 
same RESET # signal that resets the system CPU. 


Intelligent Identifier Operation 

The intelligent identifier operation outputs the manu- 
facturer code, 89H; and the device code, A2H for 
the 28F008SA. The system CPU can then automati- 
cally match the device with its proper block erase 
and byte write algorithms. 

The manufacturer- and device-codes are read via 
the Command User Interface. Following a write of 
90H to the Command User Interface, a read from 
address location 00000H outputs the manufacturer 
code (89H). A read from address 00001 H outputs 
the device code (A2H). It is not necessary to have 
high voltage applied to Vpp to read the intelligent 
identifiers from the Command User Interface. 


NOTES: 

1. Bus operations are defined in Table 2. 

2. IA = Identifier Address: 00H for manufacturer code, 01 H for device code. 

BA = Address within the block being erased. 

WA = Address of memory location to be written. 

3. SRD = Data read from Status Register. See Table 4 for a description of the Status Register bits. 

WD = Data to be written at location WA. Data is latched on the rising edge of WE#. 

IID = Data read from Intelligent Identifiers. 

4. Following the Intelligent Identifier command, two read operations access manufacture and device codes. 

5. Either 40H or 10H are recognized by the WSM as the Byte Write Setup command. 

6. Commands other than those shown above are reserved by Intel for future device implementations and should not be 
used. 
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Write 

Writes to the Command User Interface enable read- 
ing of device data and Intelligent Identifiers. They 
also control inspection and clearing of the Status 
Register. Additionally, when Vpp = Vppn, the Com- 
mand User Interface controls block erasure and byte 
write. The contents of the interface register serve as 
input to the internal state machine. 

The Command User Interface itself does not occupy 
an addressable memory location. The interface reg- 
ister is a latch used to store the command and ad- 
dress and data information needed to execute the 
command. Erase Setup and Erase Confirm com- 
mands require both appropriate command data and 
an address within the block to be erased. The Byte 
Write Setup command requires both appropriate 
command data and the address of the location to be 
written, while the Byte Write command consists of 
the data to be written and the address of the loca- 
tion to be written. 

The Command User Interface is written by bringing 
WE# to a logic-low level (V||_) while CE# is low. 
Addresses and data are latched on the rising edge 
of WE#. Standard microprocessor write timings are 
used. 


COMMAND DEFINITIONS 

When Vppi_ is applied to the Vpp pin, read opera- 
tions from the Status Register, intelligent identifiers, 
or array blocks are enabled. Placing Vppn on Vpp 
enables successful byte write and block erase oper- 
ations as well. 

Device operations are selected by writing specific 
commands into the Command User Interface. Table 
3 defines the 28F008SA commands. 


Read Array Command 

Upon initial device powerup and after exit from deep 
powerdown mode, the 28F008SA defaults to Read 
Array mode. This operation is also initiated by writing 
FFH into the Command User Interface. Microproces- 
sor read cycles retrieve array data. The device re- 
mains enabled for reads until the Command User 
Interface contents are altered. Once the internal 
Write State Machine has started a block erase or 
byte write operation, the device will not recognize 
the Read Array command, until the WSM has com- 
pleted its operation. The Read Array command is 
functional when Vpp = Vppi_ or Vppn- 


Refer to AC Write Characteristics and the AC Wave- 
forms for Write Operations, Figure 11, for specific 
timing parameters. 


Table 4. Status Register Definitions 


WSMS 

ESS 

ES 

BWS 

VPPS 

R 

R 

R 

7 

6 

5 

4 

3 

2 

1 

0 


SR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 

0 = Busy 

SR. 6 = ERASE SUSPEND STATUS 

1 = Erase Suspended 

0 = Erase in Progress/Completed 
SR. 5 = ERASE STATUS 

1 = Error in Block Erasure 

0 = Successful Block Erase 
SR.4 = BYTE WRITE STATUS 

1 = Error in Byte Write 

0 = Successful Byte Write 
SR.3 = Vpp STATUS 

1 = Vpp Low Detect; Operation Abort 
0 = Vpp OK 

SR.2-SR.0 = RESERVED FOR FUTURE 
ENHANCEMENTS 

These bits are reserved for future use and 
should be masked out when polling the Status 
Register. 


NOTES: 

RY/BY# or the Write State Machine Status bit must first 
be checked to determine byte write or block erase com- 
pletion, before the Byte Write or Erase Status bit are 
checked for success. 

If the Byte Write AND Erase Status bits are set to “1”s 
during a block erase attempt, an improper command se- 
quence was entered. Attempt the operation again. 

If Vpp low status is detected, the Status Register must be 
cleared before another byte write or block erase opera- 
tion is attempted. 

The Vpp Status bit, unlike an A/D converter, does not 
provide continuous indication of Vpp level. The WSM in- 
terrogates the Vpp level only after the byte write or block 
erase command sequences have been entered and in- 
forms the system if Vpp has not been switched on. The 
Vpp Status bit is not guaranteed to report accurate feed- 
back between Vppl and Vppn- 
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Intelligent Identifier Command 

The 28F008SA contains an Intelligent Identifier op- 
eration, initiated by writing 90H into the Command 
User Interface. Following the command write, a read 
cycle from address 00000H retrieves the manufac- 
turer code of 89H. A read cycle from address 
00001 H returns the device code of A2H. To termi- 
nate the operation, it is necessary to write another 
valid command into the register. Like the Read Array 
command, the Intelligent Identifier command is func- 
tional when Vpp = Vpp|_ or Vppn- 


Read Status Register Command 

The 28F008SA contains a Status Register which 
may be read to determine when a byte write or block 
erase operation is complete, and whether that oper- 
ation completed successfully. The Status Register 
may be read at any time by writing the Read Status 
Register command (70H) to the Command User In- 
terface. After writing this command, all subsequent 
read operations output data from the Status Regis- 
ter, until another valid command is written to the 
Command User Interface. The contents of the 
Status Register are latched on the falling edge of 
OE# or CE#, whichever occurs last in the read cy- 
cle. OE# or CE# must be toggled to Vm before 
further reads to update the Status Register latch. 
The Read Status Register command functions when 
Vpp = Vppi_ or V PPH . 


Clear Status Register Command 

The Erase Status and Byte Write Status bits are set 
to “1”s by the Write State Machine and can only be 
reset by the Clear Status Register Command. These 
bits indicate various failure conditions (see Table 4). 
By allowing system software to control the resetting 
of these bits, several operations may be performed 
(such as cumulatively writing several bytes or eras- 
ing multiple blocks in sequence). The Status Regis- 
ter may then be polled to determine if an error oc- 
curred during that sequence. This adds flexibility to 
the way the device may be used. 

Additionally, the Vpp Status bit (SR.3) MUST be re- 
set by system software before further byte writes or 
block erases are attempted. To clear the Status 
Register, the Clear Status Register command (50H) 
is written to the Command User Interface. The Clear 
Status Register command is functional when Vpp = 
VppL or Vppn- 


Erase Setup/Erase Confirm 
Commands 

Erase is executed one block at a time, initiated by a 
two-cycle command sequence. An Erase Setup 


command (20H) is first written to the Command User 
Interface, followed by the Erase Confirm command 
(DOH). These commands require both appropriate 
sequencing and an address within the block to be 
erased to FFH. Block preconditioning, erase and 
verify are all handled internally by the Write State 
Machine, invisible to the system. After the two-com- 
mand erase sequence is written to it, the 28F008SA 
automatically outputs Status Register data when 
read (see Figure 8; Block Erase Flowchart). The 
CPU can detect the completion of the erase event 
by analyzing the output of the RY/BY# pin, or the 
WSM Status bit of the Status Register. 

When erase is completed, the Erase Status bit 
should be checked. If erase error is detected, the 
Status Register should be cleared. The Command 
User Interface remains in Read Status Register 
mode until further commands are issued to it. 

This two-step sequence of set-up followed by execu- 
tion ensures that memory contents are not acciden- 
tally erased. Also, reliable block erasure can only 
occur when Vpp = Vppn- In the absence of this high Pi / 
voltage, memory contents are protected against era- 
sure. If block erase is attempted while Vpp = Vpp[_, 
the Vpp Status bit will be set to “1”. Erase attempts 
while Vppi_ < Vpp < VppH produce spurious results 
and should not be attempted. 


Erase Suspend/Erase Resume 
Commands 

The Erase Suspend command allows block erase 
interruption in order to read data from another block 
of memory. Once the erase process starts, writing 
the Erase Suspend command (BOH) to the Com- 
mand User Interface requests that the WSM sus- 
pend the erase sequence at a predetermined point 
in the erase algorithm. The 28F008SA continues to 
output Status Register data when read, after the 
Erase Suspend command is written to it. Polling the 
WSM Status and Erase Suspend Status bits will de- 
termine when the erase operation has been sus- 
pended (both will be set to "1”). RY/BY# will also 
transition to Vqh- 

At this point, a Read Array command can be written 
to the Command User Interface to read data from 
blocks other than that which is suspended. The only 
other valid commands at this time are Read Status 
Register (70H) and Erase Resume (DOH), at which 
time the WSM will continue with the erase process. 
The Erase Suspend Status and WSM Status bits of 
the Status Register will be automatically cleared and 
RY/BY# will return to Vql- After the Erase Resume 
command is written to it, the 28F008SA automatical- 
ly outputs Status Register data when read (see Fig- 
ure 9; Erase Suspend/Resume Flowchart). Vpp 
must remain at Vppn while the 28F008SA is in Erase 
Suspend. 
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Byte Write Setup/Write Commands 
(40H or 10H) 

Byte write is executed by a two-command sequence. 
The Byte Write Setup command (40H or 10H) is writ- 
ten to the Command User Interface, followed by a 
second write specifying the address and data 
(latched on the rising edge of WE#) to be written. 
The WSM then takes over, controlling the byte write 
and write verify algorithms internally. After the two- 
command byte write sequence is written to it, the 
28F008SA automatically outputs Status Register 
data when read (see Figure 7; Byte Write Flowchart). 
The CPU can detect the completion of the byte write 
event by analyzing the output of the RY/BY# pin, or 
the WSM Status bit of the Status Register. Only the 
Read Status Register command is valid while byte 
write is active. 

When byte write is complete, the Byte Write Status 
bit should be checked. If byte write error is detected, 
the Status Register should be cleared. The internal 
WSM verify only detects errors for “1”s that do not 
successfully write to “0”s. The Command User In- 
terface remains in Read Status Register mode until 
further commands are issued to it. If byte write is 
attempted while Vpp = Vpp[_, the Vpp Status bit will 
be set to “1”. Byte write attempts while Vppj_ < Vpp 
< Vpph produce spurious results and should not be 
attempted. 

EXTENDED BLOCK ERASE/BYTE 
WRITE CYCLING 

Intel has designed extended cycling capability into 
its ETOX flash memory technologies. The 
28F008SA is designed for 100,000 byte write/block 
erase cycles on each of the sixteen 64-Kbyte 
blocks. Low electric fields, advanced oxides and 
minimal oxide area per cell subjected to the tunnel- 
ing electric field combine to greatly reduce oxide 
stress and the probability of failure. A 20-Mbyte sol- 
id-state drive using an array of 28F008SAs has a 
MTBF (Mean Time Between Failure) of 33.3 million 
hoursO), over 600 times more reliable than equiva- 
lent rotating disk technology. 

AUTOMATED BYTE WRITE 

The 28F008SA integrates the Quick-Pulse program- 
ming algorithm of prior Intel Flash devices on-chip, 
using the Command User Interface, Status Register 
and Write State Machine (WSM). On-chip integration 
dramatically simplifies system software and provides 
processor interface timings to the Command User 
Interface and Status Register. WSM operation, inter- 
nal verify and Vpp high voltage presence are moni- 
tored and reported via the RY/BY# output and ap- 
propriate Status Register bits. Figure 7 shows a 


intel. 

system software flowchart for device byte write. The 
entire sequence is performed with Vpp at Vppn- Byte 
write abort occurs when RP# transitions to V||_, or 
Vpp drops to Vpp(_. Although the WSM is halted, 
byte data is partially written at the location where 
byte write was aborted. Block erasure, or a repeat of 
byte write, is required to initialize this data to a 
known value. 

AUTOMATED BLOCK ERASE 

As above, the Quick-Erase algorithm of prior Intel 
Flash devices is now implemented internally, includ- 
ing all preconditioning of block data. WSM opera- 
tion, erase success and Vpp high voltage presence 
are monitored and reported through RY/BY# and 
the Status Register. Additionally, if a command other 
than Erase Confirm is written to the device following 
Erase Setup, both the Erase Status and Byte Write 
Status bits will be set to “1”s. When issuing the 
Erase Setup and Erase Confirm commands, they 
should be written to an address within the address 
range of the block to be erased. Figure 8 shows a 
system software flowchart for block erase. 

Erase typically takes 1.6 seconds per block. The 
Erase Suspend/Erase Resume command sequence 
allows suspension of this erase operation to read 
data from a block other than that in which erase is 
being performed. A system software flowchart is 
shown in Figure 9. 

The entire sequence is performed with Vpp at Vppn- 
Abort occurs when RP# transitions to Vil or Vpp 
falls to Vpp|_, while erase is in progress. Block data is 
partially erased by this operation, and a repeat of 
erase is required to obtain a fully erased block. 

DESIGN CONSIDERATIONS 

Three-Line Output Control 

The 28F008SA will often be used in large memory 
arrays. Intel provides three control inputs to accom- 
modate multiple memory connections. Three-line 
control provides for: 

a) lowest possible memory power dissipation 

b) complete assurance that data bus contention will 
not occur 

To efficiently use these control inputs, an address 
decoder should enable CE#, while OE# should be 
connected to all memory devices and the system’s 
READ# control line. This assures that only selected 
memory devices have active outputs while deselect- 
ed memory devices are in Standby Mode. RP# 
should be connected to the system Powergood sig- 
nal to prevent unintended writes during system pow- 
er transitions. Powergood should also toggle during 
system reset. 


(^Assumptions: 10-Kbyte file written every 10 minutes. (20-Mbyte array)/ (10- Kbyte file) = 2,000 file writes before erase required. 
(2000 files writes/erase) x (100,000 cycles per 28F008SA block) = 200 million file writes. 

(200 x 10 6 file writes) x (10 min/write) x (1 hr/60 min) = 33.3 x 10 6 MTBF. 
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RY/BY # and Byte Write/Block Erase 
Polling 

RY/BY# is a full CMOS output that provides a hard- 
ware method of detecting byte write and block erase 
completion. It transitions low time twHRL after a 
write or erase command sequence is written to the 


28F008SA, and returns to Voh when the WSM has 
finished executing the internal algorithm. 

RY/BY# can be connected to the interrupt input of 
the system CPU or controller. It is active at all times, 
not tristated if the 28F008SA CE# or OE# inputs 
are brought to Vm- RY/BY# is also Vqh when the 
device is in Erase Suspend or deep powerdown 
modes. 



Figure 7. Automated Byte Write Flowchart 
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Write 20H, 
Block Address 


Write DOH, 
Block Address 


Full Status 
Check if Desired 


Block Erase 
Completed 


JL Erase Suspend 
Loop 

^Suspend ^^ .1 

V.EraseT/yES 


Bus 

Operation 

Command 

Comments 

Write 

Erase 

Setup 

Data = 20H 

Address = Within block to be 
erased 

Write 

Erase 

Data = DOH 

Address = Within block to be 
erased 

Standby/Read 


Check RY/BY# 
v OH = Ready, Vql = Busy 
or 

Read Status Register 
Check SR.7 
1 = Ready, 0 = Busy 
Toggle OE# or CE# to 
update Status Register 

Repeat for subsequent bytes 


Full status check can be done after each block or after a 
sequence of blocks 

Write FFH after the last block erase operation to reset the 
device to Ready Array Mode 


FULL STATUS CHECK PROCEDURE 


Bus 

Operation 


Optional 

Read 


Command Comments 


CPU may already have read 
Status Register data in WSM 
Ready polling above 


Vpp Range 
Error 


Standby 


Check SR.3 
1 = Vpp Low Detect 


SR. 4, 5= 1 

v ? y 


Command Sequence 
Error 


Standby 


Check SR.4,5 

Both 1 = Command Sequence 
Error 


Block Erase 
Successful 


Block Erase 
Error 


Standby 


Check SR. 5 
1 = Block Erase Error 


SR.3 MUST be cleared, if set during a block erase attempt, 
before further attempts are allowed by the Write State 
Machine 

SR. 5 is only cleared by the Clear Status Register 
Command, in cases where multiple blocks are erased 
before full status is checked. 

. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 8. Automated Block Erase Flowchart 






28F008SA 


Erase Has 
Completed 


Bus 

Operation 

Command 

Comments 

Write 

Erase 

Suspend 

Data = BOH 

Write 

Read 

Status Register 

Data = 70H 

Standby/ 

Read 


Check RY/BY# 
v oh = Ready, Vql = 
Busy or Read Status 
Register 



Check SR.7 
1 = Ready, 0 = Busy 
Toggle OE# or CE# to 
Update Status Register 

Standby 


Check SR.6 
1 = Suspended 

Write 

Read Array 

Data = FFH 

Read 


Read array data from block 
other than that being 
erased. 

Write 

Erase Resume 

Data = DOH 


290429-10 


Figure 9. Erase Suspend/Resume Flowchart 


Power Supply Decoupling 

Flash memory power switching characteristics re- 
quire careful device decoupling. System designers 
are interested in 3 supply current issues; standby 
current levels (Isb). active current levels (Ice) and 
transient peaks produced by falling and rising edges 
of CE#. Transient current magnitudes depend on 
the device outputs’ capacitive and inductive loading. 
Two-line control and proper decoupling capacitor 
selection will suppress transient voltage peaks. 
Each device should have a 0.1 jaF ceramic capacitor 
connected between each Vcc and GND, and be- 
tween its Vpp and GND. These high frequency, low 
inherent-inductance capacitors should be placed as 
close as possible to package leads. Additionally, for 


every 8 devices, a 4.7 jmF electrolytic capacitor 
should be placed at the array’s power supply con- 
nection between Vcc and GND. The bulk capacitor 
will overcome voltage slumps caused by PC board 
trace inductances. 


Vpp Trace on Printed Circuit Boards 

Writing flash memories, while they reside in the tar- 
get system, requires that the printed circuit board 
designer pay attention to the Vpp power supply 
trace. The Vpp pin supplies the memory cell current 
for writing and erasing. Use similar trace widths and 
layout considerations given to the Vcc power bus. 
Adequate Vpp supply traces and decoupling will de- 
crease Vpp voltage spikes and overshoots. 
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Vcc> Vpp, RP# Transitions and the 
Command/Status Registers 

Byte write and block erase completion are not guar- 
anteed if Vpp drops below Vppn- If the Vpp Status bit 
of the Status Register (SR.3) is set to “1”, a Clear 
Status Register command MUST be issued before 
further byte write/block erase attempts are allowed 
by the WSM. Otherwise, the Byte Write (SR.4) or 
Erase (SR.5) Status bits of the Status Register will 
be set to “1 ”s if error is detected. RP# transitions to 
V||_ during byte write and block erase also abort the 
operations. Data is partially altered in either case, 
and the command sequence must be repeated after 
normal operation is restored. Device poweroff, or 
RP# transitions to V||_, clear the Status Register to 
initial value 1 0000 for the upper 5 bits. 

The Command User Interface latches commands as 
issued by system software and is not altered by Vpp 
or CE# transitions or WSM actions. Its state upon 
powerup, after exit from deep powerdown or after 
Vqc transitions below V|_ko> is Read Array Mode. 

After byte write or block erase is complete, even 
after Vpp transitions down to Vpp|_, the Command 
User Interface must be reset to Read Array mode via 
the Read Array command if access to the memory 
array is desired. 


Power Up/Down Protection 

The 28F008SA is designed to offer protection 
against accidental block erasure or byte writing dur- 
ing power transitions. Upon power-up, the 
28F008SA is indifferent as to which power supply, 
Vpp or Vqc» powers up first. Power supply sequenc- 
ing is not required. Internal circuitry in the 28F008SA 


intel. 

ensures that the Command User Interface is reset to 
the Read Array mode on power up. 

A system designer must guard against spurious 
writes for Vcc voltages above V|_ko when Vpp is 
active. Since both WE# and CE# must be low for a 
command write, driving either to Vih will inhibit 
writes. The Command User Interface architecture 
provides an added level of protection since altera- 
tion of memory contents only occurs after success- 
ful completion of the two-step command sequences. 

Finally, the device is disabled until RP# is brought to 
Vm, regardless of the state of its control inputs. This 
provides an additional level of memory protection. 


Power Dissipation 

When designing portable systems, designers must 
consider battery power consumption not only during 
device operation, but also for data retention during 
system idle time. Flash nonvolatility increases us- 
able battery life, because the 28F008SA does not 
consume any power to retain code or data when the 
system is off. 

In addition, the 28F008SA’s deep powerdown mode 
ensures extremely low power dissipation even when 
system power is applied. For example, portable PCs 
and other power sensitive applications, using an ar- 
ray of 28F008SAs for solid-state storage, can lower 
RP# to Vil in standby or sleep modes, producing 
negligable power consumption. If access to the 
28F008SA is again needed, the part can again be 
read, following the tpnQv and tpnwL wakeup cycles 
required after RP# is first raised back to Vih- See 
AC Characteristics— Read-Only and Write Opera- 
tions and Figures 10 and 11 for more information. 
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ABSOLUTE MAXIMUM RATINGS* 


Operating Temperature 

During Read 0°C to +70°C(l) 

During Block Erase/Byte Write 0°C to + 70°C 

Temperature Under Bias - 1 0°C to + 80°C 

Storage Temperature - 65°C to + 1 25°C 

Voltage on Any Pin 
(except Vcc and Vpp) 

with Respect to GND - 2.0V to + 7.0V(2) 

Vpp Program Voltage with 
Respect to GND during 

Block Erase/Byte Write . . . —2.0V to + 14.0V( 2 > 3 ) 
Vcc Supply Voltage 

with Respect to GND -2.0V to + 7.0V( 2 ) 

Output Short Circuit Current 100 mA( 4 ) 


NOTICE: This data sheet contains preliminary infor- 
mation on new products in production. The specifica- 
tions are subject to change without notice. Verify with 
your local Intel Sales office that you have the latest 
data sheet before finalizing a design. 

* WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


NOTES: 

1 . Operating temperature is for commercial product defined by this specification. 

2. Minimum DC voltage is -0.5 V on input/output pins. During transitions, this level may undershoot to -2.0 V for periods 
<20 ns. Maximum DC voltage on input/output pins is Vcc + 0.5V which, during transitions, may overshoot to Vcc + 2.0V 
for periods <20 ns. 

3. Maximum DC voltage on Vpp may overshoot to + 14.0V for periods <20 ns. 

4. Output shorted for no more than one second. No more than one output shorted at a time. 

5. 5% Vcc specifications reference the 28F008SA-85 in its High Speed configuration. 10% Vcc specifications reference the 
28F008SA-85 in its Standard configuration, and the 28F008SA-1 20. 


OPERATING CONDITIONS 


Symbol 

Parameter 

Notes 

Min 

Max 

Unit 

Ta 

Operating Temperature 


0 

70 

°C 

Vcc 

Vcc Supply Voltage (10%) 

5 

4.50 

5.50 

V 

Vcc 

Vcc Supply Voltage (5%) 

5 

4.75 

5.25 

V 


DC CHARACTERISTICS 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

lu 

Input Load Current 

1 



±1.0 

jllA 

Vcc = Vcc Max 
Vin = Vcc or GND 

Ilo 

Output Leakage Current 

1 


■ 


julA 

v cc = v cc M^ 
VoUT ~ Vcc or GND 

lees 

Vcc Standby Current 






V CC = Vcc Max 
CE# = RP# = V, H 





30 




ICCD 

Vcc Deep PowerDown 
Current 

1 


0.20 

1.2 

juA 

RP# = GND ±0.2V 
I 0U t(RY/BY#) = 0 mA 

ICCR 

Vcc Read Current 

1 


20 

35 

mA 

Vcc = V C c Max, CE# = GND 
f = 8 MHz, Iqut = 0 mA 
CMOS Inputs 





25 

50 

mA 

v cc = v cc Max, CE# = V|i_ 
f = 8 MHz, l 0 UT = 0mA 
TTL Inputs 


| IFIRliyBMAISW 
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DC CHARACTERISTICS (Continued) 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

•ccw 

Vcc Byte Write Current 

1 


10 

30 

mA 

Byte Write In Progress 

IcCE 


1 


10 

30 

mA 

Block Erase In Progress 





5 

10 

mA 

Block Erase Suspended 
CE# = V| H 

Ipps 

Vpp Standby Current 

1 


±1 

±15 

juA 

Vpp ^ Vcc 

IPPD 

Vpp Deep PowerDown 
Current 

1 


0.10 

5.0 

jutA 

RP# = GND ±0.2V 

IPPR 

Vpp Read Current 




200 


Vpp > Vcc 

Ippw 

Vpp Byte Write Current 

1 


H 

30 

mA 

Vpp = VppH 

Byte Write in Progress 

IPPE 

Vpp Block Erase Current 

1 


H 

30 

mA 

Vpp = VppH 

Block Erase in Progress 


IPPES 

Vpp Erase Suspend 
Current 

1 


m 

200 

juA 

Vpp = VppH 

Block Erase Suspended 

V|L 

Input Low Voltage 


-0.5 


0.8 

V 


V|H 

Input High Voltage 


2.0 





Vql 

Output Low'Voltage 

3 


■ 





Output High Voltage (TTL) 

3 

m 



V 

Vcc = Vcc Min 
Iqh = — 2.5 mA 


Output High Voltage 
(CMOS) 

1 

0.85 V CC 

■ 





Ioh = — 1 00 jit A 
v cc = v cc Min 

VppL 

Vpp during Normal 
Operations 




6.5 

V 


VpPH 

Vpp during Erase/Write 
Operations 


11.4 

12.0 

12.6 

V 


Vlko 

Vcc Erase/Write Lock 
Voltage 


2.0 



V 
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EXTENDED TEMPERATURE OPERATING CONDITIONS 


Symbol 

Parameter 

Notes 

Min 

Max 

Unit 

Ta 

Operating Temperature 


-40 

+ 85 

°C 

Vcc 

Vcc Supply Voltage (10%) 

5 

4.50 

5.50 

V 

Vcc 

Vcc Supply Voltage (5%) 

5 

4.75 

5.25 

V 


DC CHARACTERISTICS: EXTENDED TEMPERATURE OPERATION 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

Ili 

Input Load Current 

1 



±1.0 

jliA 

Vcc = Vcc Max 
Vin =:: Vcc or GND 


Output Leakage Current 

1 

■ 

■ 




ices 

Vcc Standby Current 

1,3 

1 

1.0 




30 

100 

juA 

Vcc = Vcc Max 

CE# = RP# = V C c ±0.2V 


Vcc Deep PowerDown 
Current 

■ 


0.20 

20 


RP# = GND + 0.2V 
Iqut(RY/BY#) = 0 mA 

ICCR 

Vcc Read Current 

1 


20 

35 

mA 

Vcc = Vcc Max, CE# = GND 
f = 8 MHz, l 0 UT = 0 mA 
CMOS Inputs 


50 

mA 

Vcc = v cc Max, CE# = Vil 
f = 8 MHz, Iqut = 0 mA 
TTL Inputs 

iccw 

Vcc Byte Write Current 

1 


m 

mm 

mA 

Byte Write In Progress 

ICCE 

Vcc Block Erase Current 

1 


13 

mm 

mA 

Block Erase In Progress 

•CCES 

Vcc Erase Suspend Current 

1,2 

■ 

H 

10 

mA 

Block Erase Suspended 
CE# = V| H 

Ipps 

Vpp Standby Current 

1 


EO 



Vpp ^ Vcc 

•PPD 

Vpp Deep PowerDown 
Current 







IPPR 

Vpp Read Current 




200 

julA 

Vpp > Vcc 

Ippw 

Vpp Byte Write Current 

1 


10 

30 

mA 

Vpp = VppH 

Byte Write in Progress 

•PPE 

Vpp Block Erase Current 

1 


10 

30 

mA 

Vpp = VppH 

Block Erase in Progress 

IPPES 

Vpp Erase Suspend 
Current 

1 


90 

200 

jliA 

Vpp = VppH 

Block Erase Suspended 


i^gyitfioGOMy 
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DC CHARACTERISTICS: EXTENDED TEMPERATURE OPERATION (Continued) 



Parameter 



Typ 

Max 

Unit 

Test Condition 

mm 

Input Low Voltage 


-0.5 


0.8 

V 


V|H 

Input High Voltage 


2.0 


Vcc + 0.5 

WM 


VOL 

Output Low Voltage 

3 


■ 

0.45 

V 

V CC = Vcc Min 
Iql = 5.8 mA 

V OH1 

Output High Voltage 
(TTL) 

3 

2.4 

■ 


■ 


V OH2 

Output High Voltage 
(CMOS) 


0.85 Vcc 

1 


V 

lOH = -2.5 (J.A 
Vcc = Vcc Min 

0 

1 

8 

> 

•oh = “100 jxA 
Vcc = Vcc Min 

VppL 

Vpp during Normal 
Operations 

■ 

0.0 

■ 

6.5 

V 


V PPH 

Vpp during Erase/Write 
Operations 

| 

11.4 

12.0 

12.6 

V 


V LKO 

Vcc Erase/Write Lock 
Voltage 


2.0 

■ 


■ 



CAPACITANCES) t a = 25°C,f = 1 MHz 


Symbol 

Parameter 

Typ 

Max 

Unit 

Condition 

C|N 

Input Capacitance 

6 

8 

PF 

> 

o 

II 

z 

> 

CoUT 

Output Capacitance 

8 

12 

PF 

V 0U T “ ov 


NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, Vpp = 12.0V, T = 25°C. These currents 
are valid for all product versions (packages and speeds). 

2. iccES is specified with the device deselected. If the 28F008SA is read while in Erase Suspend Mode, current draw is the 
sum of Icces and Iccr- 

3. Includes RY/BY#. 

4. Block Erases/Byte Writes are inhibited when Vpp = Vppl and not guaranteed in the range between Vppn and Vppi_. 

5. Sampled, not 100% tested. 
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AC INPUT/OUTPUT REFERENCE WAVEFORMO) 



290429-11 


AC test inputs are driven at Voh (2.4 Vttl) for a Lq 9 ic “ 1 ” and v ol (0.45 Vttl) for a Logic 
“0”. Input timing begins at V|h (2.0 Vttl) and V||_ (0.8 Vttl). Output timing ends at Vm and 
V|l- Input rise and fall times (10% to 90%) < 10 ns. 


AC TESTING LOAD CIRCUIT! 1 ) 



HIGH SPEED 

AC INPUT/OUTPUT REFERENCE WAVEFORMS) 


V 

TEST POINTS ■'X 1 * 5 OUTPUT 

— ss /N 

290429-17 

AC test inputs are driven at 3.0V for a Logic “1” and 0.0V for a Logic "0”. Input timing 
begins, and output timing ends, at 1.5V. Input rise and fall times (10% to 90%) < 10 ns. 



HIGH SPEED 

AC TESTING LOAD CIRCUIT^) 



NOTES: 

1. Testing characteristics for 28F008SA-85 in Standard configuration, and 28F008SA-120. 

2. Testing characteristics for 28F008SA-85 in High Speed configuration. 


AC CHARACTERISTICS— Read-Only Operations^) 


Versions 

V CC ±5% 

28F008SA-85W 



Unit 

v cc ±io% 


28F008SA-85(5) 

28F008S A- 1 20( 5 ) 


Parameter 

Notes 



Min 

Max 

Min 

Max 



Read Cycle Time 




90 


120 


ns 

*AVQV 

tACC 

Address to Output Delay 



85 


90 


120 

ns 

tELQV 

*CE 

CE# to Output Delay 

2 




90 


120 

ns 





■ I 



400 



1^1 

*GLQV 

tQE 

OE# to Output Delay 

2 

■ 





50 

1 



CE# to Output Low Z 

3 

0 


0 


0 


19! 

tEHQZ 

tHZ 

CE# High to Output High Z 

3 


55 


55 


55 

ns 

tGLQX 

tOLZ 

OE# to Output LowZ 

3 

0 


0 


0 


ns 

l GHQZ 

*DF 

OE# High to Output High Z 

3 


30 


30 


30 

ns 


tQH 

Output Hold from 
Addresses, CE# orOE# 
Change, Whichever is First 

3 

0 


0 


0 


ns 


NOTES: 

1. See AC Input/Output Reference Waveform for timing measurements. 

2. OE# may be delayed up to tcE-toE after the falling edge of CE# without impact on tcE- 

3. Sampled, not 100% tested. 

4. See High Speed AC Input/Output Reference Waveforms and High Speed AC Testing Load Circuits for testing characteris- 
tics. 

5. See AC Input/Output Reference Waveforms and AC Testing Load Circuits for testing characteristics. 
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EXTENDED TEMPERATURE OPERATION 
AC CHARACTERISTICS— Read-Only Operations^) 


Versions VccilO 0 /® 



Symbol 

Parameter 

Notes 

Min 

Max 



Read Cycle Time 


100 


ns 

tAVQV 

*ACC 

Address to Output Delay 



100 




CE# to Output Delay 

2 


100 

ns 



RP# High to Output Delay 



400 


tGLQV 

l OE 

OE# to Output Delay 

2 


55 

ns 


am 

CE# to Output Low Z 

3 

0 



*EHQZ 


CE# High to Output High Z 

3 


55 

ns 



OE# to Output Low Z 

3 

0 


ns 

tGHQZ 

*DF 

OE# High to Output High Z 

3 


30 

ns 


tQH 

Output Hold from Addresses, CE# or 
OE# Change, Whichever is First 

3 

0 


ns 


NOTES: 

1 . See AC Input/Output Reference Waveform for timing measurements. 

2. OE# may be delayed up to tcE-toE after the falling edge of CE# without impact on tcE- 

3. Sampled, not 100% tested. 

4. See High Speed AC Input/Output Reference Waveforms and High Speed AC Testing Load Circuits for testing characteris- 
tics. 

5. See AC Input/Output Reference Waveforms and AC Testing Load Circuits for testing characteristics. 
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AC CHARACTERISTICS— Write Operations^) 


Versions 

V CC ±5% 

28F008SA-85(7) 



Unit 

v cc ±io% 


28F008SA-85(®) 

28F008SA-120<8) 

Symbol 

Parameter 

Notes 


Max 





tAVAV 

twc 

Write Cycle Time 


n 


90 


120 



tpHWL 

tps 

RP# High Recovery to 
WE# Going Low 

2 

■ 




H 

■ 

H 

tELWL 

tcs 

CE# Setup to WE# Going 
Low 


10 



■ 

B 


D 

tWLWH 

t W p 

WE# Pulse Width 


40 


40 


40 


ns 

tvPWH 

tvps 

Vpp Setup to WE# Going 
High 

2 


■ 



100 


ns 

tAVWH 

*AS 

Address Setup to WE# 
Going High 

3 

n 


40 


40 


ns 

tDVWH 

*DS 

Data Setup to WE# Going 
High 

4 



40 




ns 

tWHDX 

*DH 

Data Hold from WE# High 


5 


5 


5 


ns 

tWHAX 

tAH 

Address Hold from WE# 
High 


5 






ns 

tWHEH 

tCH 

CE# Hold from WE# High 


10 


10 


10 


ns 

tWHWL 

tWPH 

WE# Pulse Width High 


30 


30 


30 


ns 

tWHRL 


WE# High to RY/BY# 
Going Low 



100 


100 


100 

ns 

tWHQVI 


Duration of Byte Write 
Operation 

5,6 

6 


6 


6 


JLtS 

tWHQV2 


Duration of Block Erase 
Operation 

5,6 

0.3 


0.3 


0.3 


sec 

tWHGL 


Write Recovery before 
Read 


0 


0 


0 


JLtS 

tQWL 

tVPH 

Vpp Hold from Valid SRD, 
RY/BY# High 

2,6 

0 


0 


0 


ns 


NOTES: 

1. Read timing characteristics during erase and byte write operations are the same as during read-only operations. Refer to 
AC Characteristics for Read-Only Operations. 

2. Sampled, not 100% tested. 

3. Refer to Table 3 for valid for byte write or block erasure. 

4. Refer to Table 3 for valid Din for byte write or block erasure. 

5. The on-chip Write State Machine incorporates all byte write and block erase system functions and overhead of standard 
Intel flash memory, including byte program and verify (byte write) and block precondition, precondition verify, erase and 
erase verify (block erase). 

6. Byte write and block erase durations are measured to completion (SR.7 = 1, RY/BY# = Vqh)- Vpp should be held at 
VppH until determination of byte write/block erase success (SR.3/4/5 = 0) 

7. See High Speed AC Input/Output Reference Waveforms and High Speed AC Testing Load Circuits for testing characteris- 
tics. 

8. See AC Input/Output Reference Waveforms and AC Testing Load Circuits for testing characteristics. 
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BLOCK ERASE AND BYTE WRITE PERFORMANCE 


Parameter 

Notes 

28F008SA-85 

28F008SA-120 

Unit 

Min 

TypO) 

Max 

Min 

TypO) 

Max 

Block Erase Time 

2 


1.6 

10 


1.6 

10 

sec 

Block Write Time 

2 


0.6 

2.1 


0.6 

2.1 

sec 

Byte Write Time 



8 

(Note 3) 


8 

(Note 3) 

JUS 


NOTES: 

1. 25°C, 12.0 V PP . 

2. Excludes System-Level Overhead. 

3. Contact your Intel representative for information on the maximum byte write specification. 


EXTENDED TEMPERATURE OPERATION 
AC CHARACTERISTICS— Write Operations^) 


Versions Vcc±10% 

28F008SA-100(®) 


Symbol 

Parameter 

Notes 

Min 

Max 



Write Cycle Time 




ns 

tpHWL 

E 

RP# High Recovery to WE# Going Low 

2 

1 


JLlS 

EBB 


CE# Setup to WE# Going Low 


10 





WE# Pulse Width 


40 



tVPWH 

tvPS 

Vpp Setup to WE# Going High 

2 

100 






3 

40 


ns 



Data Setup to WE# Going High 

4 

40 



EBB 


Data Hold from WE# High 


5 


ns 





5 



twHEH 

tCH 



10 



tWHWL 




30 


ns 






100 

ns 



Duration of Byte Write Operation 


6 





Duration of Block Erase Operation 

5,6 

0.3 



tWHGL 


Write Recovery before Read 


0 


JUS 

tQWL 

tvPH 

Vpp Hold from Valid SRD, RY/BY# High 

2,6 

0 


ns 


NOTES: 

1. Read timing characteristics during erase and byte write operations are the same as during read-only operations. Refer to 
AC Characteristics for Read-Only Operations. 

2. Sampled, not 100% tested. 

3. Refer to Table 3 for valid Ain for byte write or block erasure. 

4. Refer to Table 3 for valid Din for byte write or block erasure. 

5. The on-chip Write State Machine incorporates all byte write and block erase system functions and overhead of standard 
Intel flash memory, including byte program and verify (byte write) and block precondition, precondition verify, erase and 
erase verify (block erase). 

6. Byte write and block erase durations are measured to completion (SR.7 = 1, RY/BY# = Vqh)- Vpp should be held at 
Vpppj until determination of byte write/block erase success (SR.3/4/5 = 0) 

7. See High Speed AC Input/Output Reference Waveforms and High Speed AC Testing Load Circuits for testing characteris- 
tics. 

8. See AC Input/Output Reference Waveforms and AC Testing Load Circuits for testing characteristics. 
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EXTENDED TEMPERATURE OPERATION 
BLOCK ERASE AND BYTE WRITE PERFORMANCE 


Parameter 





Typ(1) 


Block Erase Time 

2 


1.6 

10 

sec 

Block Write Time 

2 


0.6 

2.1 

sec 

Byte Write Time 



8 

(Note 3) 

/XS 


NOTES: 

1 . 25°C, 12.0 Vpp. 

2. Excludes System-Level Overhead. 

3. Contact your Intel representative for information on the maximum byte write specification. 
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V cc POWER-UP WRITE BYTE WRITE OR VALID ADDRESS & DATA (BYTE WRITE) AUTOMATED BYTE WRITE READ STATUS WRITE READ ARRAY 

& STANDBY ERASE SETUP COMMAND OR ERASE CONFIRM COMMAND OR ERASE DELAY REGISTER DATA COMMAND 








*WHGL 
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RP# 


(P) 
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ALTERNATIVE CE# -CONTROLLED WRITES 


Versions 

V CC ±5% 

28F008SA-85<6) 




v cc ±io% 




Symbol 

Parameter 

Notes 








m 

Write Cycle Time 




90 


1 


ns 

i 

9 

RP# High Recovery to 
CE# Going Low 

2 

1 


1 


i 



twLEL 

H 

WE# Setup to CE# Going 
Low 



B 


B 


B 


tELEH 




50 


50 


50 



tyPEH 

Wps 

Vpp Setup to CE# Going 
High 

2 







Q 

*AVEH 

*AS 

Address Setup to CE# 
Going High 

3 



B 


B 


Q 

tDVEH 

*DS 

Data Setup to CE# Going 
High 

4 

40 


40 


40 


Qj 

*EHDX 

*DH 

Data Hold from CE# High 


5 


5 


5 


mm 

*EHAX 

*AH 

Address Hold from CE# 
High 




5 




Q 

*EHWH 

tWH 

WE# Hold from CE# High 


0 


0 





tEHEL 

*EPH 









ns 



CE# High to RY/BY# 
Going Low 

■ 


100 


100 


100 

ns 



Duration of Byte Write 
Operation 

H 



6 




jas 

*EHQV2 


Duration of Block Erase 
Operation 

B 



0.3 


0.3 


| 

tEHGL 


Write Recovery before 
Read 

B 





0 



tQWL 

Vph 

Vpp Hold from Valid SRD, 
RY/BY# High 

2,5 

0 


0 


0 


ns 


NOTES: 

1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CE# and WE#. In systems where 
CE# defines the write pulsewidth (within a longer WE# timing waveform), all setup, hold and inactive WE# times should be 
measured relative to the CE# waveform. 

2. Sampled, not 100% tested. 

3. Refer to Table 3 for valid Ain for byte write or block erasure. 

4. Refer to Table 3 for valid Din for byte write or block erasure. 

5. Byte write and block erase durations are measured to completion (SR.7 = 1, RY/BY# = Vqh)- Vpp should be held at 
VppH until determination of byte write/block erase success (SR.3/4/5 = 0) 

6. See High Speed AC Input/Output Reference Waveforms and High Speed AC Testing Load Circuits for testing characteris- 
tics. 

7. See AC Input/Output Reference Waveforms and AC Testing Load Circuits for testing characteristics. 
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EXTENDED TEMPERATURE OPERATION 
ALTERNATIVE CE# -CONTROLLED WRITES 


Versions Vcc ± T 0 % 

28F008S A- 1 00( 7 ) 

E 

Symbol 

Parameter 


Min 

Max 

BSE 

*WC 

Write Cycle Time 


100 


EE 


tps 

RP# High Recovery to CE# Going Low 

2 

1 


119 

EH 

tws 

WE# Setup to CE# Going Low 


0 


IE 



CE# Pulse Width 


50 


EE 



Vpp Setup to CE# Going High 

2 

100 


| 



Address Setup to CE# Going High 

3 

40 


IE 



Data Setup to CE # Going High 

4 

40 


IE 

HIM 


Data Hold from CE# High 


5 


EMj 


E 

Address Hold from CE# High 


5 


EE 


1MB 

WE# Hold from CE# High 


0 


EE 

tEHEL 

tEPH 

CE# Pulse Width High 


25 



*EHRL 


CE# High to RY/BY# Going Low 



100 


tEHQVI 


Duration of Byte Write Operation 

5 

6 


JLtS 



Duration of Block Erase Operation 

5 

0.3 



*EHGL 


Write Recovery before Read 


0 


fJLS 

tQWL 

*VPH 

Vpp Hold from Valid SRD, RY/BY# High 

2,5 

0 


ns 


NOTES: 

1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CE# and WE#. In systems where 
CE# defines the write pulsewidth (within a longer WE# timing waveform), all setup, hold and inactive WE# times should be 
measured relative to the CE# waveform. 

2. Sampled, not 100% tested. 

3. Refer to Table 3 for valid Ain for byte write or block erasure. 

4. Refer to Table 3 for valid Din for byte write or block erasure. 

5. Byte write and block erase durations are measured to completion (SR.7 = 1, RY/BY# = Vqh)- Vpp should be held at 
VppH until determination of byte write/block erase success (SR.3/4/5 = 0) 

6. See High Speed AC Input/Output Reference Waveforms and High Speed AC Testing Load Circuits for testing characteris- 
tics. 

7. See AC Input/Output Reference Waveforms and AC Testing Load Circuits for testing characteristics. 




3-473 















v cc POWER-UP WRITE BYTE WRITE OR VALID ADDRESS & DATA (BYTE WRITE) AUTOMATED BYTE WRITE 
& STANDBY ERASE SETUP COMMAND OR E&ASE CONFIRM COMMAND OR ERASE DELAY 


READ STATUS 
REGISTER DATA 


WRITE READ ARRAY 
COMMAND 


ADDRESSES (A) 


I 


DATA (D/Q) 


RY/BY# (R) 


i Bninii 
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ORDERING INFORMATION 


OPERATING TEMPERATURE 
T = EXTENDED TEMP 
BLANK = COMMERCIAL TEMP 


VALID COMBINATIONS 

E28F008SA-85 F28F008SA-85 PA28F008SA-85 TE28F008SA-1 00 TB28F008SA-1 00 

E28F008SA-1 20 F28F008SA-1 20 PA28F008SA-1 20 TF28F008SA-1 00 


I h M I « I F I 0 I 0 I 8 | 5 | A | - | a | sT 


V 


PACKAGE 

E = STANDARD 40 LEAD TSOP 
F = REVERSE 40 LEAD TSOP 
PA = 44 LEAD PSOP 
TB = 44 LEAD PSOP (EXT. TEMP) 


£ 


ACCESS SPEED (ns) 
85 ns 
1 20 ns 


290429-16 


ADDITIONAL INFORMATION 


AP-359 

28F008SA-L Datasheet 
“28F008SA Hardware Interfacing” 

Order 

Number 

290435 

292094 

AP-360 

‘‘25F008SA Software Drivers” 

292095 

AP-364 

“28F008SA Automation and Algorithms” 

292099 

ER-27 

“The Intel 28F008SA Flash Memory” 

294011 

ER-28 

‘‘ETOX III Flash Memory Technology” 

290412 


REVISION HISTORY 


Number 

Description 

002 

Revised from Advanced Information to Preliminary 

Modified Erase Suspend Flowchart 
Removed -90 speed bin 

Integrated -90 characteristics into -85 speed bin 
Combined Vpp Standby current and Vpp Read 
current into one Vpp Standby current spec with two 
test conditions (DC Characteristics table) 

Lowered V|_ko from 2.2V to 2.0V. 

004 

PWD renamed to RP# for JEDEC standardization 
compatibility. 

Changed Ipps Standby current spec from ± 10 fxA to 
±15 julA in DC Characteristics table. 

005 

Added Extended Temperature Specs for 28F008SA 

Added IppR Spec 

Corrected Ipps Spec Type 

Added Vqhz (Output High Voltage — CMOS) Spec 

Added Byte Write Time Spec 
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28F008SA-L 

8-MBIT (1 MBIT x 8) FLASHFILETM MEMORY 

■ High-Performance Read 

— 200 ns Maximum Access Time 

■ Deep-Powerdown Mode 

— 0.20 jjl A ice Typical 

■ SRAM-Compatible Write Interface 

■ Hardware Data Protection Feature 
— Erase/Write Lockout during Power 

Transitions 

■ Industry Standard Packaging 
-40-Lead TSOP, 44-Lead PSOP 

■ ETOX III Nonvolatile Flash Technology 

— 12V Byte Write/Block Erase 


Intel’s 28F008SA-L 8 Mbit FlashFileTM Memory is the highest density nonvolatile read/write solution for solid 
state storage. The 28F008SA-L’s extended cycling, symmetrically blocked architecture, fast access time, write 
automation and very low power consumption provide a more reliable, lower power, lighter weight and higher 
performance alternative to traditional rotating disk technology. The 28F008SA-L brings new capabilities to 
portable computing. Application and operating system software stored in resident flash memory arrays provide 
instant-on, rapid execute-in-place and protection from obsolescence through in-system software updates. 
Resident software also extends system battery life and increases reliability by reducing disk drive accesses. 

For high density data acquisition applications, the 28F008SA-L offers a more cost-effective and reliable alter- 
native to SRAM and battery. Traditional high density embedded applications, such as telecommunications, can 
take advantage of the 28F008SA-L’s nonvolatility, blocking and minimal system code requirements for flexible 
firmware and modular software designs. 

The 28F008SA-L is offered in 40-lead TSOP (standard and reverse) and 44-lead PSOP packages. Pin assign- 
ments simplify board layout when integrating multiple devices in a flash memory array or subsystem. This 
device uses an integrated Command User Interface and state machine for simplified block erasure and byte 
write. The 28F008SA-L memory map consists of 1 6 separately erasable 64-Kbyte blocks. 

Intel’s 28F008SA-L employs advanced CMOS circuitry for systems requiring low power consumption and 
noise immunity. Its 200 ns access time provides superior performance when compared with magnetic storage 
media. A deep powerdown mode lowers power consumption to 0.66 ju,W typical thru Vqc, crucial in portable 
computing, handheld instrumentation and other low-power applications. The RP# power control input also 
provides absolute data protection during system powerup/down. 

Manufactured on Intel’s 0.8 micron ETOX process, the 28F008SA-L provides the highest levels of quality, 
reliability and cost-effectiveness. 


■ High-Density Symmetrically Blocked 
Architecture 

— Sixteen 64-Kbyte Blocks 

■ Low-Voltage Operation 

3.3V ±0.3V or 5.0V ± 10% V C c 

■ Extended Cycling Capability 
— 10,000 Block Erase Cycles 
— 160,000 Block Erase 

Cycles per Chip 

■ Automated Byte Write and Block Erase 
— Command User Interface 

— Status Register 

■ System Performance Enhancements 
— RY/BY# Status Output 

— Erase Suspend Capability 



•Microsoft is a trademark of Microsoft Corporation. 
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PRODUCT OVERVIEW 

The 28F008SA-L is a high-performance 8-Mbit 
(8,388,608-bit) memory organized as 1 Mbyte 
(1,048,576 bytes) of 8 bits each. Sixteen 64-Kbyte 
(65,536-byte) blocks are included on the 
28F008SA-L. A memory map is shown in Figure 6 of 
this specification. A block erase operation erases 
one of the sixteen blocks of memory in typically 2.0 
seconds, independent of the remaining blocks. 
Each block can be independently erased and written 
10,000 cycles. Erase Suspend mode allows sys- 
tem software to suspend block erase to read data or 
execute code from any other block of the 
28F008SA-L. 

The 28F008SA-L is available in the 40-lead TSOP 
(Thin Small Outline Package, 1 .2 mm thick) and 44- 
lead PSOP (Plastic Small Outline) packages. Pin- 
outs are shown in Figures 2 and 4 of this specifica- 
tion. 

The Command User Interface serves as the inter- 
face between the microprocessor or microcontroller 
and the internal operation of the 28F008SA-L. 

Byte Write and Block Erase Automation allow 
byte write and block erase operations to be execut- 
ed using a two-write command sequence to the 
Command User Interface. The internal Write State 
Machine (WSM) automatically executes the algo- 
rithms and timings necessary for byte write and 
block erase operations, including verifications, 
thereby unburdening the microprocessor or micro- 
controller. Writing of memory data is performed in 
byte increments typically within 11 jms, Ipp byte 
write and block erase currents are 10 mA typical, 
30 mA maximum. Vpp byte write and block erase 
voltage is 11.4V to 12.6V. 


The Status Register indicates the status of the 
WSM and when the WSM successfully completes 
the desired byte write or block erase operation. 

The RY/BY# output gives an additional indicator of 
WSM activity, providing capability for both hardware 
signal of status (versus software polling) and status 
masking (interrupt masking for background erase, 
for example). Status polling using RY/BY# mini- 
mizes both CPU overhead and system power con- 
sumption. When low, RY/BY# indicates that the 
WSM is performing a block erase or byte write oper- 
ation. RY/BY# high indicates that the WSM is ready 
for new commands, block erase is suspended or the 
device is in deep powerdown mode. 


Maximum access time is 200 ns (tAcc) over the 
commercial temperature range (0°C to + 70°C) and 
over Vcc supply voltage range (3.0V to 3.6V and 
4.5V to 5.5V). Iqc active current (CMOS Read) is 
5 mA typical, 12 mA maximum at 5 MHz, 
3.3V + 0.3V. 

When the CE# and RP# pins are at Vcc. the Ice 
CMOS Standby mode is enabled. 



A Deep Powerdown mode is enabled when the 
RP# pin is at GND, minimizing power consumption 
and providing write protection. Iqc current in deep 
powerdown is 0.20 fxA typical. Reset time of 500 ns 
is required from RP# switching high until outputs are 
valid to read attempts. Equivalently, the device has a 
wake time of 1 /as from RP# high until writes to the 
Command User Interface are recognized by the 
28F008SA-L. With RP# at GND, the WSM is reset 
and the Status Register is cleared. 




3-477 


Figure 1. Block Diagram 
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Table 1. Pin Description 


Symbol 

Type 

Name and Function 

a 0 -a 19 

INPUT 

ADDRESS INPUTS for memory addresses. Addresses are internally 
latched during a write cycle. 

DQo-DQy 

INPUT/OUTPUT 

DATA INPUT/OUTPUTS: Inputs data and commands during Command 
User Interface write cycles; outputs data during memory array, Status 
Register and Identifier read cycles. The data pins are active high and 
float to tri-state off when the chip is deselected or the outputs are 
disabled. Data is internally latched during a write cycle. 

CE# 

INPUT 

CHIP ENABLE: Activates the device’s control logic, input buffers, 
decoders, and sense amplifiers. CE# is active low; CE# high deselects 
the memory device and reduces power consumption to standby levels. 


INPUT 

RESET/ DEEP POWERDOWN: Puts the device in deep powerdown 
mode. RP# is active low; RP# high gates normal operation. RP# also 
locks out block erase or byte write operations when active low, providing 
data protection during power transitions. RP# active resets internal 
automation. Exit from Deep Powerdown sets device to read-array mode. 

OE# 

INPUT 

OUTPUT ENABLE: Gates the device’s outputs through the data buffers 
during a read cycle. OE# is active low. 

WE# 

INPUT 

WRITE ENABLE: Controls writes to the Command User Interface and 
array blocks. WE# is active low. Addresses and data are latched on the 
rising edge of the WE# pulse. 

RY/BY# 

OUTPUT 

READY/BUSY#: Indicates the status of the internal Write State 
Machine. When low, it indicates that the WSM is performing a block 
erase or byte write operation. RY/BY# high indicates that the WSM is 
ready for new commands, block erase is suspended or the device is in 
deep powerdown mode. RY/BY# is always active and does NOT float 
to tri-state off when the chip is deselected or data outputs are disabled. 

Vpp 


BLOCK ERASE/BYTE WRITE POWER SUPPLY for erasing blocks of 
the array or writing bytes of each block. 

NOTE: 

With Vpp < Vpplmax. memory contents cannot be altered. 

Vcc 


DEVICE POWER SUPPLY (3.3V +0.3V, 5V ± 10%) 

GND 


GROUND 
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Figure 3. TSOP Serpentine Layout 

NOTE: 

1. Connect all Vcc and GND pins of each device to common power supply outputs. DO NOT leave Vcc or GND inputs 
disconnected. 
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Figure 5. 28F008SA-L Array Interface to lntei3.3V 80L186EB Embedded Microprocessor 
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PRINCIPLES OF OPERATION 

The 28F008SA-L includes on-chip write automation 
to manage write and erase functions. The Write 
State Machine allows for: 100% TTL-level control 
inputs; fixed power supplies during block erasure 
and byte write; and minimal processor overhead with 
RAM-like interface timings. 

After initial device powerup, or after return from 
deep powerdown mode (see Bus Operations), the 
28F008SA-L functions as a read-only memory. Ma- 
nipulation of external memory-control pins allow ar- 
ray read, standby and output disable operations. 
Both Status Register and intelligent identifiers can 
also be accessed through the Command User Inter- 
face when Vpp = Vppi_. 


This same subset of operations is also available 
when high voltage is applied to the Vpp pin. In addi- 
tion, high voltage on Vpp enables successful block 
erasure and byte writing of the device. All functions 
associated with altering memory contents — byte 
write, block erase, status and intelligent identifier — 
are accessed via the Command User Interface and 
verified thru the Status Register. 

Commands are written using standard microproces- 
sor write timings. Command User Interface contents 
serve as input to the WSM, which controls the block 
erase and byte write circuitry. Write cycles also inter- 
nally latch addresses and data needed for byte write 
or block erase operations. With the appropriate com- 
mand written to the register, standard microproces- 
sor read timings output array data, access the Intelli- 
gent Identifier codes, or output byte write and block 
erase status for verification. 

Interface software to initiate and poll progress of in- 
ternal byte write and block erase can be stored in 
any of the 28F008SA-L blocks. This code is copied 
to, and executed from, system RAM during actual 
flash memory update. After successful completion of 
byte write and/or block erase, code/data reads from 
the 28F008SA-L are again possible via the Read Ar- 
ray command. Erase suspend/resume capability al- 
lows system software to suspend block erase to 
read data and execute code from any other block. 
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Figure 6. Memory Map 


Command User Interface and Write 
Automation 

An on-chip state machine controls block erase and 
byte write, freeing the system processor for other 
tasks. After receiving the Erase Setup and Erase 
Confirm commands, the state machine controls 
block pre-conditioning and erase, returning progress 
via the Status Register and RY/BY# output. Byte 
write is similarly controlled, after destination address 
and expected data are supplied. The program and 
erase algorithms of past Intel flash memories are 
now regulated by the state machine, including pulse 
repetition where required and internal verification 
and margining of data. 


I 
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Data Protection 

Depending on the application, the system designer 
may choose to make the Vpp power supply switcha- 
ble (available only when memory byte writes/block 
erases are required) or hardwired to Vppn- When 
Vpp = Vppi_, memory contents cannot be altered. 
The 28F008SA-L Command User Interface architec- 
ture provides protection from unwanted byte write or 
block erase operations even when high voltage is 
applied to Vpp. Additionally, all functions are dis- 
abled whenever Vcc is below the write lockout volt- 
age V|_ko, or when RP# is at Vjl- The 28F008SA-L 
accommodates either design practice and encour- 
ages optimization of the processor-memory inter- 
face. 

The two-step byte write/block erase Command User 
Interface write sequence provides additional soft- 
ware write protection. 


BUS OPERATION 

Flash memory reads, erases and writes in-system 
via the local CPU. All bus cycles to or from the flash 
memory conform to standard microprocessor bus 
cycles. 


Read 

The 28F008SA-L has three read modes. The memo- 
ry can be read from any of its blocks, and informa- 
tion can be read from the Intelligent Identifier or 
Status Register. Vpp can be at either VppL or Vppn- 


The first task is to write the appropriate read mode 
command to the Command User Interface (array, In- 
telligent Identifier, or Status Register). The 
28F008SA-L automatically resets to Read Array 
mode upon initial device powerup or after exit from 
deep powerdown. The 28F008SA-L has four control 
pins, two of which must be logically active to obtain 
data at the outputs. Chip Enable (CE#) is the device 
selection control, and when active enables the se- 
lected memory device. Output Enable (OE#) is the 
data input/output (DQ 0 -DQ 7 ) direction control, and 
when active drives data from the selected memory 
onto the I/O bus. RP# and WE# must also be at 
V|H- Figure 1 0 illustrates read bus cycle waveforms. 


Output Disable 

With OE# at a logic-high level (V|h), the device out- 
puts are disabled. Output pins (DQ 0 -DQ 7 ) are 
placed in a high-impedance state. 


Standby 

CE# at a logic-high level (Vm) places the 
28F008SA-L in standby mode. Standby operation 
disables much of the 28F008SA-L’s circuitry and 
substantially reduces device power consumption. 
The outputs (DQ 0 -DQ 7 ) are placed in a high-impe- 
dence state independent of the status of OE#. If the 
28F008SA-L is deselected during block erase or 
byte write, the device will continue functioning and 
consuming normal active power until the operation 
completes. 


Table 2. Bus Operations 


Mode 

Notes 

RP# 

CE# 

OE# 

WE# 

Ao 

Vpp 

DQ 0-7 

RY/BY# 

Read 

1,2,3 

V|H 

V|L 

VlL 

VlH 

X 

X 

d out 

X 

Output Disable 

3 

V| H 

V|L 

VlH 

VlH 

X 

X 

High Z 

X 

Standby 

3 

V|H 

V|H 

X 

X 

X 

X 

High Z 

X 

Deep PowerDown 


V|L 

X 

X 

X 

X 

X 

High Z 

VoH 

Intelligent Identifier (Mfr) 


V|H 

VlL 

V IL 

V|H 

V|L 

X 

89H 

v OH 

Intelligent Identifier (Device) 


V|H 

V|L 

VlL 

V|H 

VlH 

X 

A1H 

VoH 

Write 

3, 4, 5 

V,H 

VlL 

VlH 

VlL 

X 

X 

Din 

X 


NOTES: 

1. Refer to DC Characteristics. When Vpp = Vpp^ memory contents can be read but not written or erased. 

2. X can be V||_ or Vm for control pins and addresses, and Vpp|_ or Vppn for Vpp. See DC Characteristics for Vppl and Vppn 
voltages. 

3. RY/BY# is Vql when the Write State Machine is executing internal block erase or byte write algorithms. It is Vqh when 
the WSM is not busy, in Erase Suspend mode or deep powerdown mode. 

4. Command writes involving block erase or byte write are only successfully executed when Vpp = Vppn- 

5. Refer to Table 3 for valid D^ during a write operation. 
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Deep Power-Down 

The 28F008SA-L offers a deep power-down feature, 
entered when RP# is at V||_. Current draw thru Vcc 
is 0.20 ju-A typical in deep powerdown mode, with 
current draw through Vpp typically 0.1 p,A. During 
read modes, RP#-low deselects the memory, 
places output drivers in a high-impedence state and 
turns off all internal circuits. The 28F008SA-L re- 
quires time tpHQv (see AC Characteristics-Read- 
Only Operations) after return from powerdown until 
initial memory access outputs are valid. After this 
wakeup interval, normal operation is restored. The 
Command User Interface is reset to Read Array, and 
the upper 5 bits of the Status Register are cleared to 
value 1 0000, upon return to normal operation. 

During block erase or byte write modes, RP# low 
will abort either operation. Memory contents of the 
block being altered are no longer valid as the data 
will be partially written or erased. Time tpnwL after 
RP# goes to logic-high (Vm) is required before an- 
other command can be written. 

This use of RP# during system reset is important 
with automated write/erase devices. When the sys- 
tem come out of reset, it expects to read from the 
flash memory. Automated flash memories provide 


Table 3. Command Definitions 


Command 

Bus 

Cycles 

Req’d 


First Bus Cycle 

Second Bus Cycle 

Operation 

Address 

Data 

Operation 

Address 

Data 

Read Array/ Reset 

1 

1 

Write 

X 

FFH 




Intelligent Identifier 

3 

BO 

Write 

X 

90H 

Read 

IA 

IID 

Read Status Register 

2 


Write 

X 

70H 

Read 

X 

SRD 

Clear Status Register 

1 


Write 

X 

50H 




Erase Setup/Erase Confirm 

2 



BA 



BA 

BBBl 

Erase Suspend/Erase Resume 

2 



X 


■a 

X 

Kifil 

Byte Write Setup/Write 

2 





aooo 

WA 

WD 

Alternate Byte Write Setup/Write 

2 

2, 3,5 

Write 

WA 

10H 

Write 

WA 

WD 


NOTES: 

1. Bus operations are defined in Table 2. 

2. IA = Identifier Address: 00H for manufacturer code, 01 H for device code. 

BA = Address within the block being erased. 

WA = Address of memory location to be written. 

3. SRD = Data read from Status Register. See Table 4 for a description of the Status Register bits. 

WD = Data to be written at location WA. Data is latched on the rising edge of WE#. 

IID = Data read from Intelligent Identifiers. 

4. Following the Intelligent Identifier command, two read operations access manufacture and device codes. 

5. Either 40H or 10H are recognized by the WSM as the Byte Write Setup command. 

6. Commands other than those shown above are reserved by Intel for future device implementations and should not be 
used. 


status information when accessed during write/ 
erase modes. If a CPU reset occurs with no flash 
memory reset, proper CPU initialization would not 
occur because the flash memory would be providing 
the status information instead of array data. Intel’s 
Flash Memories allow proper CPU initialization fol- 
lowing a system reset through the use of the RP# 
input. In this application RP# is controlled by the 
same RESET # signal that resets the system CPU. 


Intelligent Identifier Operation 

The Intelligent Identifier operation outputs the manu- 
facturer code, 89H; and the device code, A1H for 
the 28F008SA-L. The system CPU can then auto- 
matically match the device with its proper block 
erase and byte write algorithms. 

The manufacturer- and device-codes are read via 
the Command User Interface. Following a write of 
90H to the Command User Interface, a read from 
address location 00000H outputs the manufacturer 
code (89H). A read from address 00001 H outputs 
the device code (A1 H). It is not necessary to have 
high voltage applied to Vpp to read the Intelligent 
Identifiers from the Command User Interface. 
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Write 

Writes to the Command User Interface enable read- 
ing of device data and Intelligent Identifiers. They 
also control inspection and clearing of the Status 
Register. Additionally, when Vpp = Vppn, the Com- 
mand User Interface controls block erasure and byte 
write. The contents of the interface register serve as 
input to the internal state machine. 

The Command User Interface itself does not occupy 
an addressable memory location. The interface reg- 
ister is a latch used to store the command and ad- 
dress and data information needed to execute the 
command. Erase Setup and Erase Confirm com- 
mands require both appropriate command data and 
an address within the block to be erased. The Byte 
Write Setup command requires both appropriate 
command data and the address of the location to be 
written, while the Byte Write command consists of 
the data to be written and the address of the loca- 
tion to be written. 

The Command User Interface is written by bringing 
WE# to a logic-low level (Vil) while CE# is low. 
Addresses and data are latched on the rising edge 
of WE#. Standard microprocessor write timings are 
used. 

Refer to AC Write Characteristics and the AC Wave- 
forms for Write Operations, Figure 11, for specific 
timing parameters. 


COMMAND DEFINITIONS 

When Vppi_ is applied to the Vpp pin, read opera- 
tions from the Status Register, Intelligent Identifiers, 
or array blocks are enabled. Placing Vppn on Vpp 
enables successful byte write and block erase oper- 
ations as well. 

Device operations are selected by writing specific 
commands into the Command User Interface. Table 
3 defines the 28F008SA-L commands. 


Read Array Command 

Upon initial device powerup and after exit from deep 
powerdown mode, the 28F008SA-L defaults to 
Read Array mode. This operation is also initiated by 
writing FFH into the Command User Interface. Mi- 
croprocessor read cycles retrieve array data. The 
device remains enabled for reads until the Com- 
mand User Interface contents are altered. Once the 
internal Write State Machine has started a block 
erase or byte write operation, the device will not rec- 
ognize the Read Array command, until the WSM has 
completed its operation. The Read Array command 
is functional when Vpp = Vppi_ or Vppn- 


Intelligent Identifier Command 

The 28F008SA-L contains an Intelligent Identifier 
operation, initiated by writing 90H into the Command 


Table 4. Status Register Definitions 


WSMS 

ESS 

ES 

BWS 

VPPS 

R 

R 

R 


7 6 5 4 

SR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 

0 = Busy 

SR.6 = ERASE SUSPEND STATUS 

1 = Erase Suspended 

0 = Erase in Progress/Completed 
SR.5 = ERASE STATUS 

1 = Error in Block Erasure 

0 = Successful Block Erase 
SR. 4 = BYTE WRITE STATUS 

1 = Error in Byte Write 

0 = Successful Byte Write 
SR.3 = Vpp STATUS 

1 = Vpp Low Detect; Operation Abort 
0 = Vpp OK 

SR.2-SR.0 = RESERVED FOR FUTURE 
ENHANCEMENTS 

These bits are reserved for future use and 
should be masked out when polling the Status 
Register. 


3 2 10 

NOTES: 

RY/BY# or the Write State Machine Status bit must first 
be checked to determine byte write or block erase com- 
pletion, before the Byte Write or Erase Status bit are 
checked for success. 

If the Byte Write AND Erase Status bits are set to “1”s 
during a block erase attempt, an improper command se- 
quence was entered. Attempt the operation again. 

If Vpp low status is detected, the Status Register must be 
cleared before another byte write or block erase opera- 
tion is attempted. 

The Vpp Status bit, unlike an A/D converter, does not 
provide continuous indication of Vpp level. The WSM in- 
terrogates the Vpp level only after the byte write or block 
erase command sequences have been entered and in- 
forms the system if Vpp has not been switched on. The 
Vpp Status bit is not guaranteed to report accurate feed- 
back between Vppi_ and Vppn- 
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User Interface. Following the command write, a read 
cycle from address 00000H retrieves the manufac- 
turer code of 89H. A read cycle from address 
00001 H returns the device code of A1H. To termi- 
nate the operation, it is necessary to write another 
valid command into the register. Like the Read Array 
command, the Intelligent Identifier command is func- 
tional when Vpp = Vppi_ or Vpph- 


Read Status Register Command 

The 28F008SA-L contains a Status Register which 
may be read to determine when a byte write or block 
erase operation is complete, and whether that oper- 
ation completed successfully. The Status Register 
may be read at any time by writing the Read Status 
Register command (70H) to the Command User In- 
terface. After writing this command, all subsequent 
read operations output data from the Status Regis- 
ter, until another valid command is written to the 
Command User Interface. The contents of the 
Status Register are latched on the falling edge of 
OE# or CE#, whichever occurs last in the read cy- 
cle. OE# or CE# must be toggled to Vih before 
further reads to update the Status Register latch. 
The Read Status Register command functions when 
Vpp = Vppl or VppH- 


Clear Status Register Command 

The Erase Status and Byte Write Status bits are set 
to “1”s by the Write State Machine and can only be 
reset by the Clear Status Register Command. These 
bits indicate various failure conditions (see Table 4). 
By allowing system software to control the resetting 
of these bits, several operations may be performed 
(such as cumulatively writing several bytes or eras- 
ing multiple blocks in sequence). The Status Regis- 
ter may then be polled to determine if an error oc- 
curred during that sequence. This adds flexibility to 
the way the device may be used. 

Additionally, the Vpp Status bit (SR.3) MUST be re- 
set by system software before further byte writes or 
block erases are attempted. To clear the Status 
Register, the Clear Status Register command (50H) 
is written to the Command User Interface. The Clear 
Status Register command is functional when Vpp = 
VppL or Vpph- 


Erase Setup/Erase Confirm 
Commands 

Erase is executed one block at a time, initiated by a 
two-cycle command sequence. An Erase Setup 
command (20H) is first written to the Command User 


Interface, followed by the Erase Confirm command 
(DOH). These commands require both appropriate 
sequencing and an address within the block to be 
erased to FFH. Block preconditioning, erase and 
verify are all handled internally by the Write State 
Machine, invisible to the system. After the two-com- 
mand erase sequence is written to it, the 28F008SA-L 
automatically outputs Status Register data when 
read (see Figure 8; Block Erase Flowchart). The 
CPU can detect the completion of the erase event 
by analyzing the output of the RY/BY# pin, or the 
WSM Status bit of the Status Register. 

When erase is completed, the Erase Status bit 
should be checked. If erase error is detected, the 
Status Register should be cleared. The Command 
User Interface remains in Read Status Register 
mode until further commands are issued to it. 

This two-step sequence of set-up followed by execu- 
tion ensures that memory contents are not acciden- 
tally erased. Also, reliable block erasure can only 
occur when Vpp = Vppn- In the absence of this high 
voltage, memory contents are protected against era- 
sure. If block erase is attempted while Vpp = Vppi_, 
the Vpp Status bit will be set to “1”. Erase attempts 
while Vppl < Vpp < VppH produce spurious results 
and should not be attempted. 


Erase Suspend/Erase Resume 
Commands 

The Erase Suspend command allows block erase 
interruption in order to read data from another block 
of memory. Once the erase process starts, writing 
the Erase Suspend command (BOH) to the Com- 
mand User Interface requests that the WSM sus- 
pend the erase sequence at a predetermined point 
in the erase algorithm. The 28F008SA-L continues 
to output Status Register data when read, after the 
Erase Suspend command is written to it. Polling the 
WSM Status and Erase Suspend Status bits will de- 
termine when the erase operation has been sus- 
pended (both will be set to “1”). RY/BY# will also 
transition to Voh- 

At this point, a Read Array command can be written 
to the Command User Interface to read data from 
blocks other than that which is suspended. The only 
other valid commands at this time are Read Status 
Register (70H) and Erase Resume (DOH), at which 
time the WSM will continue with the erase process. 
The Erase Suspend Status and WSM Status bits of 
the Status Register will be automatically cleared and 
RY/BY# will return to Vol- After the Erase Resume 
command is written to it, the 28F008SA-L automati- 
cally outputs Status Register data when read (see 
Figure 9; Erase Suspend/Resume Flowchart). Vpp 
must remain at Vppn while the 28F008SA-L is in 
Erase Suspend. 
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Byte Write Setup/Write Commands 
(40H or 10H) 

Byte write is executed by a two-command sequence. 
The Byte Write Setup command (40H or 10H) is writ- 
ten to the Command User Interface, followed by a 
second write specifying the address and data 
(latched on the rising edge of WE#) to be written. 
The WSM then takes over, controlling the byte write 
and write verify algorithms internally. After the two- 
command byte write sequence is written to it, the 
28F008SA-L automatically outputs Status Register 
data when read (see Figure 7; Byte Write Flowchart). 
The CPU can detect the completion of the byte write 
event by analyzing the output of the RY/BY# pin, or 
the WSM Status bit of the Status Register. Only the 
Read Status Register command is valid while byte 
write is active. 

When byte write is complete, the Byte Write Status 
bit should be checked. If byte write error is detected, 
the Status Register should be cleared. The internal 
WSM verify only detects errors for “1”s that do not 
successfully write to “0”s. The Command User In- 
terface remains in Read Status Register mode until 
further commands are issued to it. If byte write is 
attempted while Vpp = Vppi_, the Vpp Status bit will 
be set to “1 ”. Byte write attempts while Vppi_ < Vpp 
< VppH produce spurious results and should not be 
attempted. 

EXTENDED BLOCK ERASE/BYTE 
WRITE CYCLING 

Intel has designed extended cycling capability into 
its ETOX flash memory technologies. The 
28F008SA-L is designed for 1 0,000 byte write/block 
erase cycles on each of the sixteen 64-Kbyte 
blocks. Low electric fields, advanced oxides and 
minimal oxide area per cell subjected to the tunnel- 
ing electric field combine to greatly reduce oxide 
stress and the probability of failure. A 20-Mbyte sol- 
id-state drive using an array of 28F008SA-Ls has a 
MTBF (Mean Time Between Failure) of 3.33 million 
hoursO), over 60 times more reliable than equivalent 
rotating disk technology. 

AUTOMATED BYTE WRITE 

The 28F008SA-L integrates the Quick-Pulse pro- 
gramming algorithm of prior Intel Flash Memory de- 
vices on-chip, using the Command User Interface, 
Status Register and Write State Machine (WSM). 
On-chip integration dramatically simplifies system 
software and provides processor interface timings to 
the Command User Interface and Status Register. 
WSM operation, internal verify and Vpp high voltage 
presence are monitored and reported via the 
RY/BY# output and appropriate Status Register 


bits. Figure 7 shows a system software flowchart for 
device byte write. The entire sequence is performed 
with Vpp at VppH* Byte write abort occurs when RP# 
transitions to V||_, or Vpp drops to Vpp|_. Although the 
WSM is halted, byte data is partially written at the 
location where byte write was aborted. Block era- 
sure, or a repeat of byte write, is required to initialize 
this data to a known value. 

AUTOMATED BLOCK ERASE 

As above, the Quick-Erase algorithm of prior Intel 
Flash devices is now implemented internally, includ- 
ing all preconditioning of block data. WSM opera- 
tion, erase success and Vpp high voltage presence 
are monitored and reported through RY/BY# and 
the Status Register. Additionally, if a command other 
than Erase Confirm is written to the device following 
Erase Setup, both the Erase Status and Byte Write 
Status bits will be set to “1”s. When issuing the 
Erase Setup and Erase Confirm commands, they 
should be written to an address within the address 
range of the block to be erased. Figure 8 shows a 
system software flowchart for block erase. 

Erase typically takes 2.0 seconds per block. The 
Erase Suspend/Erase Resume command sequence 
allows suspension of this erase operation to read 
data from a block other than that in which erase is 
being performed. A system software flowchart is 
shown in Figure 9. 

The entire sequence is performed with Vpp at Vppn- 
Abort occurs when RP# transitions to Vn_ or Vpp 
falls to Vppi_, while erase is in progress. Block data is 
partially erased by this operation, and a repeat of 
erase is required to obtain a fully erased block. 

DESIGN CONSIDERATIONS 

Three-Line Output Control 

The 28F008SA-L will often be used in large memory 
arrays. Intel provides three control inputs to accom- 
modate multiple memory connections. Three-line 
control provides for: 

a) lowest possible memory power dissipation 

b) complete assurance that data bus contention will 
not occur 

To efficiently use these control inputs, an address 
decoder should enable CE#, while OE# should be 
connected to all memory devices and the system’s 
READ# control line. This assures that only selected 
memory devices have active outputs while deselect- 
ed memory devices are in Standby Mode. RP# 
should be connected to the system Powergood sig- 
nal to prevent unintended writes during system pow- 
er transitions. Powergood should also toggle during 
system reset. 


(^Assumptions: 10-Kbyte file written every 10 minutes. (20-Mbyte array)/(1 0-Kbyte file) = 2,000 file writes before erase required. 

(2000 files writes/erase) x (10,000 cycles per 28F008SA-L block) - 20 million file writes. , 

(20 x 10 6 file writes) x (10 min/write) x (1 hr/60 min) = 3.33 X 10 6 MTBF. 
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RY/BY # and Byte Write/Block Erase 
Polling 

RY/BY# is a full CMOS output that provides a hard- 
ware method of detecting byte write and block erase 
completion. It transitions low time twHRL after a 
write or erase command sequence is written to the 


28F008SA-L, and returns to Voh when the WSM 
has finished executing the internal algorithm. 

RY/BY# can be connected to the interrupt input of 
the system CPU or controller. It is active at all times, 
not tristated if the 28F008SA-L CE# or OE# inputs 
are brought to V|h- RY/BY# is also Vqh when the 
device is in Erase Suspend or deep powerdown 
modes. 
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FULL STATUS CHECK PROCEDURE 



Bus 

Operation 

Command 

Comments 

Write 

Byte Write 
Setup 

Data = 40H (10H) 

Address = Byte to be written 

Write 

Byte Write 

Data to be written 
Address — Byte to be written 

Standby/Read 


Check RY/BY# 

Vqh = Ready, Vql = Busy 
or 

Read Status Register 
Check SR. 7 
1 = Ready, 0 = Busy 
Toggle OE# or CE# to 
update Status Register 

Repeat for subsequent bytes 


Full status check can be done after each byte or after a 
sequence of bytes 

Write FFH after the last byte write operation to reset the 
device to Ready Array Mode 


Bus 

Operation 

Command 

Comments 

Optional 

Read 


CPU may already have read 
Status Register data in WSM 
Ready polling above 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4 
1 = Byte Write Error 

SR.3 MUST be cleared, if set during a byte write attempt, 
before further attempts are allowed by the Write State 
Machine. 

SR.4 is only cleared by the Clear Status Register Command, 
in cases where multiple bytes are written before full status is 
checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 7. Automated Byte Write Flowchart 
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Write 20H, 
Block Address 


Bus 

Operation 


Comments 


Data = 20H 

Address = Within block to be 
erased 


Write DOH, 
Block Address 


Full Status 
Check if Desired 


Block Erase 
Completed 


JL Erase Suspend 
Loop 

’’suspencT V I 

vEraseTv^yis 


Write Erase Data = DOH 

Address = Within block to be 
erased 

Standby/Read Check RY/BY# 

Vqh = Ready, Vql = Busy 
or 

Read Status Register 
Check SR. 7 
1 = Ready, 0 = Busy 
Toggle OE# or CE# to 
update Status Register 

Repeat for subsequent bytes 

Full status check can be done after each block or after a 
sequence of blocks 

Write FFH after the last block erase operation to reset the 
device to Ready Array Mode 


FULL STATUS CHECK PROCEDURE 


Status Register Data 
Read (See Above) 


Block Erase 
Successful 


Vpp Range 
Error 


Command Sequence 
Error 


Block Erase 
Error 


Operation 

Optional 


Command 



Comments 

CPU may already have read 
Status Register data in WSM 
Ready polling above 

Check SR. 3 
1 = Vpp Low Detect 


CheckSR.4,5 

Both 1 = Command Sequence 
Error 


Check SR. 5 
1 = Block Erase Error 


SR.3 MUST be cleared, if set during a block erase attempt, 
before further attempts are allowed by the Write State 
Machine 


SR. 5 is only cleared by the Clear Status Register 
Command, in cases where multiple blocks are erased 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 8. Automated Block Erase Flowchart 
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Bus 

Operation 

Command 

Comments 

Write 

Erase 

Suspend 

Data = BOH 

Write 

Read 

Status Register 

Data = 70H 

Standby/ 

Read 


Check RY/BY# 

Voh = Ready, 

V 0 [_ = Busy 

or 

Read Status Register 
Check SR.7 
1 = Ready, 0 = Busy 
Toggle OE# orCE# to 
Update Status Register 

Standby 


Check SR. 6 
1 = Suspended 

Write 

Read Array 

Data = FFH 

Read 


Read array data from block 
other than that being 
erased. 

Write 

Erase Resume 

Data = DOH 


290435-17 

Figure 9. Erase Suspend/Resume Flowchart 


Power Supply Decoupling 

Flash memory power switching characteristics re- 
quire careful device decoupling. System designers 
are interested in 3 supply current issues; standby 
current levels (Isb). active current levels (Ice) and 
transient peaks produced by falling and rising edges 
of CE#. Transient current magnitudes depend on 
the device outputs’ capacitive and inductive loading. 
Two-line control and proper decoupling capacitor 
selection will suppress transient voltage peaks. 
Each device should have a 0.1 jiiF ceramic capacitor 
connected between each Vcc and GND, and be- 
tween its Vpp and GND. These high frequency, low 
inherent-inductance capacitors should be placed as 
close as possible to package leads. Additionally, for 


every 8 devices, a 4.7 jiF electrolytic capacitor 
should be placed at the array’s power supply con- 
nection between Vcc and GND. The bulk capacitor 
will overcome voltage slumps caused by PC board 
trace inductances. 


Vpp Trace on Printed Circuit Boards 

Writing flash memories, while they reside in the tar- 
get system, requires that the printed circuit board 
designer pay attention to the Vpp power supply 
trace. The Vpp pin supplies the memory cell current 
for writing and erasing. Use similar trace widths and 
layout considerations given to the Vcc power bus. 
Adequate Vpp supply traces and decoupling will de- 
crease Vpp voltage spikes and overshoots. 
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Vcc. Vpp, RP# Transitions and the 
Command/Status Registers 

Byte write and block erase completion are not guar- 
anteed if Vpp drops below Vppn- If the Vpp Status bit 
of the Status Register (SR.3) is set to “1”, a Clear 
Status Register command MUST be issued before 
further byte write/block erase attempts are allowed 
by the WSM. Otherwise, the Byte Write (SR.4) or 
Erase (SR. 5) Status bits of the Status Register will 
be set to “1 ”s if error is detected. RP# transitions to 
V|l during byte write and block erase also abort the 
operations. Data is partially altered in either case, 
and the command sequence must be repeated after 
normal operation is restored. Device poweroff, or 
RP# transitions to V||_, clear the Status Register to 
initial value 1 0000 for the upper 5 bits. 

The Command User Interface latches commands as 
issued by system software and is not altered by Vpp 
or CE# transitions or WSM actions. Its state upon 
powerup, after exit from deep powerdown or after 
Vcc transitions below Vlko. is Read Array Mode. 

After byte write or block erase is complete, even 
after Vpp transitions down to Vppi_, the Command 
User Interface must be reset to Read Array mode via 
the Read Array command if access to the memory 
array is desired. 


Power Up/Down Protection 

The 28F008SA-L is designed to offer protection 
against accidental block erasure or byte writing dur- 
ing power transitions. Upon power-up, the 
28F008SA-L is indifferent as to which power supply, 
Vpp or Vcc. powers up first. Power supply sequenc- 
ing is not required. Internal circuitry in the 
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28F008SA-L ensures that the Command User Inter- 
face is reset to the Read Array mode on power up. 

A system designer must guard against spurious 
writes for Vcc voltages above Vlko when Vpp is 
active. Since both WE# and CE# must be low for a 
command write, driving either to Vm will inhibit 
writes. The Command User Interface architecture 
provides an added level of protection since altera- 
tion of memory contents only occurs after success- 
ful completion of the two-step command sequences. 

Finally, the device is disabled until RP# is brought to 
Vih, regardless of the state of its control inputs. This 
provides an additional level of memory protection. 


Power Dissipation 

When designing portable systems, designers must 
consider battery power consumption not only during 
device operation, but also for data retention during 
system idle time. Flash nonvolatility increases us- 
able battery life, because the 28F008SA-L does not 
consume any power to retain code or data when the 
system is off. 

In addition, the 28F008SA-L’s deep powerdown 
mode ensures extremely low power dissipation even 
when system power is applied. For example, porta- 
ble PCs and other power sensitive applications, us- 
ing an array of 28F008SA-Ls for solid-state storage, 
can lower RP# to Vn_ in standby or sleep modes, 
producing negligable power consumption. If access 
to the 28F008SA-L is again needed, the part can 
again be read, following the tpnQv and tpnwL wake- 
up cycles required after RP# is first raised back to 
V|h- See AC Characteristics— Read-Only and Write 
Operations and Figures 1 0 and 1 1 for more informa- 
tion. 
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ABSOLUTE MAXIMUM RATINGS* 

Operating Temperature 

During Read -20°Cto + 70°C0) 

During Block Erase/ Byte Write 0°C to ±70°C 

Temperature Under Bias -20°C to ± 80°C 

Storage Temperature - 65°C to + 1 25°C 

Voltage on Any Pin 

(except Vcc and Vpp) v 

with Respect to GND -2.0V to + 7.0V(2) 

Vpp Program Voltage with 
Respect to GND during 

Block Erase/Byte Write . . . -2.0V to + 14.0V( 2 > 3 ) 
Vcc Supply Voltage 

with Respect to GND -2.0V to + 7.0V(2) 

Output Short Circuit Current 100 mA( 4 ) 

NOTES: 


NOTICE: This data sheet contains information on 
products in the sampling and initial production phases 
of development. The specifications are subject to 
change without notice. Verify with your local Intel 
Sales office that you have the latest data sheet be- 
fore finalizing a design. 

* WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


1 . Operating temperature is for commercial product defined by this specification. 

2. Minimum DC voltage is -0.5V on input/output pins. During transitions, this level may undershoot to -2.0V for periods 
<20 ns. Maximum DC voltage on input/output pins is Vcc + 0.5 V which, during transitions, may overshoot to Vcc + 2.0V 
for periods <20 ns. 

3. Maximum DC voltage on Vpp may overshoot to ± 14.0V for periods <20 ns. 

4. Output shorted for no more than one second. No more than one output shorted at a time. 

5. AC specifications are valid at both voltage ranges. See DC Characteristics for voltage range specific specification. 


OPERATING CONDITIONS 


Symbol 

Parameter 

Notes 

Min 

Max 

Unit 

Ta 

Operating Temperature 




°C 

Vcc 

Vcc Supply Voltage (Read) 

5 



V 

Vcc 

Vcc Supply Voltage 
(Program/ Erase) 




V 

Vcc 

Vcc Supply Voltage 

5 

4.50 

5.50 

V 


DC CHARACTERISTICS V C c = 3.3V ±0.3V Read, 3.15-3.6 Program/Erase 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

Ili 

Input Load Current 

1 



±0.5 

jllA 

V CC = V CC Max 
V||\j = Vcc or GND 

l|_0 

Output Leakage Current 

1 



±0.5 

jjl A 

V CC = V CC Max 
VOUT = Mcc or GND 

•ccs 

Vcc Standby Current 

1,3 


20 

2.0 

mA 

V CC = v cc Max 
CE# = RP# = V| H 

30 

100 

julA 

Vcc = Vcc Max 

CE# = RP# - V C c ±0.2V 

•CCD 

Vcc Deep PowerDown 
Current 

1 


0.20 

1.0 

|UL A 

RP# = GND ±0.2V 
Iqut (RY/BY#) = 0mA^ 
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DC CHARACTERISTICS (Continued) 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

•CCR 

Vcc Read Current 

1 


5 

12 

mA 

Vcc = Vcc Max, CE# = GND 
f = 5 MHz, l 0 UT = 0 mA 
CMOS Inputs 

5 

12 

mA 

V CC = v cc Max, CE# = V|i_ 
f = 5 MHz, Iqut = 0 mA 
TTL Inputs 

•ccw 

Vcc Byte Write Current 

1 


B 

18 

mA 

Byte Write In Progress 


Vcc Block Erase Current 

1 


6 

18 

m 

Block Erase In Progress 


Vcc Erase Suspend 
Current 

1,2 


3 

6 

E3 

Block Erase Suspended 
CE# = V| H 

Ipps 

Vpp Standby Current 

1 


B 

±15 


Vpp ^ Vcc 

IPPD 

Vpp Deep PowerDown 
Current 

1 


0.10 


jx A 

RP# = GND ±0.2V 

IPPR 

Vpp Read Current 





ES3 

Vpp > Vcc 

Ippw 

Vpp Byte Write Current 

1 




mA 

Vpp = VppH 

Byte Write in Progress 

IpPE 

Vpp Block Erase Current 

1 


10 

30 

mA 

Vpp = VppH 

Block Erase in Progress 

B 

Vpp Erase Suspend 
Current 

1 


90 

200 

jxA 

Vpp = VppH 

Block Erase Suspended 

V| L 

Input Low Voltage 


-0.5 


0.6 

B 


V| H 

Input High Voltage 


2.0 



B 


VOL 

Output Low Voltage 

mm 



0.4 


Vcc = v cc Min, Iql = 2 mA 

VOHI 

Output High Voltage (TTL) 

mm 

''T 

cvj 



B 

Vcc = v cc Min, Ioh = “2 mA 

VOH2 

Output High Voltage 
(CMOS) 

m 

0.85 Vcc 

■ 


V 

Iqh = 2.5 jllA, Vcc = Vcc Min 


Iqh =—100 juA, Vcc = Vcc Min 


Vpp during Normal 
Operations 

4 

0.0 


6.5 

V 


VppH 

Vpp during Erase/Write 
Operations 

■ 



12.6 

V 


Vlko 

Vcc Erase/Write Lock 
Voltage 

■ 




V 




CAPACITANCE(S) T A = 25°C, f = 1 MHz 


Symbol 

Parameter 

Typ 

Max 

Unit 

Condition 

C|N 

Input Capacitance 

6 

8 

PF 

> 

o 

z 

> 

CqUT 

Output Capacitance 

8 

12 

PF 

Vqut = 0V 
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NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vqq = 3.3V, Vpp = 12.0V, T = 25°C. These currents 
are valid for all product versions (packages and speeds). 

2. Icces is specified with the device deselected. If the 28F008SA-L is read while in Erase Suspend Mode, current draw is 
the sum of Icces and Iccr- 

3. Includes RY/BY#. 

4. Block Erases/Byte Writes are inhibited when Vpp = Vpp[_ and not guaranteed in the range between Vppn and Vppi_. 

5. Sampled, not 100% tested. 


DC CHARACTERISTICS V C c = 5.0V ±10% 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

Ili 

Input Load Current 

1 



±1.0 

julA 

Vcc = Vcc Max 
V|N = Vcc or GND 


Output Leakage Current 







ices 

Vcc Standby Current 


■ 


2.0 

mA 

Vcc = Vcc Max 
CE# = RP# = V| H 


100 

juA 

Vcc = v cc Max 

CE# = RP# = V C c ±0.2V 





0.20 

1.2 

/xA 

RP# = GND ±0.2V 
Iqut (RV/BY#) = 0 mA 

Iccr 

Vcc Re ^d Current 

1 


20 


mA 

Vcc = V C c Max, CE# = GND 
f = 5 MHz, Iout = 0 mA 
CMOS Inputs 

25 

50 



BBMI 

V CC Byte Writ e Current 

1 


m 

30 

mA 

Byte Write In Progress 

ICCE 

Vcc Block Erase Current 

ma 


ci 

30 


Block Erase In Progress 

Icces 

Vcc Erase Suspend 
Current 

IB 


5 

10 

mA 

Block Erase Suspended, 
CE# = V|h 

Ipps 

Vpp Standby Current 

1 


±1 

±15 

jlaA 

0 

0 

> 

VI 

Q. 

Q_ 

> 

ipPD 

Vpp Deep PowerDown 
Current 



0.10 

5.0 

juA 

RP# = GND ±0.2V 


Vpp Read Current 

1 


90 

200 

jlaA 

0 

0 

> 

A 

Q- 

CL 

> 

ippw 

Vpp Byte Write Current 



10 

30 

mA 

Vpp - Vpph 

Byte Write in Progress 


Vpp Block Erase Current 



10 

30 

mA 

Vpp = Vppn 

Block Erase in Progress 

ipPES 

Vpp Erase Suspend 
Current 

1 


90 

200 

fxA 

Vpp = Vppn 

Block Erase Suspended 

V|L 

Input Low Voltage 


-0.5 


0.8 

V 



Input High Voltage 


2.0 


V C C + 0.5 

V 



Output Low Voltage 




0.45 

V 

Vcc = Vcc Min, Iql = 5.8 mA 

BH 

Output High Voltage (TTL) 

3 

2.4 



V 

Vcc = v cc Min, Iqh = “2.5 mA 

V OH2 

Output High Voltage 
(CMOS) 

■ 

0.85 V CC 



V 

Iqh = “2.5 jlxA, Vcc = v cc Min 

< 

0 

0 

1 

0 

Iqh = -100 jllA, Vcc = Vcc Min 

VppL 

Vpp during Normal 
Operations 

4 

0.0 


6.5 

V 
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DC CHARACTERISTICS (Continued) V C c = 5.0V ±10% 



Parameter 


Min 

Typ 


Unit 

Test Condition 

VppH 

Vpp during Erase/Write 
Operations 


11.4 

12.0 

12.6 

V 


v LKO 

Vcc Erase/Write Lock 
Voltage 


2.0 



V 



NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, Vpp = 12.0V, T = 25°C. These currents 
are valid for all product versions (packages and speeds). 

2. Icces IS specified with the device deselected. If the 28F008SA-L is read while in Erase Suspend Mode, current draw is 
the sum of Icces and Iccr- 

3. Includes RY/BY#. 

4. Block Erases/Byte Writes are inhibited when Vpp = VppL and not guaranteed in the range between Vppn and Vppi_. 


AC INPUT/OUTPUT REFERENCE WAVEFORM 




OUTPUT 


290435-7 


AC test inputs are driven at 3.0V for a Logic “1” and 0.0V for a Logic “0”. Input timing 
begins, and output timing ends, at 1.5V. Input rise and fall times (10% to 90%) < 10 ns. 


AC TESTING LOAD CIRCUIT! 2 ) 



AC CHARACTERISTICS— Read-Only Operations^) Vcc = 33V ±o.3V, s.ov ±10% 


Versions 

28F008SA-L200 

Q| 

Symbol 

Parameter 

Notes 

Min 

Max 

UVAV 

*RC 

Read Cycle Time 


200 


ns 



Address to Output Delay 



200 

ns 



CE# to Output Delay 

2 


200 

ns 



RP# High to Output Delay 





tGLQV 

tOE 

OE# to Output Delay 

2 


85 


tELQX 

tLZ 

CE# to Output Low Z 

3 

0 


ns 

*EHQZ 

tHZ 

CE# High to Output High Z 

3 


55 

ns 



OE# to Output LowZ 

3 

0 





OE# High to Output High Z 

3 


30 

ns 


tOH 

Output Hold from Addresses, CE# or OE# 
Change, Whichever is First 


0 


ns 


NOTES: 

1 . See AC Input/Output Reference Waveform for timing measurements. 

2. OE# may be delayed up to tcE-toE after the falling edge of CE# without impact on tcE- 

3. Sampled, not 100% tested. 
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AC CHARACTERISTICS — Write Operations* 1 ) Vqc = 3.3V ±o.3V,5.ov ±10% 


Versions 

28F008SA-L200 

Unit 

Symbol 

Parameter 

Notes 

Min 

Max 

*AVAV 

twc 

Write Cycle Time 


200 


ns 

tpHWL 



2 

1 


■9 





20 


ns 

tWLWH 

t w p 

WE# Pulse Width 


60 


ns 



Vpp Setup to WE# Going High 

2 



Mi 



Address Setup to WE# Going High 

3 

60 





Data Setup to WE# Going High 

4 

60 


ns 


*DH 

Data Hold from WE# High 


5 


ns 


*AH 

Address Hold from WE# High 


5 


ns 

tWHEH 

tCH 

CE# Hold from WE# High 


10 


ns 

EMI 

twPH 

WE# Pulse Width High 


30 



EM 


WE# High to RY/BY# Going Low 



100 

EiSI 

tWHQVI 


Duration of Byte Write Operation 


6 


B9I 

tWHQV2 


Duration of Block Erase Operation 

5,6 

0.3 


sec 

tWHGL 


Write Recovery 
before Read 


0 


JUS 

tQWL 

tVPH 

Vpp Hold from Valid SRD, RY/BY# High 

2,6 

0 


ns 


NOTES: 

1 . Read timing characteristics during erase and byte write operations are the same as during read-only operations. Refer to 
AC Characteristics for Read-Only Operations. 

2. Sampled, not 100% tested. 

3. Refer to Table 3 for valid Ain for byte write or block erasure. 

4. Refer to Table 3 for valid Din for byte write or block erasure. 

5. The on-chip Write State Machine incorporates all byte write and block erase system functions and overhead of standard 
Intel flash memory, including byte program and verify (byte write) and block precondition, precondition verify, erase and 
erase verify (block erase). 

6. Byte write and block erase durations are measured to completion (SR.7 = 1, RY/BY# = Voh)- Vpp should be held at 
VppH until determination of byte write/block erase success (SR.3/4/5 = 0) 
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BLOCK ERASE AND BYTE WRITE PERFORMANCE v cc = 3.3V to 0.3V, 5.ov ±io% 




28F008SA-L-200 

I | n :+ 

Parameter 

Notes 

Min 

Typ(i) 

Max 

unit 

Block Erase Time 

2 


2.0 

12.5 

sec 

Block Write Time 

2 


0.7 

2.6 

sec 

Byte Write Time 



8 

(Note 3) 

fJLS 


NOTES: 

1. 25°C, 12.0 V PP . 

2. Excludes System-Level Overhead. 

3. Contact your Intel representative for information on the maximum byte write specification. 


0M(F©[^K£]^Y0©K] 


3-499 


CJ1 

o 

o 


<Q 

c 

CD 



WRITE 

V cc POWER-UP WR | T E BYTE WRITE OR VALID ADDRESS & DATA (BYTE WRITE) AUTOMATED BYTE WRITE READ STATUS WRITE READ ARRAY 

& STANDBY ERASE SETUP COMMAND OR ERASE CONFIRM COMMAND OR ERASE DELAY REGISTER DATA COMMAND 








290435-10 


28F008SA-L 




28F008SA-L 


Intel 


ALTERNATIVE CE# -CONTROLLED WRITES V cc = 3.3V ±0.3V,5.0V ± 10 % 


Versions 

28F008SA-L200 

Unit 

Symbol 

Parameter 

Notes 

Min 

Max 

tAVAV 

twc 

Write Cycle Time 


200 


ns 

tpHEL 

tps 

RP# High Recovery to CE# Going Low 

2 

1 


JLLS 

tWLEL 

tws 

WE# Setup to CE# Going Low 


0 


ns 

tELEH 

tcp 

CE# Pulse Width 


70 


ns 

*VPEH 

tvps 

Vpp Setup to CE# Going High 

2 

100 


ns 

tAVEH 

*AS 

Address Setup to CE# Going High 

3 

60 



*DVEH 

tos 

Data Setup to CE# Going High 

4 

60 



tEHDX 

tDH 

Data Hold from CE# High 


5 


ns 

*EHAX 

Uh 

Address Hold from CE# High 


5 


ns 

tEHWH 

tWH 

WE# Hold from CE# High 


0 



tEHEL 

tEPH 

CE# Pulse Width High 


25 



tEHRL 


CE# High to RY/BY# Going Low 



100 

llPiB 

tEHQVI 


Duration of Byte Write Operation 

5 

6 


■9 

tEHQV2 


Duration of Block Erase Operation 

5 

0.3 



tEHGL 


Write Recovery before Read 


0 



tQVVL 

tVPH 

Vpp Hold from Valid SRD, RY/BY# High 

2,5 

0 


ns 


NOTES: 

1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CE# and WE#. In systems where 
CE# defines the write pulsewidth (within a longer WE# timing waveform), all setup, hold and inactive WE# times should be 
measured relative to the CE# waveform. 

2. Sampled, not 100% tested. 

3. Refer to Table 3 for valid Ain for byte write or block erasure. 

4. Refer to Table 3 for valid Din for byte write or block erasure. 

5. Byte write and block erase durations are measured to completion (SR.7 = 1, RY/BY# = Voh)- v pp should be held at 
VppH until determination of byte write/block erase success (SR.3/4/5 = 0) 
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ORDERING INFORMATION 


| E hr»|F|0|0|8|s|A|-TT7R7| 


V 


n 


_j 

ACCESS SPEED 


PACKAGE 3.3V 200 ns 

E = STANDARD 40 LEAD TSOP 
F = REVERSE 40 LEAD TSOP 
PA = 44 LEAD PSOP 


(ns) 
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VALID COMBINATIONS: 

E28F008SA-L200 F28F008SA-L200 PA28F008SA-L200 


ADDITIONAL INFORMATION 


AP-359 

28F008SA Datasheet 
“28F008SA Hardware Interfacing” 

Order 

Number 

290429 

292094 

AP-360 

“25F008SA Software Drivers” 

292095 

AP-364 

“28F008SA Automation and Algorithms” 

292099 

ER-27 

“The Intel 28F008SA Flash Memory” 

29401 1 

ER-28 

“ETOX III Flash Memory Technology” 

290412 


REVISION HISTORY 


Number 

Description 

002 

Modified Erase Suspend Flowchart 
Lowered Vlko ^ r o m 2.2V to 2.0V 

Combined Vpp Standby Current and Vpp Read Current into One Vpp Standby Current Spec, 
with Two Test Conditions (DC Characteristics Table) 

Removed — 250 Speed Bin 

003 

PWD renamed to RP# for JEDEC standardization compatibility. 

Changed Ipps standby current specifications from ± 1 0 jxA to ± 1 5 jllA in DC Characteristics 
tables. 

004 

Changed Iccr test condition from f = 8 MHz to f = 5 MHz 
Changed Ices Max spec, from 50 jllA to 2.0 mA 
Added IppR spec. 

Corrected Ipps spec, typo 


Added Vqhz (Output High Voltage— CMOS) spec. 

Changed Operating Temp range (read) from 0°C-70°C to -20°C-70°C. 
Changed Vqc range from 3.3V +0.3V to 3.15V-3.6V for Program/Erase. 
Added Byte Write Time spec. 
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1.0 INTRODUCTION 

With the availability of the 28F016SA/SV and the 
DD28F032SA, Intel offers a complete FlashFile™ 
memory family of components. Available in 8-, 16- and 
32-Mbit capacities, these components offer flash solu- 
tions for applications ranging from mobile computing 
and communications to embedded code/data storage 
flash memory systems. 

This application note covers the area of designing com- 
patible and/or compact PCB layouts for FlashFile 
components (see Figure 1 for example). In addition to 
flexible layouts, flash-to-ROM compatible solutions are 
provided. 


2.0 PINOUT OPTIONS 

Whereas the 28F008SA is 8-bit wide, the 
28F016SA/SV and DD28F032SA are high-perform- 
ance, 16-bit wide FlashFile components, offering a 
user-configurable bus width. Hence, an additional eight 
I/O pins are on the 28F016SA/SV and DD28F032SA. 
Furthermore, the implementation of additional features 
such as write protect, block locking and user-selectable 
3.3V and 5.0V operation require control pins for these 
functions. Additionally, the DD28F032SA has three 
chip enable pins, compared to two on the 
28F016SA/SV, and one on the 28F008SA. In summa- 
ry, the optimization of the 28F016SA/SV and the 
DD28F032SA architecture, which achieves high write 
performance, results in a different pinout configuration 
from the 28F008SA. 



292159-1 I 

Figure 1. Two Layer Solution for Upgrading from 
Two 28F008SA to One 28F016SA/SV, FlashFile 
Component (x8 Mode) 


intel. 

2.1 28F016SA to 28F016SV Pinout 
Compatibility 

The SmartVoltage 16-Mbit 28F016SV is fully pinout- 
compatible with the 28F016SA. Both SmartVoltage 
16-Mbit FlashFile Memory devices use a 56-Lead 
TSOP and SSOP packages. 

The 28F016SA uses the 3/5# pin (pin 1) to configure 
the flash memory for operation at 3.3V or 5.0V Vcc- 
The 28F016SV uses an internal detector connected to 
the Vqc pi n to accomplish this same function. The 
3/5# pin is no longer needed and pin 1 has been re- 
named NC (No Connect), therefore preserving compat- 
ibility between the two products. All layouts derived 
for 28F016SA are 100% compatible with 28F016SV, 
and can be used with no further modifications. 


3.0 AVAILABLE PACKAGES 

The 28F008SA is offered in two packages — the 40-Lead 
Thin Small Outline Packaging (TSOP), both Standard 
and Reverse pinout (Figure 2), and the 44-Lead Plastic 
Small Outline Package (PSOP) (Figure 3). The use of 
Standard and Reverse TSOP packages arranged in a 
serpentine layout results in an optimum array density 
for the 28F008SA (see Section 4.8). The 28F016SA/SV 
and DD28F032SA are available in Standard 56-Lead 
TSOP package (see Figure 4). As shown in the exam- 
ples, the same high density compared to a serpentine 
layout is achievable with the use of Standard 56-Lead 
TSOPs arranged in an upright position. The 
28F016SA/SV are also available in 56-Lead Shrink 
Small Outline Package (SSOP) packaging (refer to Fig- 
ure 5). The 16-Mbit ROM chip used, comes in Stan- 
dard 44-Lead PSOP and 44-Lead TSOP packages, as 
shown in Figures 6 and 7, respectively. 


4.0 PCB LAYOUTS 

Very high-density layouts have been made possible by 
using Intel’s advanced PCMCIA layout specifications. 
All layouts considered use from two to three layers. 
Since power and ground are generally connected to 
their respective planes, Vcc an ^ GND pins have been 
left unconnected. 

Solutions are designed using the “PADS” software by 
Viewlogic Systems, Inc. Of course, the Gerber files gen- 
erated are industry-standard and can be used on any 
major PCB layout tool. 
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Table 1 provides a list of layouts derived along with 
diagrams and relevant information. For the schematics 
of these cases, see Section 6.0. 


4.1 Compatible Layout for Upgrading 
from Two 8-Mbit to One 16-Mbit 
FlashFile Component 

This layout deals with two 28F008SAs upgraded to one 
28F016SA/SV in 8-bit and 16-bit modes. Two layers 
are used, with both the 28F008SAs and the 
28F016SA/SV residing on layer 1. Figures 8-10 show 
xl6 mode layout diagrams (for x8 mode, see Section 
6 . 0 ) 

Pins CEo#, BYTE#, 3/5# (28F016SA only) and 
WP# have been left unconnected. CEo# and BYTE# 
should be connected to the ground plane. In x8 mode, 
BYTE# pin is grounded, while in xl6 mode, it is con- 
nected to Vcc- Connection of 3/5# (28F016SA only) 
and WP# is dependent on system configuration. Con- 
sult Intel’s 28F016SA/SV datasheets for complete de- 
scription of these pins (order numbers 290489 and 
290528, respectively). 

In x8 mode layout, A 20 connects to CE# of the upper 
8 Mbit. This is a savings of an extra address line. 


The enabling of the 28F016SA/SV can either be done 
directly from the system bus through a decoder or by 
ANDing the 8-Mbit CE#s and connecting output to 
CEj# (for schematics see file 2t8xtloh.sch (xl6 mode) 
and 2t8tl6oh.sch (x8 mode) in Section 6.0). Of course, 
the final implementation is dependent on the system 
designer’s preference. 


Important dimensions are given below (for both x8 and 
xl6 modes): 


Feature 

Dimension 

Total Layout Area 

0.709" sq. 
(457.28 mm2) 

X, Y 

0.836" , 0.848" 

(21.23 mm, 21.54 mm) 

Trace Width 

0.005" (0.127 mm) 

Via Size 

0.025" (0.635 mm) 

Trace to Trace Spacing 

0.005" (0.127 mm) 


Table 1. PCB Layout Diagrams and Reference Information 


Case 

Section 

Compatible Layout for Upgrading from Two 8-Mbit (TSOP) to One 16-Mbit (TSOP) FlashFile 
Component (Both x8 and xl 6 Cases Considered) 

4.1 

Compatible Layout for Intel’s 16-Mbit (TSOP) FlashFile Component to 16-Mbit ROM Chip 
(PSOP, TSOP) 

4.2 

Compact Layout for Intel’s 16-Mbit FlashFile Component Using Standard 56-Lead TSOP Pinout 

mm 

Compatible Layout for Upgrading from Four 8-Mbit (TSOP) to Two 16-Mbit (TSOP) FlashFile 
Components (Both x8 and xl 6 Cases Considered) 

4.4 

Compatible Layout for Upgrading from Four 8-Mbit (TSOP) to One 32-Mbit (TSOP) 
FlashFile Component (Both x8 and xl 6 Cases Considered) 

4.5 

Compatible Layout for Upgrading from Two 8-Mbit (PSOP) to One 16-Mbit (SSOP) (Both x8 and 
xl 6 Cases Considered) 

4.6 

Compatible Layout for Upgrading from Two 8-Mbit (TSOP) to One 16-Mbit (SSOP) (Both x8 and 
xl 6 Cases Considered) 

B 

Serpentine Layout for 8-Mbit FlashFile Component using Standard and Reverse 40-Lead TSOP 
Pinout 

4.8 

Compatible Layout for Upgrading from Eight 8-Mbit (TSOP) to Two 32-Mbit (TSOP) FlashFile 
Components 

4.9 

Compatible Layout for Upgrading from 16-Mbit (TSOP) to 16-Mbit (SSOP) 

4.10 
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4.2 Compatible Layout for Intel’s 
16-Mbit FlashFile Component to 
16-Mbit ROM Chip 

Three cases of layout are considered: 

1. 28F016SA (56-Lead TSOP Package) to 16-Mbit 
ROM (44-Lead TSOP Package) on the same side of 
the board (see Figures 11-13). 

2. Layout with components (56-Lead TSOP 28F016SA 
to 44-Lead PSOP 16-Mbit ROM) on same side of the 
board (see Figures 14-16). 

3. Chips (56-Lead TSOP 28F016SA to 44-Lead PSOP 
16-Mbit ROM) on opposite sides of the board (see 
Section 6.0 for layout files). 

All three cases use two layers. 

Pins CEq#, WE#, 3/5#, RP#, WP# are left uncon- 
nected. With the exception of CEq# (which needs to be 
grounded), connection of pins depends on the system 
design parameters. 

Since pin D15/A.1 acts as the 16th line of data bus 
during xl6 operations, and the lowest address bit dur- 
ing x8 operations, it is connected to both Aq and D15 
pins on the 16-Mbit component. 

Pins 29 and 30 (both NC) of 28F016SA overlap with 
the pin 37 (A 13) of 16-Mbit ROM in the same side of 
board layout (see Figures 14-16). From a manufactur- 
ing point of view, solder paste stencil has to be opti- 
mized for appropriate volume of solder. This ensures 
proper spacing between adjacent pins. 

Important dimensions are given below: 


28F016SA (56-Lead TSOP) to 16-Mbit ROM (44-Lead 
TSOP) same side: 


Feature 

Dimension 

Total Layout Area 

0.63" sq. (405.8 mm2) 

X, Y 

0.84" , 0.75" 

(21.3 mm, 19.05 mm) 

Trace Width 

0.005" (0.127 mm) 

Via Size 

0.025" (0.635 mm) 

Trace to Trace Spacing 

6.005" (0.127 mm) 


intel. 

28F016SA (56-Lead TSOP) to 16-Mbit ROM (44-Lead 
PSOP) same side: 


For same side of the board: 


Feature 

Dimension 

Total Layout Area 

0.587" sq. (379.3 mm2) 

X, Y 

0.524", 1.12" 

(13.31 mm, 28.5 mm) 

Trace Width 

0.005" (0.127 mm) 

Via Size 

0.025" (0.635 mm) 

Trace to Trace Spacing 

0.005" (0.127 mm) 


28F016SA (56-Lead TSOP) to 16-Mbit ROM (44-Lead 
PSOP) opposite side: 


Feature 

Dimension 

Total Layout Area 

0.582" sq. 
(375.34 mm2) 

X, Y 

0.524", 1.11" 

(13.31 mm, 28.20 mm) 

Trace Width 

0.006" (0.1524 mm) 

Via Size 

0.04" (1.016 mm) 

Trace to Trace Spacing 

0.006" (0.1524 mm) 


4.3 Compact Layout for Intel’s 16-Mbit 
FlashFile Component Using 
Standard 56-Lead TSOP Pinout 

Highly-dense flash chip array as compact as the serpen- 
tine layout of the 28F008SA is achievable with Stan- 
dard 56-Lead TSOP package using three layers (see 
Figures 17-20). Additionally, power and ground can 
be routed on layer 1. 


Important dimensions are given below: 


Feature 

Dimension 

Total Layout Area 

2.015" sq. (1300 mm2) 

X, Y 

1.736", 1.161" 

(44.1 mm, 29.49 mm) 

Trace Width 

0.003" 0.0762 mm) 

Via Size 

0.025" (0.635) 

Trace to Trace Spacing 

0.003" (0.0762 mm) 

Minimum Annular Ring 

0.01" (0.254 mm) 
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4.4 Compatible Layout for Upgrading 
from Four 8-Mbit to Two 16-Mbit 
FlashFile Components 

This section describes the layout solution for four 
28F008SA to two 28F016SA/SV FlashFile components 
in x8 and xl6 modes. Two layers are used to achieve 
the desired compactness. Solution is obtained using lay- 
out discussed in Section 4.1 twice (see Section 6.0 for 
layout files). 


Important dimensions are given below (for both x8 and 
xl6 modes): 


Feature 

Dimension 

Total Layout Area 

1.547" sq. (998 mm2) 

X, Y 

1.75" , 0.884" 

(44.45 mm, 22.45 mm) 

Trace Width 

0.005" (0.127 mm) 

Via Size 

0.025" (0.635 mm) 

Trace to Trace Spacing 

0.005" (0.127 mm) 


4.5 Compatible Layout for Upgrading 
from Four 8-Mbit to One 32-Mbit 
FlashFile Component 

Compact layout for upgrading from four 28F008SA to 
one DD28F032SA FlashFile component in x8 and xl6 
modes is considered in this section (see Section 6.0 for 
layout files). Two layers are used. 


Important dimensions are given below (for both x8 and 
xl6 modes): 


Feature 

Dimension 

Total Layout Area 

1.48" sq. (956 mm2) 

X, Y 

1.75" ,0.847" 

(44.45 mm, 21.5 mm) 

Trace Width 

0.005" (0.127 mm) 

Via Size 

0.025" (0.635 mm) 

Trace to Trace Spacing 

0.005" (0.127 mm) 


4.6 Compatible Layout for Upgrading 
from Two 8-Mbit (PSOP Packaging) 
to One 16-Mbit (SSOP Packaging) 

This layout deals with two 28F008SA (in PSOP pack- 
aging) upgraded to one 28F016SA/SV (in SSOP pack- 
aging) in 8-bit and 16-bit modes. Two layers are used, 
with the 28F008SAs on layer 1 and the 28F016SA/SV 
residing on layer 2 (see Section 6.0 for layout files). 

For unconnected pin information and details concern- 
ing enabling of the chips, consult Section 4.1 (also see 
schematic file 2t8tl6h.sch listed in Section 6.0). 


Important dimensions are given below (for both x8 and 
xl6 modes): 


Feature 

Dimension 

Total Layout Area 

1.5" sq. (969 mm2) 

X, Y 

1.341", 1.12" 

(34.06 mm, 28.45 mm) 

Trace Width 

0.005" (0.127 mm) 

Via Size 

0.025" (0.635 mm) 

Trace to Trace Spacing 

0.005" (0.127 mm) “ 


4.7 Compatible Layout for Upgrading 
from Two 8-Mbit (TSOP Packaging) 
to One 16-Mbit (SSOP Packaging) 

This layout deals with two 28F008SA (TSOP packag- 
ing) to one 28F016SA/SV (SSOP package) in 8-bit and 
16-bit modes. Two layers are used, with the 28F008SAs 
and the 28F016SA on opposite sides of the board (see 
Section 6.0 for layout files). 

For unconnected pin information and details concern- 
ing enabling of the chip, consult Section 4.1. 
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Important dimensions are given below (for both x8 and 
xl6 modes): 


Feature 

Dimension 

Total Layout Area 

0.786" sq. (507 mm2) 

X, Y 

0.836" , 0.94" 

(21.23 mm, 23.9 mm) 

Trace Width 

0.005" (0.127 mm) 

Via Size 

0.025" (0.635 mm) 

Trace to Trace Spacing 

0.005" (0.127 mm) 


Important dimensions are given below: 


Feature 

Dimension 

Total Layout Area 

3.47" sq. (2240 mm2) 

X, Y 

1.93", 1.8" 

(49 mm, 45.72 mm) 

Trace Width 

0.005" (0.127 mm) 

Via Size 

0.025" (0.635 mm) 

Trace to Trace Spacing 

0.005" (0.127 mm) 


4.8 Serpentine Layout for 8-Mbit 
FlashFile Component Using 
Standard and Reverse 40-Lead 
TSOP Pinout 

This section describes an 8-Mbyte flash memory array 
using TSOP packaged 28F008SAs in Standard and Re- 
verse configurations (see section 6.0 for layout files). A 
layout like this is used in Intel’s Series 2 flash memory 
cards and provides optimum array density for available 
board space. Additionally, two layers are used. 

Component RY/BY#s and CE#s are left unconnect- 
ed. 


Important dimensions are given below: 


Feature 

Dimension 

Total Layout Area 

3.06" sq. (1974 mm 2 ) 

X, Y 

1.7", 1.8" 

(43.18 mm, 45.72 mm) 

Trace Width 

0.005" (0.127 mm) 

Via Size 

0.025" (0.635 mm) 

Trace to Trace Spacing 

0.005" (0.127 mm) 


4.9 Compatible Layout for Upgrading 
from Eight 8-Mbit to Two 32-Mbit 
FlashFile Components 

The serpentine layout described in Section 4.8, is used 
in this solution with slight modifications. Besides per- 
formance increase, saving of more than twice the PCB 
area are achievable when upgrading from 28F008SA to 
DD28F032SA (see Section 6.0 for layout files). The 
layout uses two layers. 


4.10 Compatible Layout for Upgrading 
from 16-Mbit (TSOP to 16-Mbit 
(SSOP) 

This layout enables easy upgrade from 56-TSOP pack- 
age to 56-SSOP package. With the exception of NC 
pins, all pins are connected between the two packages. 
The layout uses two layers. 


Important dimensions are given below: 


Feature 

Dimension 

Total Layout Area 

0.953" sq. (615 mm2) 

X, Y 

1.49", 0.64" 

(37.85 mm, 16.25 mm) 

Trace Width 

0.005" (0.127 mm) 

Via Size 

0.025" (0.635 mm) 

Trace to Trace Spacing 

0.005" (0.127 mm) 


5.0 DECOUPLING 

To eliminate voltage variations, and thus insuring opti- 
mum performance in a high speed environment, use 
of DECOUPLING capacitors is recommended for 
FlashFile components. Both main and erase/write 
power supplies need to be decoupled against DC drifts 
and switching transients “noise.” 

For FlashFile components, a 0.1 fxF, or greater, multi- 
layer ceramic capacitor per device is recommended. 
Additional suggestions to obtain good decoupling per- 
formance include: 

1. The lead length and bond lines (device to capacitor 
to ground) must be kept to a minimum, since they 
are a major source of inductance. 
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2. To increase path numbers (gridding) for reduced in- 
ductance and more effective surge-current availabil- 
ity, use one capacitor per chip. This also helps in 
reducing the lead length and bond lines. 


6.0 GENERAL GUIDELINES AND 

METHODOLOGY FOR DESIGNING 
COMPATIBLE/COMPACT LAYOUT 

Much effort has been made to incorporate most of the 
common layout combinations. However, for cases not 
considered here, a set of general guidelines follow to 
assist in developing solutions. Some of the key points 
are: 

1. Select packages to use. 

2. Develop part decals based on dimensions provided 
by respective vendors. Leave enough pads room to 
allow for manufacturing tolerances. 

3. Select the optimum placement of part decals after 
trying different combinations. 

4. To minimize manufacturing cost, use thick tracks 
(0.005 inches minimum). 

5. Keep via count to a minimum. 

6. Use largest vias permitted by the area constraints 
and process. 

7. To reduce signal attenuation and noise, avoid 90° 
bends in the track routing (instead, use two 45° 
bends). 

8. Use separate planes for ground and power. If limited 
by number of layers, use thick tracks, two to three 
times wider than signals track width. 


As mentioned before, Gerber files are generated using 
“PADS” software by Viewlogic Systems, Inc. Howev- 
er, OrCAD® package is used for schematic entry. 

Each layout case considered consists of a minimum of 
four Gerber files (Layer 1, Layer 2, Soldermask 1 and 
Silkscreen 1) and one schematic file. Additional layers 
or schematic files might be present in some cases (see 
Table 2 for filename conventions used). 


Table 2. Filename Conventions 


Filename 

Convention 

Fi/enamea.* 

Layer 1 (Gerber File) 

Filenameb.* 

Layer 2 (Gerber File) 

Fi/enamec* 

Layer 3 (Gerber File) 

Filenames .* 

Silkscreen 1 (Gerber File) 

Filename t.* 

Silkscreen 2 (Gerber File) 

Filename m.* 

Soldermask 1 (Gerber File) 

Filename n.* 

Soldermask 2 (Gerber File) 

Filenamelb. * 

Page 1 (Schematic File) 

Filenames* 

Page 2 (Schematic File) 


7.0 AVAILABILITY OF FILES 

Due to space constraints, the layout diagrams and ac- 
companying schematics for all the cases are not includ- 
ed in this application note. However, they are available 
through Intel’s Bulletin Board Service (BBS) under the 
FlashFile technology area. The number to dial is: 

North America and Japan(l) 916-356-3600 

Europe +44-793-496340 


1 When calling from Japan, add “01” before the num- 
ber listed above. 
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The following is a complete list of files present on the BBS: 

Index of Layouts/Schematics 


File Name 

Description 

Relevant Section 

2t8xt16a.pho 

Layout and schematic files for 
“two 8-Mbit (TSOP) to one 
16-Mbit (TSOP) FlashFile 
component” in xl 6 mode. 

4.1 

2t8xt16b.pho 

4.1 

2t8xt16m.pho 

4.1 

2t8xt16s.pho 

4.1 

2t8xt16h.sch 

4.1 

2t8xt1oh.sch 

4.1 

2t8t16a.pho 

Layout and schematic files for 
“two 8-Mbit (TSOP) to one 
16-Mbit (TSOP) FlashFile 
component” in x8 mode. 

4.1 

2t8t16b.pho 

4.1 

2t8t16m.pho 

4.1 

2t8t16s.pho 

4.1 

2t8t16h.sch 

4.1 

2t8t16oh.sch 

4.1 

t16t16sa.pho 

Layout and schematic files for 
“16-Mbit (TSOP) FlashFile 
component to 1 6-Mbit ROM 
(TSOP)” on the same side of the 
board. 

4.2 

t16t16sb.pho 

4.2 

t16t16sm.pho 

4.2 

t16t16ss.pho 

4.2 

t16t16sh.sch 

4.2 

t16r16sa.pho 

Layout and schematic files for 
“16-Mbit (TSOP) FlashFile 
component to 1 6-Mbit ROM 
(PSOP)” on the same side of the 
board. 

4.2 

t16r16sb.pho 

4.2 

t16r16sm.pho 

4.2 

t16r16ss.pho 

4.2 

t16r16sh.sch 

4.2 

t16r16oa.pho 

Layout and schematic files for 
“16-Mbit (TSOP) FlashFile 
component to 1 6-Mbit ROM 
(PSOP)” on the opposite sides of 
the board. 

4.2 

t16r16ob.pho 

4.2 

t16r16om.pho 

4.2 

t16r16os.pho 

4.2 

t16r16on.pho 

4.2 

t16r16ot.pho 

4.2 

t16r16oh.sch 

4.2 


NOTE: 

Other examples may be added over time. 
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Index of Layouts/Schematics, Contd. 


File Name 

Description 

Relevant Section 

4t16a.pho 

Layout and schematic files for 
“compact 16-Mbit (TSOP) 
FlashFile component layout” 

4.3 

4t16b.pho 

4.3 

4t16c.pho 

4.3 

4t16m.pho 

4.3 

4t16s.pho 

4.3 

4t16h.sch 

4.3 

4t8xt1 6a.pho 

Layout and schematic files for 
“four 8-Mbit (TSOP) to two 
16-Mbit (TSOP) FlashFile 
components” in x16 mode. 

4.4 

4t8xt1 6b.pho 

4.4 

4t8xt16m.pho 

4.4 

4t8xt16s.pho 

4.4 

4t8xt16h.sch 

4.4 

4t8xt1 6i.sch 

4.4 

4t82t16a.pho 

Layout and schematic files for 
“four 8-Mbit (TSOP) to two 
16-Mbit (TSOP) FlashFile 
components” in x8 mode. 

4.4 

4t82t1 6b.pho 

4.4 

4t82t16m.pho 

4.4 

4t82t1 6s.pho 

4.4 

4t82t1 6h.sch 

4.4 

4t82t1 6i.sch 

4.4 

4t8xt32a.pho 

Layout and schematic files for 
“four 8-Mbit (TSOP) to one 
32-Mbit (TSOP) FlashFile 
component” in x16 mode. 

4.5 

4t8xt32b.pho 

4.5 

4t8xt32m.pho 

4.5 

4t8xt32s.pho 

4.5 

4t8xt32h.sch 

4.5 

4t8xt32i.sch 

4.5 

4t8t32a.pho 

Layout and schematic files for 
“four 8-Mbit (TSOP) to one 
32-Mbit (TSOP) FlashFile 
component” in x8 mode. 

4.5 

4t8t32b.pho 

4.5 

4t8t32m.pho 

4.5 

4t8t32s.pho 

4.5 

4t8t32h.sch 

4.5 

4t8t32i.sch 

4.5 


NOTE: 

Other examples may be added over time. 
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Index of Layouts/Schematics, Contd. 


File Name 

Description 

Relevant Section 

2p8xs16a.pho 

Layout and schematic files for 
“two 8-Mbit (PSOP) to one 
16-Mbit (SSOP) FlashFile 
component” in x16 mode. 

4.6 

2p8xs16b.pho 

4.6 

2p8xs1 6m.pho 

4.6 1 

2p8xs16s.pho 

4.6 

2p8xs16n.pho 

4.6 

2p8xs16t.pho 

4.6 

2p8xs16h.sch 

4.6 

2p8s16a.pho 

Layout and schematic files for 
“two 8-Mbit (PSOP) to one 
16-Mbit (SSOP) FlashFile 
component” in x8 mode. 

4.6 

2p8s16b.pho 

4.6 

2p8s16m.pho 

4.6 

2p8s16s.pho 

4.6 

2p8s16n.pho 

4.6 

2p8s16t.pho 

4.6 

2p8s16h.sch 

4.6 

2t8xs16a.pho 

Layout and schematic files for 
“two 8-Mbit (TSOP) to one 
16-Mbit (SSOP) FlashFile 
component” in x16 mode. 

4.7 

2t8xs16b.pho 

4.7 

2t8xs16m.pho 

4.7 

2t8xs16s.pho 

4.7 

2t8xs16n.pho 

4.7 

2t8xs16t.pho 

4.7 

2t8xs16h.sch 

4.7 

2t8s16a.pho 

Layout and schematic files for 
“two 8-Mbit (TSOP) to one 
16-Mbit (SSOP) FlashFile 
component” in x8 mode. 

' 

4.7 

2t8s16b.pho 

4.7 

2t8s16m.pho 

4.7 

2t8s16n.pho 

4.7 

2t8s16s.pho 

4.7 

2t8s16t.pho 

4.7 

2t8s16h.sch 

4.7 


NOTE: 

Other examples may be added over time. 
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Index of Layouts/Schematics, Contd. 


File Name 

Description 

Relevant Section 

8t8a.pho 

Layout and schematic files for 
“serpentine layout for 8-Mbit 
(TSOP) FlashFile component.” 

4.8 

8t8b.pho 

4.8 

8t8m.pho 

4.8 

8t8s.pho 

4.8 

8t8h.sch 

4.8 

8t82t32a.pho 

Layout and schematic files for 
“eight 8-Mbit (TSOP) to two 
32-Mbit (TSOP) FlashFile 
components” in x8 mode. 

4.9 

8t82t32b.pho 

4.9 

8t82t32m.pho 

4.9 

8t82t32s.pho 

4.9 

8t82t32h.sch 

4.9 

8t82t32i.sch 

4.9 

t16s16a.pho 

Layout and schematic files for 
“one 16-Mbit (TSOP) to one 
16-Mbit (SSOP) FlashFile 
component.” 

4.10 

t16s16b.pho 

4.10 

t16s16m.pho 

4.10 

t16s16s.pho 

4.10 

t16s16h.sch 

4.10 


NOTE: 

Other examples may be added over time. 
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8.0 SUMMARY 

This application note summarizes highly-dense layout 
solutions, based on the design constraints such as com- 
patibility and compactness. Different permutations of 
FlashFile components and 16-Mbit ROM are provided. 
Furthermore, compact layouts for 16-Mbit array are 
designed and found to be comparable in PCB layout 
area to the serpentine layout. This application note, 
however, does not deal with software changes associat- 
ed with compatibility issues. See AP-375, “Upgrade 
Considerations from the 28F008SA to the 28F016SA” 
and AP-393, “28F016SV Compatibility with 

28F016SA” for more information on the subject. 


Order Number 

Document 

297372 

“28F016SA 16-Mbit FlashFileTM User’s Manual” 

290490 

DD28F032SA Datasheet 

290489 

28F016SA Datasheet 

290528 

28F016SV Datasheet 

mmm 

28F008SA 8-MB (1 MB x 8) FlashFileTM Memory Datasheet 

m i 

AP-360, “28F008SA Software Drivers” 

292097 

AP-362, “Implementing Mobile PC Designs using High-Density FlashFileTM Components” 

292124 

AP-375, “Upgrade Considerations from the 28F008SA to the 28F016SA” 

292126 

AP-377, “The 28F01 6SA Software Drivers” 

292127 

AP-378, “System Optimization using Enhanced Features of the 28F016SA” 

292144 

AP-393, “28F016SV Compatibility with 28F016SA” 

294011 

ER-27, “The Intel 28F008SA Flash Memory” 

294016 

. 

ER-33, “ETOXtm iv Flash Memory Technology: Insight to Intel’s Fourth Generation 
Process Innovation” 


9.0 ADDITIONAL INFORMATION 

For software upgrade and additional design informa- 
tion, consult the referenced documents listed below: 










Figure 2. 28F008SA Standard and Reverse 40-Lead TSOP Pinout Configuration 
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Figure 4. 28F016SA, 28F016SV and DD28F032SA 56-Lead TSOP Pinout Configurations 
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Figure 5. 28F016SA/SV 56-Lead SSOP Pin Configuration 
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Figure 6. 16-Mbit ROM Chip 44-Lead PSOP Pinout Configuration 
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Figure 8. 4x Scale Topside Outline View of Two 28F008SAs to One 28F016SA/SV (x16 Mode) 
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Figure 9. 4x Scale Topside Trace View of Two 28F008SAs to One 28F016SA/SV (x16 Mode) 
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Figure 10. 4x Scale Bottom Side Trace View of Two28F008SAs to One 28F016SA/SV (x16 Mode) 
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Figure 12. 3x Scale Top Side Trace View of One 28F016SA/SV (56-Lead TSOP) 
to One 16-Mbit ROM (44-Lead TSOP) 
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Figure 13. 3x Scale Bottom Side T race View of One 28F0 16SA/SV (56-Lead TSOP) 
to One 16-Mbit ROM (44-Lead TSOP) 
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Figure 14. 3x Scale Top Side Outline View of One 28F016SA/SV (56-Lead TSOP) 
to One 16-Mbit ROM (44-Lead PSOP) 
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Figure 19. 3x Scale Internal Layer View of Four 28F016SA/SVs 
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Figure 20. 3x Scale Bottom Side Trace View of Four 28F016SA/SVs 
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1.0 INTRODUCTION 

This application note discusses compatibility between 
the 28F016SV and 28F016SA FlashFileTM memory 
components. It also offers recommendations for design- 
ing systems using the 28F016SA today, when future 
conversion to the 28F016SV is planned. 

The 28F016SV is a member of Intel’s second-genera- 
tion 16-Mbit FlashFile component product family. It 
improves upon the 28F016SA in the following areas: 

• Smart Voltage technology 

— Selectable 5.0V or 12.0V V PP 

• Faster read performance 

• Higher Page Buffer write performance at 12.0V V PP 

• Enhanced device feedback after writing the Upload 
Device Information command 

• Enhanced 3.3V or 5.0V Vcc detection 

• Additional RY/BY # Configuration 
— Pulse-On-Write/Erase 


2.0 COMPATIBILITY 

The 28F016SV and 28F016SA are both manufactured 
on Intel’s fourth-generation 0.6 micron ETOX™-IV 
process technology. This technology enables random 
access flash memory products with the highest read/ 
write performance and lowest power consumption. 
ETOX flash memory technology also achieves very 
high quality and reliability. 

The following sections discuss specific areas of compat- 
ibility between the 28F016SV and the 28F016SA. 
Please reference the documentation listed in the Addi- 
tional Information section of this application note for a 
full description of these flash memory components. 


2.1 Pinout and Package 

The 28F016SV is fully pinout backwards-compatible 
with the 28F016SA (see Figures 1 and 2). Both devices 
will be available in 56-lead TSOP and SSOP packages. 
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Figure 1. 28F016SV 56-Lead TSOP Pinout Compared to the 28F016SA and 28F032SA 
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The 28F016SA uses the 3/5# pin to configure the flash 
memory for operation at 3.3V or 5.0V Vcc- The 
28F016SV uses an internal detector connected to the 
Vcc pin to accomplish this same function. The 3/5# 
pin is no longer needed on the 28F016SV and has been 


renamed NC (“no connect”)- This pin may be left driv- 
en to Vil or Vjh, or may be left unconnected. There- 
fore, a design that uses the 28F016SA today can later 
convert to the 28F016SV and continue to drive the for- 
mer 3/5# pin, eliminating costly system board rede- 
signs. 
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2.2 Bus Operations 

The 28F016SV shares the same bus operations as the 
28F016SA, and both flash memories operate identically 
in these operating modes. 

2.3 Command Definitions 

The 28F016SV shares the same command set as the 
28F016SA. All commands produce compatible internal 
operations for both flash memories. 

The 28F016SV includes an additional RY/BY# mode, 
RY/BY # Pulse on Write/Erase, enabled as part of the 
RY/BY # Configuration (96H) command sequence. 
This mode was Reserved for Future Use on the 
28F016SA. 

The 28F016SV also enhances the device feedback after 
writing the Upload Device Information (99H) com- 
mand sequence. It outputs not only the Device Revi- 
sion Number (compatible with the 28F016SA), but the 
Device Proliferation Code and Device Configuration 
Code. See Section 2.5 for more information on these 
topics. 


2.4 Status Registers 

The 28F016SV and 28F016SA both have a Compatible 
Status Register (CSR), Global Status Register (GSR) 
and 32 Block Status Registers (BSRs). Register address 
maps for both flash memories are identical. 

Compatible Status Register 

CSR bits 4_7 have identical functions for both the 
28F016SV and the 28F016SA. CSR bits 0_2 are 
marked “reserved for future use” for both the 
28F016SV and 28F016SA. 


intel 

CSR bit 3 (Vpp Status) has been functionally enhanced 
on the 28F016SV, reflective of the ability to Data Write 
and Erase with Vpp = 5.0V ± 10% (Vppni) or Vpp = 
12.0V ±5% (VppH2)« See Section 2.7 for more infor- 
mation on 28F016SV Data Write and Erase. CSR.3 = 
“1” is defined as “Vpp Error” on the 28F016SV, versus 
“Vpp Low” on the 28F016SA. If Data Write or Erase 
is initiated with Vpp = VppH2> subsequent Vpp tran- 
sitions above VppH 2 (max) or below VppH 2 (min) will, if 
detected, terminate the operation in progress and set 
CSR.3 to “1” (this functionality matches the 
28F016SA). Additionally, if Data Write or Erase is ini- 
tiated with Vpp = Vppui, subsequent Vpp transitions 
above Vppm(max) or below VppHi(min) will, if de- 
tected, also terminate the operation in progress and set 
CSR.3 to “1.” See Table 1 for the 28F016SV’s Compa- 
tible Status Register. 

Global Status Register 

All GSR bits have identical functions for both the 
28F016SV and the 28F016SA. 


Block Status Registers 

BSR bits 3-7 have identical functions for both the 
28F016SV and the 28F016SA. BSR bit 0 is marked 
“reserved for future use” for both the 28F016SV and 
the 28F016SA. 

BSR bit 2 (Vpp Status) has been functionally enhanced 
on the 28F016SV compared to the 28F016SA. See the 
earlier description of CSR.3 for more information. 

BSR bit 1, marked “reserved for future use” on the 
28F016SA, is the Vpp Level bit on the 28F016SV. 
BSR.l reflects the Vpp level applied to the 28F016SV 
(Vppni = “1,” V PP h 2 = “0”). See Table 2 for the 
28F016SV’s Block Status Register. 
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Table 1. 28F016SV Compatible Status Register 


WSMS 

ESS 

ES 

DWS 

VPPS 

R 

R 

R 

7 

6 

5 

4 

3 

2 

1 

0 


CSR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 
0 = Busy 

NOTES: 

The RY/BY# output or WSMS bit must be checked to 
determine completion of an operation (erase suspend, 
erase or data write) before the appropriate Status bit (ESS, 
ES or DWS) is checked for success. 

CSR.6 = ERASE-SUSPEND STATUS 
1 = Erase Suspended 
0 = Erase In Progress/Completed 


CSR.5 = ERASE STATUS 
1 = Error In Block Erasure 
0 = Successful Block Erase 

If DWS and ES are set to “1” during an erase attempt, an 
improper command sequence was entered. Clear the CSR 
and attempt the operation again. 

CSR.4 = DATA-WRITE STATUS 
1 = Error in Data Write 
0 = Data Write Successful 


CSR.3 = V PP STATUS 
1 = Vpp Error Detect, Operation Abort 
0 = Vpp OK 

The VPPS bit, unlike an A/D converter, does not provide 
continuous indication of Vpp level. The WSM periodically 
interrogates Vpp’s level only after the data-write or erase 
command sequences have been entered, and informs the 
system if it detects an invalid voltage. VPPS is not 
guaranteed to report accurate feedback between 
Vppi_K( max ) anc * Vppm(nnin), between Vppm(max) and 
VppH 2 (min) and above Vpp^Onax). 

CSR.2 - CSR.O = RESERVED FOR FUTURE ENHANCEMENTS. 

These bits are reserved for future use; mask them out when polling the CSR. 
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Table 2. 28F016SV Block Status Register 



NOTES: 

BSR.7 = BLOCK STATUS The RY/BY # output or BS bit must be checked to 

1 = Ready determine completion of an operation (block lock, 

0 = Busy suspend, erase or data write) before the appropriate 

Status bits (BOS or BLS) is checked for success. 

BSR.6 = BLOCK-LOCK STATUS 

1 = Block Unlocked for Write/ Erase 

0 = Block Locked for Write/ Erase 

BSR.5 = BLOCK OPERATION STATUS 

1 = Operation Unsuccessful 

0 = Operation Successful or Currently Running 

BSR.4 = BLOCK OPERATION ABORT STATUS 

1 = Operation Aborted 

0 = Operation Not Aborted 

MATRIX 5/4 

0 0 = Operation Successful or Currently Running The BOAS bit will not be set until GSR.7 = 1 . 

0 1 = Not a valid combination 
10 = Operation Unsuccessful 

11= Operation Aborted Operation halted via abort command. 

BSR.3 = QUEUE STATUS 

1 = Queue Full 

0 = Queue Available 

BSR.2 = V PP STATUS 

1 = Vpp Error Detect, Operation Abort 
0 = Vpp OK 


BSR.1 = Vpp LEVEL 

1 = Vpp detected at 5.0V ±10% (4.5V - 5.5V) 

0 = Vpp detected at 1 2.0V ± 5% (1 1 .4V - 1 2.6V) 


BSR.1 is not guaranteed to report accurate feedback 
between the Vppm and VppH 2 voltage ranges. Writes 
and erases with Vpp between Vpp|_f<(max) and 
VppHi(min), between Vppm (max) and VppH 2 (min), 
and above VppH 2 (max) produce spurious results and 
should not be attempted. 

BSR.1 was a RESERVED bit on the 28F016SA. 


BSR.O = RESERVED FOR FUTURE ENHANCEMENTS 

This bit is reserved for future use; mask it out when polling the BSR. 
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Table 3. 28F016SV Device Configuration Code 



7 6 5 4 3 2 1 0 


DCC.2-DCC.0 = RY/BY# CONFIGURATION 
(RB2-RB0) 

001 = Level Mode (Default) 

010 = Pulse-On-Write 

011 = Pulse-On-Erase 

100 = RY/BY# Disabled 

101 = RY/BY# Pulse-on-Write/ Erase 

NOTES: 

Undocumented combinations of RB2-RB0 are reserved by 
Intel Corporation for future implementations and should 
not be used. 

DCC.7-DCC.3 = RESERVED FOR FUTURE 
ENHANCEMENTS 

These bits are reserved for future use; mask them out 
when reading the Device Configuration Code. Set these 
bits to 0 when writing the desired RY/BY# configuration 
to the device. 


2.5 Device/Manufacturer IDs and 

Device Configuration Code 

The 28F016SV shares the identical manufacturer and 
device identifiers as the 28F016SA, for full backwards- 
compatibility. 

The 28F016SV retains the Device Revision Number of 
the 28F016SA, accessed via the Page Buffer after writ- 
ing the Upload Device Information (99H) command 
sequence. The 28F016SV adds a Device Configuration 
Code, located at address 1EH in byte mode and address 
OFH in word mode (lower 8 bits of 16-bit word), which 
allows system software to read the currently-configured 
28F016SV RY/BY # mode. These data bits correspond 
to the bits written to the 28F016SV when configuring 
RY/BY# via the RY/BY Configuration (96H) com- 
mand sequence. Unused bits of the Device Configura- 
tion Code are marked “reserved for future use” and 
should be masked out. See Table 3 for the 28F016SV’s 
Device Configuration Code. 

The 28F016SV also adds the Device Proliferation Code 
(01H), located at address 1FH in byte mode and ad- 
dress OFH in word mode (upper 8 bits of 16-bit word). 
This code allows software identification of the 
28F016SV versus the 28F016SA (described in Section 
4.0). 


2.6 Flowcharts 

All 28F016SV and 28F016SA flowcharts are identical. 


2.7 Vpp Voltage 

The 28F016SV’s Vpp Write/Erase voltage specifica- 
tions offer the choice of either 5.0V ± 10% 

(4.5V- 5.5V) or 12.0V ±5% (11.4V- 12.6V) operation 
during flash memory update. Vpp = 5.0V (Vppui) 
minimizes required chip count in designs where a suit- 
able 12.0V supply is not already required for other sys- 
tem circuitry. Vpp = 12.0V (Vppji2)» on the other 
hand, provides significantly faster write and erase per- 
formance for applications that frequently alter flash 
memory contents, such as solid-state mass storage de- 
signs. 

Tables 4-7 give write and erase specifications for the 
28F016SV at V CC = 3.3V/5.0V and at V PP =5.0V/ 
12.0V. Performance numbers for erase and standard 
writes at 3.3V V CC /12.0 V V PP (Table 5) and 5.0V 
Vcc/ 12.0V Vpp (Table 7) match those of the 
28F016SA. Page Buffer writes are higher performance 
on the 28F016SV compared to the 28F016SA. 
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Table 4. Write/Erase Performance^. 4 ) f 

Vcc = 3.3V + 0.3V, Vpp = 5.0V + 0.5V, T A = 0°C to +70°C 


Parameter 

Notes 

Min 

TypO) 

Max 

Unit 

Test Conditions 

Page Buffer Byte Write Time 

2 

TBD 

6.0 

TBD 

fJLS 


Page Buffer Word Write Time 

2 

TBD 

12.1 

TBD 

fXS 


Byte Write Time 

2 

TBD 

16.5 

TBD 

JJiS 


Word Write Time 

2 

TBD 

24.0 

TBD 

JUS 


Block Write Time 

2 

TBD 

1.1 

TBD 

sec 

Byte Write Mode 

Block Write Time 

2 

TBD 

0.8 

TBD 

sec 

Word Write Mode 

Block Erase Time 

2 

TBD 

1.4 

TBD 

sec 


Full Chip Erase Time 

2 

TBD 

44.8 

TBD 

sec 



Table 5. Write/Erase Performance^. 4 ) 

Vcc = 3.3V ±0.3V, Vpp = 12.0V ±0.6V, T A = 0°C to +70°C 


Parameter 

Notes 

Min 

Typd) 

Max 

Unit 

Test Conditions 

Page Buffer Byte Write Time 

2 

TBD 

2.2 

TBD 

JLtS 


Page Buffer Word Write Time 

2 

TBD 

4.4 

TBD 

juts 


Word/Byte Write Time 

2 

5 

9 

TBD 

juts 


Block Write Time 

2 

TBD 

0.6 

2.1 

sec 

Byte Write Mode 

Block Write Time 

2 

TBD 

0.3 

1.0 

sec 

Word Write Mode 

Block Erase Time 

2 

0.3 

0.8 

10 

sec 


Full Chip Erase Time 

2 

TBD 

25.6 

TBD 

sec 
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Table 6. Write/Erase Performance! 3 . 4 ) 

V CC = 5.0V + 0.5V, 5.0V ±0.25V, V PP = 5.0V ± 0.5V, T A = 0°C to + 70°C 


Parameter 

Notes 

Min 

TypO) 

Max 

Unit 

Test Conditions 

Page Buffer Byte Write Time 

2 

TBD 

6.0 

TBD 

flS 


Page Buffer Word Write Time 

2 


12.1 


JJbS 


Byte Write Time 

2 


11 


JULS 


Word Write Time 

2 


16 


JULS 


Block Write Time 

2 




sec 

Byte Write Mode 

Block Write Time 

2 


0.6 


sec 

Word Write Mode 

Block Erase Time 

2 


1.0 

TBD 

sec 


Full Chip Erase Time 

2 

TBD 

32.0 

TBD 

sec 



Table 7. Write/Erase Performance! 3 * 4 ) 

Vcc = 5.0V ±0.5V, 5.0V + 0.25V, V PP = 12.0V ± 0.6V, T A = 0°C to +70°C 


3 


NOTES: 

1 . 25°C and nominal voltages. 

2. Excludes system-level overhead. 

3. These performance numbers are valid for all speed versions. 

4. Sampled, not 100% tested. Guaranteed by design. 

The 28F016SV adds the V PPm (V PP = 5.0V) write/ 
erase voltage specification and Vcc and V PP write and 
erase current specifications at V PP = V PP hi- Write/ 
erase current specifications at V PP = V PP h 2 (12.0V) 
match those of the 28F016SA. The 28F016SV also low- 
ers the V PP l specification from 6.5V to 1.5V (to allow 
Smart Voltage operation) and renames this specification 
as V PPLK> to signify the change. The 28F016SV’s 
Vcc/V PP erase suspend currents and V PP read current 
(Vpp > Vcc) are lower than those of the 28F016SA. 

Tables 8 and 9 show added and revised (as compared to 
the 28F016SA) 28F016SV DC specifications. 


2.8 Other Voltage and Current 
Specifications 

The 28F016SV’s typical and maximum Vcc rea d anc l 
Vcc standby (CMOS levels) currents are both higher 
than those of the 28F016SA. 

The 28F016SV’s typical Vcc Deep Power-Down cur- 
rent is higher than that of the 28F016SA. The 
28F016SV will also exhibit higher Vcc current “peaks” 
in deep power-down mode at 3.3V Vcc. compared to 
the 28F016SA. 


Parameter 

Notes 

Min 

Typd) 

Max 

Unit 

Test Conditions 

Page Buffer Byte Write Time 

2 

TBD 

2.1 

TBD 

JLtS 


Page Buffer Word Write Time 

2 

TBD 

4.1 




Word Byte/Write Time 

2 

4.5 

6 




Block Write Time 

2 


0.4 



Byte Write Mode 

Block Write Time 

2 


0.2 

1.0 

sec 

Word Write Mode 

Block Erase Time 

2 

0.3 

0.6 

10 

sec 


Full Chip Erase Time 

2 


19.2 

TBD 

sec 



I 
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Table 8. 28F016SV Added/Revised DC Characteristics for 3.3V Operations 

V cc = 3.3V ±0.3V, T a = 0°C to +70°C 


Symbol 


•ccs 


Max Unit 


Test Condition 




Vcc Deep Power-Down 
Current 


Vcc Re ad Current 



Vcc Read Current 



Vcc Write Current 


Vcc Block Erase Current 


Vcc Erase Suspend 
Current 



Ippw 

Vpp Write Current 

•PPE 

Vpp Erase Current 

IPPES 

Vpp Erase Suspend Current 

VpPLK 

Vpp Erase/Write Lock Voltage 

VppHI 

Vpp during Write/Erase 
Operations 


30 50 


15 25 


14 20 


30 50 


RP# = GND ±0.2V 


Vcc = v cc Max 

CMOS: CE 0 #, CE-j # = GND ±0.2V 
BYTE# = GND ±0.2VorV C c ±0.2V 
Inputs = GND ± 0.2V or V C c ±0.2V 
TTL:CE 0 #,CE 1 # = V IL , 

BYTE# = V, L orV, H 
INPUTS = V| L or V| H , 
f = 8 MHz, Iqut = 0 rnA 


Vcc = Vcc Max 

CMOS: CE 0 #, CE a # = GND +0.2V 
BYTE# = GND ±0.2VorV C c ±0.2V 
Inputs = GND ± 0.2V or V C c ±0.2V 
TTL:CE 0 #,CE 1 # = V| L , 

BYTE# = V| L orV, H 
INPUTS = V, L or V IH , 
f = 4 MHz, Iqut = 0 m A 


Word/Byte Write in Progress 
V PP = 5.0V ±10% 






Vpp > Vcc 


Vpp = 5.0V ±10% 
Word/Byte Write in Progress 


Vpp = 5.0V ±10% 
Block Erase in Progress 


Vpp = Vppm or VppH 2 , 
Block Erase Suspended 
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Table 9. 28F016SV Added/Revised DC Characteristics for 5.0V Operations 

V CC = 5.0V ±0.5V, 5.0V ± 0.25V, T A = 0°C to + 70°C 



Parameter 

Min 

Typ 

Max 

Unit 

Test Condition 


Vqq Standby Current 


70 

130 

/U.A 

Vcc = Vcc Max 

CE 0 #,CEi#,RP# = Vcc ±0.2V 
BYTE#, WP# = V C c ±0.2V 
or GND ±0.2V 

•CCD 

Vqq Deep Power-Down 
Current 


2 

5 

fiA 

RP# = GND ±0.2V 

!CCR1 

Vcc Read Current 


75 

95 

mA 

Vcc = Vcc Max, 

CMOS: CE 0 #, CEi # = GND ±0.2V 
BYTE# = GND ±0.2VorV C c + 0.2V 
Inputs = GND ± 0.2V or Vcc ±0.2V 
TTL:CE 0 #,CE 1 # = V, L> 

BYTE# = V| L orV| H 
Inputs = V^or V|h, 
f = 10 MHz, loUT = 0 

>CCR2 

Vcc Read Current 


45 



v cc = Vcc Max, 

CMOS: CE 0 #, CE-i # = GND ±0.2V 
BYTE# = GND ±0.2VorV C c ±0.2V 
Inputs = GND ± 0.2V or V C c ±0-2V 
TTL:CE 0 #,CE 1 # = V| L , 

BYTE# = V| L orV| H 
Inputs = V^or V|h, 
f = 5 MHz, Iqut = 0 mA 

>CCW 

Vcc Write Current 


25 

40 

mA 

Word/Byte in Progress 
Vpp = 5.0V ±10% 

ICCE 

Vcc Erase Suspend Current 


20 


mA 

Block Erase in Progress 
Vpp = 5.0V ±10% 

ICCES 

Vcc Block Erase Current 


H 

■ 

mA 

CE 0 #,CE 1 # = V| H 
Block Erase Suspended 

IPPR 

Vpp Read Current 



50 

julA 

Vpp > Vcc 

m 


■ 

17 

22 

mA 

Vpp = 5.0V ±10% 
Word/Byte Write in Progress 

m 




20 

mA 

Vpp = 5.0V ±10% 
Block Erase in Progress 

IPPES 

Vpp Erase Suspend Current 


30 

50 

|u.A 

Vpp = Vppm or VppH 2 
Block Erase Suspended 

VppLK 

Vpp Write/ Erase Lock Voltage 

0.0 


1.5 

V 


VpPHI 

Vpp during Write/Erase 
Operations 

4.5 

5.0 

5.5 

V 



I 
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2.9 Read Timing Specifications 

The 28F016SV “bin 1” significantly improves many 
read specifications compared to the 28F016SA. At 3.3V 
Vcc> rea d performance is almost 2x that of “bin 2”. 

Tables 10 and 1 1 show these improved specifications. 


Table 10. Improved AC Read Timing Characteristics for 3.3V Operations 

V C C = 3.3V ±0.3V, T a = 0°C to + 70°C 


Version 

28F016SV-075 


Symbol 

Parameter 

Min 

Max 

*AVAV 

Read Cycle Time 

75 


ns 

UVQV 

Address to Output Delay 


75 

ns 

*ELQV 

CE# to Output Delay 


75 

ns 

tpHQV 

RP# High to Output Delay 


480 

ns 

tGLQV 

OE# to Output Delay 


40 

ns 

l EHQZ 

CE# to Output in HighZ 


30 

ns 

tFHQV 

BYTE# High to Output Delay 


75 

ns 


Table 11. Improved AC Read Timing Characteristics for 5.0V Operations 

V cc = 5.0V ±0.5V, 5.0V ± 0.25V, T A = 0°C to + 70°C 


Versions 

Vcc ±5% 

28F016SV-065 


Units 

v cc ±io% 


28F016SV-070 


Parameter 

Min 

Max 

Min 

Max 

B8S®I 

Read Cycle Time 

65 


70 


ns 


Address to Output Delay 


65 


70 

ns 


CE# to Output Delay 


65 


70 

ns 

tPHQV 

RP# High to Output Delay 


300 


300 

ns 

E9E9I 

OE# to Output Delay 


30 


35 

ns 


BYTE# High to Output Delay 


65 


70 

ns 
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2.10 Write Timing Specifications memory. Tables 12 through 15 show these improved 

specifications. Both WE#- and CE# -controlled write 
The 28F016SV write timing specifications have also specifications are shown, for both commands and 

been improved to keep read and write cycle times writes to the page buffer, and at Vcc = 3.3V and 5.0V. 

equivalent and to simplify system interface to the flash 


Table 12. Improved AC WE# -Controlled Write Characteristics for 3.3V Operations 

Vcc = 3.3V ±0.3V, T a = 0°C to +70°C 


Version 

28F016SV-075 

Units 

Symbol 

Parameter 

Min 

Max 

tAVAV 

Write Cycle Time 

75 


ns 

tELWL 

CE# Setup to WE# Going Low 

0 


ns 

tWLWH 

WE# Pulse Width 

60 


ns 

tAVWH 

Address Setup to WE# Going High 

60 


ns 

tDVWH 

Data Setup to WE# Going High 

60 


ns 


Data Hold from WE# High 

5 


ns 


Address Hold from WE# High 

5 


ns 

— 

CE# Hold from WE# High 

5 


ns 

tWHWL 


15 


ns 

tpHWL 

RP# High Recovery to WE# Going Low 

480 


ns 

tWHGL 

Write Recovery before Read 

55 


ns 


Table 13. Improved AC WE# -Controlled Write Characteristics for 5.0V Operations 

Vcc = 5.0V ±0.5V, 5.0V ± 0.25V, T A = 0°C to +70°C 


Versions 

Vcc ±5% 

28F016SV-065 


Units 

v cc ±io% 


28F016SV-070 

Symbol 

Parameter 

Min 

Max 

Min 

Max 

tAVAV 

Write Cycle Time 

65 


70 


mu 

tpHEL 

RP# Setup to CE# Going Low 

300 


300 



tAVWH 

Address Setup to WE# Going High 

40 


40 



tDVWH 

Data Setup to WE# Going High 

40 


40 



tWLWH 

WE# Pulse Width 

40 


45 



tWHAX 

Address Hold from WE# High 

5 


10 


ns 

tWHEH 

CE# Hold from WE# High 

5 


5 


ns 

I MB 

WE# Pulse Width High 

15 


15 


ns 

tpHWL 

RP# High Recovery to WE# Going Low 

300 


300 


ns 

tWHGL 

Write Recovery before Read 

55 


60 


ns 
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Table 14. Improved AC CE# -Controlled Write Characteristics for 3.3V Operations 

Vcc = 3.3V ±0.3V, T a = 0°c to + 70°C 


Version 

28F016SV-075 

Units 

Symbol 

Parameter 

Min 

Max 

UVAV 

Write Cycle Time 

75 


ns 

tELEH 

CE# Pulse Width 

60 


ns 

tAVEH 

Address Setup to CE# Going High 

60 


ns 

*DVEH 

Data Setup to CE# Going High 

60 


ns 

tEHWH 

WE# Hold from CE# High 

5 


ns 

tEHEL 

CE# Pulse Width High 

15 


ns 

tpHEL 

RP# High Recovery to CE# Going Low 

480 


ns 

tEHGL 

Write Recovery before Read 

55 


ns 


Table 15. Improved AC CE# -Controlled Write Characteristics for 5.0V Operations 

Vcc = 5.0V ±0.5V, 5.0V + 0.25V, T A = 0°C to + 70°C 


Versions 

Vcc -5% 

28F016SV-065 


Units 

v cc ±io% 


28F016SV-070 

Symbol 

Parameter 

Min 

Max 

Min 

Max 

*AVAV 

Write Cycle Time 

65 


70 


ns 

tPHWL 

RP# Setup to WE# Going Low 

300 




ns 

tAVEH 

Address Setup to CE# Going High 

40 


45 


ns 

tDVEH 

Data Setup to CE# Going High 

40 


45 


ns 

tELEH 

CE# Pulse Width 

40 


45 




WE# Hold from CE# High 

5 


5 


ns 


CE# Pulse Width High 

15 


15 




RP# High Recovery to CE# Going Low 

300 






Write Recovery before Read 

55 


60 


ns 
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3.0 HARDWARE DESIGN FOR 
FORWARDS-COMPATIBILITY 

Manufacturers that wish to use the 28F016SA now, 
and move to the 28F016SV for write performance, inte- 
gration or other reasons, should keep the following 
focus areas in mind when completing designs: 


3.1 Vcc Voltage 

As noted in Section 2.8, the 28F016SV’s typical and 
maximum read/standby currents and typical deep pow- 
er-down current are higher than those of the 
28F016SA. Vcc power supply selection should factor 
in these higher currents, as should system power con- 
sumption calculations. Decoupling and bypass capaci- 
tors can supply current for any of the 28F016SV Vcc 
deep power-down mode current “spikes” (Vcc = 
3.3V) with no added burden on the power supply. 

If conversion to the 28F016SV will also include chang- 
ing the write/erase voltage to 5.0V from 12.0V, 5.0V 
power supply current calculations should include both 
the future additional write/erase current drawn by the 
28F016SV’s Vcc input (if Vcc = 5.0V) and the future 
current drawn by the 28F016SV’s Vpp input (connect- 
ed to 5.0V). 


3.2 Vpp Voltage 

Conversion to the 28F016SV may be driven by the de- 
sire to write/erase at 5.0V (thereby eliminating the 
need for a separate 12.0V regulator). Keep in mind that 
write/erase at 5.0V is lower performance than at 12.0V. 
Some flash memory applications (but not all) can toler- 
ate this additional write/erase time. For these applica- 
tions, a jumper on the system board that enables Vpp 
pin connection either to the output of a 12.0V converter 
(for the 28F016SA) or to the system 5.0V supply (for 
the 28F016SV) should be added. With the jumper con- 
nected to 5.0V, the 12.0V converter and associated cir- 
cuitry can be removed to lower system component 
count. See Figure 3 for an example. 


12.0 V 
CONVERTER 

12.0V OUT 

- - - - - ( Vpp 

FLASH 

MEMORY 


, JP1 1 




5.0V POWER 

5.0V OUT 

1 1 

-i-T'i 1 


SUPPLY 


TV • 

292144-3 


Figure 3. Jumper Selection of 12.0V Converter 
or 5.0V Power Supply Output for Vpp 


Write Protection Via Vppy< 


Switching Vpp off during normal operation is one of 
several methods commonly used to prevent unwanted 
alteration (data write or erase) of flash memory data. 
Designs that use this technique should ensure that the 
Vpp voltage transitions to GND when “off.” Some 
12.0V converters drop Vpp to a diode drop below Vcc 
when they are placed in shutdown. This will block un- 
wanted data write and erase on the 28F016SA but not 
on the 28F016SV, which has a 5.0V Vpp option. An 
external pulldown resistor will pull the converter out- 
put to GND, preventing data alteration on either the 
28F016SA or the 28F016SV. Other write protection 
techniques (i.e., RP# and WP# control) should also 
be used for full flash memory data protection. 



3.3 Read/Write Performance and 
Wait-State Configuration 

Conversion to the 28F016SV may also be driven by its 
higher read performance. Component identification in 
communicating whether the 28F016SA or the high 
speed 28F016SV is in system can either be accom- 
plished via hardware or software methods (see 
Sections 3.4 and 4.1). Depending which component 
resides in the system, the state machine within the in- 
terface logic and/or system software can modify the 
wait-state profile of the flash memory space to take ad- 
vantage of the 28F016SV’s higher read performance ca- 
pability. 


0(MF©(^KM¥D@K] 
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3.4 Hardware Identification of 
28F016SA or 28F016SV 

Jumpers can be used to communicate whether the 
28F016SA or 28F016SV device is in the system, as 
shown in Figure 4. As the device identifiers for the 
28F016SA and the 28F016SV are identical (see Section 
4.1), software identification of one or the other flash 
memory via reading the device ID is not feasible. See 
Section 4.1 for a software method of identifying the 
28F016SA or 28F016SV via the Device Proliferation 
Code. Jumper identification can also be used to enable 
system software usage of the 28F016SV’s Status Regis- 
ter enhancements, Device Configuration Code and per- 
block cycle count. See Section 4 for more information. 


4.0 SOFTWARE DESIGN FOR 
FORWARDS-COMPATIBILITY 

The 28F016SV is fully software backwards-compatible 
with the 28F016SA. This section discusses several 
28F016SV enhancements that system software can ac- 
cess if desired. Keep in mind that these features are not 
available on the 28F016SA and their access and/or im- 
plementation should not be attempted when using the 
28F016SA. 



— 292144-4 

Figure 4. Jumper Identification of 28F016SA or 28F016SV Presence 
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4.1 Software Identification of 
28F016SA or 28F016SV 

The 28F016SV’s device identifier is identical to that for 
the 28F016SA. This enables all software written for the 
28F016SA to be run on the 28F016SV unchanged. 
Methods of identifying the 28F016SV in the system, 
such as the jumper identification of Section 3.3 and 
Figure 3, can be used in designs that can accept both 
the 28F016SV and the 28F016SA. An alternative soft- 
ware method uses the Device Proliferation Code, sup- 
ported on the 28F016SV (01H), but not on the 
28F016SA. By initializing the Page Buffer location cor- 
responding to this code to a known value and then exe- 
cuting an Upload Device Information command se- 
quence, subsequent reads of the Page Buffer will identi- 
fy the specific FlashFile memory in the system. The 
Device Proliferation Code address in the Page Buffer is 
1FH in x8 mode and OFH (upper 8 bits) in xl6 mode. 
A pseudocode flow for this technique is shown below: 

Initialize Device Proliferation Code address in 
Page Buffer to 00H. 

Execute Upload Device Information command sequence 
Swap Page Buffer 

Read from Device Proliferation Code address 
If data = 00H, 28F016SA is present 
If data = 01 H, 28F016SV is present 
End 


4.2 Block Status Register Vpp Level 
Bit 

Bit 1 of the Block Status Registers, a “reserved” bit on 
the 28F016SA, is the “Vpp Level” bit on the 28F016SV 
(see Section 2.4 and Table 2). System software interfac- 
ing to the 28F016SV can examine this bit and, by deter- 
mining what Vpp voltage is in the system, gain an indi- 
cation of the level of data write and erase performance 
to be expected. This capability is particularly valuable 
when creating software that could run either in a 12.0V 
Vpp or 5.0V Vpp system (such as a low-level PCMCIA 
driver). Knowledge of write/erase performance allows 
software to adjust the frequency and duration of events, 
such as background media cleanup, to optimize system 
performance. 


4.3 Enhanced Vpp Status Bit 

Bit 2 of the Block Status Registers, functionally identi- 
cal to bit 3 of the Compatible Status Register, is en- 
hanced on the 28F016SV to reflect both 5.0V and 
12.0V Vpp capability (see Section 2.4 and Tables 1 and 
2). With Vpp = 12.0V at the beginning of data write/ 
erase, Vpp transitions below 11.4V will, if detected, ter- 
minate data write/erase and return error indication via 
CSR.3 = BSR.2 = “1” (this is 100% compatible with 
the 28F016SA function). With Vpp = 5.0V at the be- 
ginning of data write/erase, Vpp transitions above 5.5V 
or below 4.5V will, if detected, also terminate data 
write/erase and return error indication via CSR.3 = 
BSR.2 = “1” (this is new to the 28F016SV). Accord- 
ingly, the CSR.3 = BSR.2 = “1” condition has been 
renamed from “Vpp Low” (the 28F016SA definition) 
to “Vpp Error.” 


4.4 RY/BY# Configuration 

The 28F016SV adds the Device Configuration Code, 
accessible via the Page Buffer after first writing the Up- 
load Device Information command sequence (see Sec- 
tion 2.5 and Table 3). This code enables system soft- 
ware to read the currently-configured 28F016SV 
RY/BY # mode. The Device Configuration Code is lo- 
cated at Page Buffer address 1EH in x8 mode, OFH 
(lower 8 bits in xl6 mode). 

As discussed earlier in section 2.3, the 28F016SV 
includes an additional RY/BY# mode, RY/BY# 
Pulse on Write/Erase, enabled as part of the RY/BY # 
Configuration (96H) command sequence. This mode 
was Reserved for Future Use on the 28F016SA. 


5.0 CONCLUSION 

This application note has summarized upgrade consid- 
erations and compatibility areas between the 28F016SA 
and the 28F016SV. Consult reference documentation 
for a more complete understanding of compatibility 
and device capabilities. Please contact your local Intel 
or distribution sales office for more information on In- 
tel’s flash memory products. 
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6.0 ADDITIONAL INFORMATION 


Order Number 

Document/Tool 

290528 

28F016SV Datasheet 

290489 

28F016SA Datasheet 

297372 

“16-Mbit Flash Product Family User’s Manual, 
28F01 6SA/28F01 6SV/28F01 6XS/28F01 6XD” 

292126 

AP-377 “1 6-Mbit Flash Product Family Software Drivers, 
28F01 6SA/28F01 6SV/28F01 6XS/28F01 6XD” 

292127 

AP-378 “System Optimization Using the Enhanced Features of the 28F016SA” 

297508 

FlashBuilder Utility 

Contact Intel/Distribution 
Sales Office 

28F016SV iBIS Models 

Contact Intel/Distribution 
Sales Office 

28F01 6SV VHDL/Verilog Models 

Contact Intel /Distribution 
Sales Office 

28F016SV Timing Designer Library Files 

Contact Intel /Distribution 
Sales Office 

28F01 6SV Oread and ViewLogic Schematic Symbols 


7.0 REVISION HISTORY 


Number 

Description 

-001 

Original Version 

-002 

Added new RY/BY# mode of 28F01 6SV (Pulse-On-Write/Erase). 

Added/Revised DC/AC Characteristics based on 28F01 6SV Datasheet (Rev. 002) 

- Increased Iccr Added to Tables 8 and 9. 

- Decreased Icces. IppR. Ippes Added to Tables 8 and 9. 

- tpHQv Added to T able 1 0. 

- tpHQv and to lqv Added to Table 1 1 . 

- tpHWL Added to Table 1 2. 

- tpHEL. Uvwh. tovwH. tvvLWH and *phwl Added to Table 1 3. 

- tpHEL Added to Table 14. 

- tpHWL. tAVEH. toVEH. *ELEH and t PH EL Added to Table 1 5. 

Tables 16 and 17 Consolidated into Tables 12 and 13. 

Added “Swap Page Buffer” to Pseudocode Example in Section 4.1 . 
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1.0 INTRODUCTION 

The 28F008SA FlashFile™ Memory is a very high 
performance 8 Mbit (8,388,608 bit) memory, organized 
as 1 Mbyte (1,048,576 bytes) of 8 bits each. The 
28F008SA contains sixteen 64 Kbyte (65,536 byte) 
blocks, each block separately eraseable and capable of 

100.000 byte write-block erase cycles. On-chip automa- 
tion dramatically simplifies software algorithms, and 
frees the system microprocessor to service higher prior- 
ity tasks during component data update. An enhanced 
system interface allows switching the 28F008SA into a 
deep powerdown mode during periods of inactivity, and 
gives a hardware indication of the status of the internal 
Write State Machine. High-speed access time allows 
minimal wait-state interfacing to microprocessor buses, 
and advanced packaging provides optimum density/ 
in 2 . 

Features of the 28F008SA include: 

• High-Density Symmetrically Blocked Architecture: 

— Sixteen 64 Kbyte Blocks 

• Extended Cycling Capability 

— 100,000 Block Erase Cycles 

— 1.6 Million Block Erase Cycles per Chip 


• Automated Byte Write and Block Erase 

— Command User Interface 

— Status Register 

• System Performance Enhancements 

— RY/BY # Status Output 

— Erase Suspend Capability 

• Deep Powerdown Mode 

— 0.20 jjl A Ice Typical 

• Very High Performance Read 

— 85 ns Maximum Access Time 

• SRAM-Compatible Write Interface 

• Hardware Data Protection Features 

— Erase/Write Lockout during Power Transitions 

• Industry Standard Packaging 

— 40 Lead TSOP, 44 Lead PSOP 

• ETOX III Nonvolatile Flash Memory 
Technology 

— 12V Byte Write/Block Erase 



Figure 1. The 28F008SA Revolutionizes the Architecture of Computing 
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Figure 2. 28F008SA Block Diagram 


Traditional system architectures combine slow, high 
density nonvolatile mass storage (such as a disk drive) 
and fast, volatile memory (such as DRAM) to fully 
address system requirements. As Figure 1 illustrates, 
flash memory combines the best features of both the 
above memory technologies, making a “disk/DRAM” 
approach to system architecture unnecessary and ulti- 
mately wasteful. Flash memory is rapidly approaching 
DRAM in both cost and performance (especially in 
cached systems), while adding capabilities (such as non- 
volatility), that DRAM cannot claim. The 28F008SA 
will be the building block memory of choice for emerg- 
ing computing markets, whether integrated in a memo- 
ry card or disk drive form factor, or resident on the 
system motherboard. 

This application note discusses hardware interfacing of 
the 28F008SA flash memory to system designs. The 
28F008SA datasheet (order number 290429) is a valu- 
able reference document, providing in-depth device 
technical specifications, package pinouts and timing 
waveforms. Additionally, companion application note 
AP-360, “28F008SA Software Drivers” (order number 
292095) provides example ASM-86 and “C” routines 
for controlling the 28F008SA. AP-364 “28F008SA Au- 
tomation and Algorithms” discusses in-depth operation 
of the 28F008SA Write State Machine and internal al- 
gorithms, emphasizing how they interface to system 
software and hardware. AP-360 and AP-364 should be 
reviewed in conjunction with this application note and 
the 28F008SA datasheet for a complete understanding 
of this device. 


2.0 HARDWARE INTERFACING 

Figure 2 shows a block diagram of the 28F008SA and 
its internal contents. The CE# (chip enable) and OE# 
(output enable) inputs have comparable enable and 
read functions to those of other memory technologies 
such as SRAM. Similarly, Vcc is the component power 
supply (5V ±10%), while GND should be connected 
to system ground. Address inputs allow the system to 
select a specific byte for reading or writing/erasing, and 
the 8-bit data bus transfers information to and from the 
28F008SA. The other control lines (WE#, RP#, 
RY/BY # and Vpp) are discussed below. 

2.1 Vpp (Byte Write/Block Erase 
Voltage) 

The Vpp input supplies high voltage to the 28F008SA 
to enable byte write and block erase. Vpp is specified at 
12V ± 5% (11.4V- 12.6V). Attempting to byte write or 
block erase the 28F008SA beyond the 5% 12V toler- 
ance is not recommended. Vpp above 12.6V can poten- 
tially result in device damage, and Vpp below 11.4V 
dramatically lengthens write/erase time and compro- 
mises data reliability. The 28F008SA is guaranteed to 
prevent byte write and block erase attempts with Vpp 
below 6.5V, and in this situation it reports a “low Vpp 
error” through the component Status Register (see 
AP-360, AP-364 or the 28F008SA datasheet). 


I 
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Vpp Generation Circuits 

12V is often already present in systems, used to power 
the hard drive, display, RS-232 circuitry, flash BIOS 
update, etc. If it meets the tolerance and current capa- 
bility requirements of the 28F008SA, such a power sup- 
ply could be used directly as the 28F008SA update 
voltage source. However, 12V is sometimes not present 
or otherwise required, and in such cases, the 28F008SA 
Vpp must be derived from existing voltages and sup- 
plies. 

Fortunately, flash memory’s rapidly increasing popu- 
larity has driven ever-improving 12V converter avail- 
ability in the market. These solutions derive a regulated 
12V from a wide range of input voltages, and offer var- 
ied levels of integration and current delivery capability. 
In general, the input for 12V converters should come 
from the unregulated system power source, particularly 
in battery-powered systems. 

Table 1 lists and briefly describes several 12V genera- 
tion solutions available at the time this document was 
published. This is by no means an exhaustive list, and 
does not reflect any specific recommendation by Intel 
Corporation. For in-depth information on power sup- 
ply solutions for flash memory, reference Intel applica- 
tion note AP-357 (order number 292092), available 
through your local Intel sales office or distributor. 

Controlling Vpp to 28F008SA Componenf(s) 

Once 12V is available in the system, how is it con- 
trolled? One approach is to hard-wire 12V from the 
supply directly to the Vpp inputs of each 28F008SA in 
the system. The advantage here is in design simplicity 
and board space savings. The 28F008SA Command 
User Interface architecture and two-step byte write/ 
block erase command sequences provide protection 
from unwanted data alteration even with high voltage 
present on Vpp. All 28F008SA functions are disabled 
with Vcc below lockout voltage Vlko (2.2V), or when 


RP# is at Vil (see section 2.3). This provides data 
protection during system powerup, when the minimal- 
ly-loaded Vpp supply often ramps to 12V before Vcc 
(and therefore control inputs to the device) are stable. 

For additional data protection, the system designer can 
choose to make the Vpp supply switchable via a GPIO 
(General Purpose Input/Output) line, enabling 12V to 
the 28F008SA only during byte write or block erase 
attempts. A switchable Vpp also minimizes power con- 
sumption by both the flash memory components and 
the 12V supply or converter (due to efficiency losses). 
Many 12V converters integrate an ENABLE input, 
eliminating external circuitry. If such an input is not 
available, a low drain-source resistance MOSFET 
switch such as the Motorola MTD4P05 can be used at 
the 12V supply output. An example schematic for this 
switch is shown in Figure 3. The calculations below 
show that the low drain-source resistance of the 
MTD4P05 will keep a 12V input within the 5 % toler- 
ance required by the 28F008SA. 

Rds = 0.6ft 

Ipp = 60 mA 

(worst case, two components being byte written or 
block erased) 

AVswiTCH DROP = (60 mA X 0.6ft) = 0.04V 



Table 1. 12V Conversion Solutions for Vpp 


Manufacturer 

Part 

Number 

Input 

(V) 

Package 

Current 

Output 

Total 

Components 

Needed 

Est. 

Cost 

(10K) 

Maxim 

MAX732 

4 to 7.5 

16SOIC 

120mA 

9 

$3.93 

Linear Technology 

LT1110-12 

4.5 to 5.5 

S08 

120 mA 

11 

$4.58 

Linear Technology 

LT1 109-12 

4.5 to 5.5 

S08 

60 mA 

8 

$3.61 

Motorola 

MC34063A 

4.5 to 5.5 

S08 

120 mA 

15 

$2.25 

Maxim 

MAX667 

12.1 to 16.5 

S08 

120 mA 

4 

$2.63 

Linear Technology 

LT1111-12 

16 to 30 

S08 

120 mA 

7 

$3.95 

National Semiconductor 

LM2940CT-12 

13 to 26 

TO-220 

1 A 

3 

$1.30 
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2.2 RY/BY# (Ready/Busy) Output 

The 28F008SA offers similar automated byte write/ 
block erase capabilities to those first seen in the 
28F001BX Bootblock flash memory family, introduced 
by Intel in May of 1991. It enhances these capabilities 
via the RY/BY # output, which provides hardware in- 
dication of internal Write State Machine (WSM) opera- 
tion. RY/BY # is a full CMOS output, constantly driv- 
en by the 28F008SA and not tristated if the device 
CE# or OE# inputs are brought to Vjh- RY/BY #’s 
default state after device powerup is Voh- It transitions 
low to Vql when a byte write or block erase sequence 
is initiated by system software, and RY/BY #’s rising 
edge (return to Voh) alerts the system to byte write or 
block erase completion. RY/BY# also goes to Voh 
after the 28F008SA is put in Erase Suspend or Deep 
Powerdown modes. 

RY/BY# is intended to interface the 28F008SA to a 
system microprocessor rising-edge-triggered interrupt 
input. In a multiple-chip memory array, external 
EPLD logic or an interrupt controller can be used to 
combine and prioritize RY/BY #s into one system in- 
terrupt (see Figure 4). The system can then, using a 
flash memory “activity table” set up in RAM, poll the 
individual 28F008SA Status Registers to determine 
which device has returned “ready”, or read the 
RY/BY # inputs directly at the EPLD, as shown. 

Figure 5 provides an alternative method for connecting 
multiple RY/BY #s to one interrupt input. The diode/ 
resistor combination converts the 28F008SA full 
CMOS output into an open-drain “wired-OR” equiva- 
lent. Any RY/BY# at Vql will drive the interrupt 
input low, and this input is pulled high by the resistors 
when all RY/BY #s are at Voh- It is important in a 
design like this to use diodes with low forward voltage 
drops, so that the 28F008SA Vql (0.45V) plus the di- 
ode voltage drop is still less than or equal to the desti- 
nation input Vih (0.8V). For the schematic shown in 
Figure 5, the equation is: 

Vql + Vdiqde = 0.45 V M ax + 0.3V = 0.75V ^ 0.8V 


Note that should the system connect RY/BY # to an 
interrupt, disable that interrupt prior to suspending 
erase, as RY/BY# will transition to Vqh when the 
device is suspended. 




Figure 4. EPLD-Based RY/BY# Implementation 


+5V 



Figure 5. “Wired-OR” RY/BY# Implementation 


2.3 RP# (Reset/Powerdown) Input 

Deep Powerdown Mode 

The RP# input, when driven to Vjl by the system, 
switches the 28F008SA into a deep powerdown mode 
with negligable power consumption. This feature inte- 
grates the Vcc power FET often used with low power 
designs. Power consumption thru Vcc is typically 
1 julW in deep powerdown mode. RP#-low deselects 
the memory, places output drivers for Dq _7 in a high- 
impedence state and turns off a majority of internal 
circuits. RY/BY# is driven to Vqh while in deep 
powerdown mode. Depending on the flexibility desired, 
system designers can choose to put either the entire 
flash device array into deep powerdown mode, or any 
individual components via selective input control. The 
28F008SA requires a “wakeup” time after RP# re- 
turns to Vjh before it can be successfully written 
(tpnwL) or outputs are valid to read attempts (tpHQv)- 
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iny. 

Write Protection 

Since RP# = Vjl deselects the 28F008SA, this input 
can be used not only as a means of entering deep pow- 
erdown mode but also as an active-high “chip enable” 
to block spurious writes during system power tran- 
sitions. Figure 6 shows one possible RP# implementa- 
tion, controlled by a GPIO line for power management 
and by a system POWER GOOD for power sequencing 
protection. In this design, the 5V monitoring circuit 
begins functioning at Vcc = IV, and will enable the 
device only after Vcc transitions above 4.6V (and sys- 
tem control signals are therefore stable). As Vcc drops 
below 4.6V during system powerdown, RP# protection 
is again activated. 



MAX70S 

P0WERG00D 



RP#(T0 28F008SA) 

GPIO 

MR# 




292094-6 


Figure 6. RP# Gating 


Reset Control 

RP# at Vjl resets all internal automation within the 
28F008SA as part of the deep powerdown process. 
Upon exit from deep powerdown, the 28F008SA is re- 
set to Read Array mode. This functionality is ideal 
when the 28F008SA is the boot memory for the system. 
RP# active transitions reset the Write Status Machine 
if system reset occurs during flash memory program or 
erase, and allow successful CPU reboot. 


2.4 WE# (Write Enable) Input 

When flash memory is written, the result can range 
from a 28F008SA that is placed in “read intelligent 
identifier” or “read Status Register” modes to altera- 
tion of nonvolatile flash memory contents. System 
hardware can prevent spurious writes to flash memory 
by application software or an operating system by gat- 
ing the system WE# to flash memory components to 
enable writes only when desired. 

Figure 7 shows a simple design that gates WE# with a 
GPIO line, enabling writes to the 28F008SA only when 
the GPIO is a “0”. The GPIO is initialized to “1” on 
system powerup and the BIOS, a dedicated update soft- 
ware routine, a special keyboard sequence, switch on 
the back of the system or jumper on the system mother- 
board can then control the GPIO. This circuit ensures 
that flash memory contents are as permanent as 
“ROM” unless alteration is specifically desired. 
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Figure 7. WE# Gating 


2.5 High Density/In 2 Layout 

Figure 8 shows an 8 Mbyte flash memory array using 
TSOP (Thin Small Outline)-packaged 28F008SAs in 
standard (E) and reverse (F) configurations. A layout 
like this is used in Intel’s Series 2 flash memory cards 
(in densities to 20 Mbytes) and provides optimum array 
density for available board space. 

Address and data lines are connected to all components 
in parallel. OE# and WE# are similarly connected. 
Section 2.7 of this document discusses alternate meth- 
ods of implementing these signals for highest speed 
reads and writes in large memory arrays. 

Component RY/BY #s are shown as not connected in 
Figure 8. They can be left unused, in which case the 
system software will substitute polling of component 
Status Registers for hardware interrupt, or RY/BY #s 
can be implemented as described in section 2.2. 

CE#s are also not connected, intended to be individu- 
ally driven by system chip enable decoding logic. This 
provides capability to read from and write to the array 
on a byte-by-byte basis. In a xl6-only system, upper 
and lower byte 28F008SAs can have their CE#s bused 
together if desired. 

Finally, Vcc> Vpp and RP# are connected in parallel 
to all components. Section 2.6 discusses bypass capaci- 
tor filtering of supply voltage inputs, while section 2.3 
provides uses for RP#. If desired, individual compo- 
nent, component pair, etc. selective powerdown control 
can be substituted for the global control shown in 
Figure 8. 

In space-constrained designs, a multiple-layer partial 
“serpentine” trace layout at the edges of the 28F008SA 
array may be implemented, with a full serpentine lay- 
out within the array as in Figure 8. 
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2.6 Power Supply Decoupling 

Both the Vcc and Vpp inputs to each 28F008SA 
should be decoupled at the package leads to provide 
noise immunity and supply current for transient cur- 
rent spikes during read, byte write and block erase. Ad- 
ditional bulk capacitance for groups of flash memories 
overcomes voltage slump caused by PC board trace in- 
ductances. Calculations for individual component and 
bulk capacitors (one per 8 devices) are shown below. 


Assumptions: 

I = 35 mA per device (Vqc), therefore 
I = 17.5 mA per device input (Vqc) 

I = 30 mA per device (Vpp) 
dv = 0.1V (0.2V peak-peak) 
dt = 20 ns 

Per-Component-Input Decoupling Capacitor (Vcc) : 
C = I dt/dv = (17.5 mA X 20 ns)/0.1V = 3.5 nF 
4x margin = 4 X 3.5 nF = 14 nF 
Standard Equivalent = 0.01 ju,F 


Basic Equation: 

I = C dv/dt 
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NOTE: 

Calculations above assume that each 28F008SA is 
driving CMOS inputs (with corresponding high im- 
pedance and negligible input current requirements). If 
28F008SA outputs are driving non-CMOS inputs, 
larger per-component capacitance may be needed to 
supply current while outputs are switching. 

Bulk Capacitor (Vcc) : 

C = 10 X (Total of Decoupling Capacitors) 

Bulk Capacitor (4 Mbyte array) = 10 x (8 X 0.01 /xF) 

= 0.8 jllF 

Standard Equivalent = 1 /xF 
Per-Component Decoupling Capacitor (Vpp): 

C = I dt/dv = (30 mA X 20 ns)/0.1V = 6 nF 
4x margin = 4 X 6 nF = 24 nF 
Standard Equivalent = 0.033 jxF 


2.7 High Speed Design Techniques 

The 28F008SA’s fast read access and command write 
specifications make it a natural choice for high per- 
formance memory arrays. The following tips will opti- 
mize the memory interface for optimum read/write 
speed. The common recommendation in all instances 
centers around minimizing fanout and capacitive bus 
loading to allow highest switching speed, lowest rise 
and fall times, and therefore greatest performance. 


• Minimize address bus loading from the microproc- 
essor to the memory array. Multiple address latches 
feeding subsets of the array speed address input to 
each 28F008SA and CE# decoding by external log- 
ic. 

• Similarly, drive the memory array with multiple 
OE#s and WE#s. Most EPLD and discrete logic 
timing is specified at a 30 pF load, which equates to 
driving 4 28F008SA inputs at maximum input ca- 
pacitance. Anything more than this may severely 
impact the logic’s propagation delay. 

o Finally, remember that each 28F008SA, when read, 
drives not only the system microprocessor or trans- 
ceiver but also any other flash memory components 
connected to the common data bus. Each 28F008SA 
data output is specified at 12 pF, and the 28F008SA 
read timings are tested at either 30 pF or 100 pF of 
loading, depending on the chosen speed bin. 

For large flash arrays where sequential data can be dis- 
tributed on many devices, hardware interleaving pro- 
vides additional performance. 

2.8 Example Bus Interfaces 

Appendix A shows hardware interface to the In- 
tel386™SL PI bus, and Appendix B shows interface to 
the Intel486™ SX local CPU bus. Both interfaces in- 
corporate techniques described in sections 2. 1-2.7 of 
this document. These designs are intended to be exam- 
ples which can be modified to suit requirements of the 
end system. 
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lntel 386 ™SL PI BUS INTERFACE 



NOTE: 

The DRAM interface is not shown, for graphic simplicity. 
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APPENDIX B 

Intel486™ SX LOCAL CPU BUS INTERFACE 



GPIO 
RESET# I 
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NOTE: 

The DRAM interface is not shown, for graphic simplicity. 
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Updated Figure 6 


Added Reset Control discussion for RP# (Reset/ Powerdown) Input. 
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1.0 INTRODUCTION 

This application note provides example software code 
for byte writing, block erasing and otherwise control- 
ling Intel’s 28F008SA 8 Mbit symmetrically blocked 
FlashFile™ Memory family. Two programming lan- 
guages are provided; high-level “C” for multi-platform 
support, and ASM-86 assembly. In many cases, the 
driver routines can be inserted “as is” into the main 
body of code being developed by the system software 
engineer. The text accompanying each routine describes 
the existing code and suggests area for possible altera- 
tion to fit specific applications. These explanations, 
along with in-line commenting, minimize driver modifi- 
cation efforts. 


intel. 

Companion product datasheets for the 28F008SA and 
28F008SA-L are valuable reference documents. Data- 
sheets should be reviewed in conjunction with this ap- 
plication note for a complete understanding of the de- 
vices. AP-359, “28F008SA Hardware Interfacing” is 
the hardware-oriented application note equivalent for 
these devices and can also be referenced. AP-364 
“28F008SA Automation and Algorithms”, another 
useful reference, discusses the details of Write State ma- 
chine automation. 

The internal automation of the 28F008SA makes soft- 
ware timing loops unnecessary and results in platform- 
independent code. This software is designed to be exe- 
cuted in any type of memory and with all processor 
clock rates. “C” code can be used with many micro- 
processors and microcontrollers, while ASM-86 assem- 
bly code provides the smallest code “kernal” for Intel 
microprocessors and embedded processors. 
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2.0 ASM-86 DRIVERS 

; Copyright Intel Corporation, 1992 

; Brian Dipert, Intel Corporation, February 8, 1992, Revision 1.0 

; Revision History: Rev 1.0 

; The following code controls byte write of data to a single 28F008SA (x8 write) 

; DS:[SI] points to the data to be written, ES:[DI] is the location to be written 

; In protected mode operation, DS and ES reference a descriptor 

; Register AX is modified by this procedure 


WRITE.SETUP 

EQU 

40H 

READ. ID 

EQU 

9 OH 

INTEL.ID 

EQU 

89H 

DEVICE. ID 

EQU 

0A2H 

DEVICE.ID2 

EQU 

0A1H 

READY 

EQU 

80H 

W.ERR.FLAG 

EQU 

10H 

VPP.FLAG 

EQU 

08H 


; Insert code here to ramp Vpp and disable component RP# input. If a string of bytes is 

; to be written at one time, Vpp ramp to 12V and ID check need only occur once, 

; before the first byte is written 

MOV AX, "Address 0 for target 28F008SA-segment " 

; Initialize pointer to 28F0008SA address 0 

MOV ES, AX 

MOV DI, "Address 0 for target 28F008SA-of fset" 

MOV BYTE PTR ES:[DI], READ. ID ; Write Inteligent Identifier command 

CMP BYTE PTR ES:[DI], INTEL.ID ; Does manufacturer ID read correctly? 

JNZ W.BYT.ID.ERR 

MOV DI, "Address 1 for target 28F008SA-of f set" 

; Initialize pointer to 28F008SA address 1 
CMP BYTE PTR ES:[DI], DEVICE.ID ; Does device ID read correctly? 

JZ W.BYT.ID.PASS 

CMP BYTE PTR ES:[DI] , DEVICE.ID2 

JNZ W_BYT_ID_ERR 

W_BYT.ID.PASS: 

MOV AX, "Byte write destination address-segment" 

; Initialize pointer to byte write dest. address 

MOV ES, AX 

MOV DI, "Byte write destination address-offset" 

MOV BYTE PTR ES:[DI], WRITE.SETUP ; Write byte write setup command 

MOV AL, DS:[SI] ; Load AL with data to write 

MOV ES: [DI] , AL ; Write to device 

W.BYT.LOOP : 

TEST BYTE PTR ES:[DI] , READY ; Read 28F008SA Status Register 

JZ W.BYT.LOOP ; Loop until bit 7 = 1 

TEST BYTE PTR ES:[DI], (W.ERR.FLAG OR VPP.FLAG) 

JZ W.BYT.CONT ; Success 1 

TEST BYTE PTR ES:[DI], W.ERR.FLAG ; Check Status Register bit 4 

JNZ W.BYT.ERR ; Jump if = 1, Byte Write Error 

TEST ES: [DI] , VPP.FLAG ; Check Status Register bit 3 

JNZ W.BYT.VPP ; Jump if = 1, Vpp Low Error 

W_BYT.ID.ERR: 

; Insert code to service improper device ID read error here. 

; Is 28F008SA RP# input disabled? Is Vcc applied to the 28F008SA? 

W.BYT.ERR: 

; Insert code to service byte write error here 

W.BYT.VPP : 

; Insert code to service byte write Vpp low error here 

W.BYT.CONT : 

; Code continues from this point 

This routine writes a byte of data to a single 28F008SA. Note the use of BYTE PTR notation to force x8 accesses. If 
a string of bytes is to be written at one time, the Vpp ramp up, RP# disable and device ID checks need only be done 
before the first byte write attempt. Additionally, when writing multiple bytes at once, examination of bits other than 
bit 7 (WSM Status) need only occur after the last byte write has completed. The Status Register retains any error bits 
until the Clear Status Register command is written. 
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The following code controls byte write of data to a pair of 28F008SAs (xl6 write) 
DS;[SI] points to the data to be written, ES:[DI] is the location to be written 
In protected mode operation, DS and ES reference a descriptor 
Register AX is modified by this procedure 


WRITE. SETUP 

EQU 

40H 


READ. ID 


EQU 

90H 


INTEL.ID 


EQU 

89H 


DEVICE. ID 


EQU 

0A2H 


DEVICE. ID2 

EQU 

0A1H 


READY 


EQU 

80H 


W.ERR.FLAG 

EQU 

10H 


VPP.FLAG 


EQU 

08H 



Insert 

code here to 

ramp Vpp and disable component RP# inputs. If a string of words is 

f 


to be written at one 

time, Vpp ramp to 12V and ID check need only occur once. 

! 


before the first word 

is written 


MOV 

AX, 

"Address 0 

for target 28F008SA-segment" 





; Initialize pointer to 28F008SA address 0 


MOV 

ES, 

AX 



MOV 

DI, 

"Address 0 

for target 28F008SA-off set " 


MOV 

ES : [DI] , 

( (READ.ID SHL 8) OR READ. ID) 





; Write Inteligent Identifier command 


CMP 

ES : [DI] , 

((INTEL.ID 

SHL 8) OR INTEL.ID) 





; Does manufacturer ID read correctly? 


JNZ 

W_WRD.ID.ERR 



MOV 

DI, 

"Address 1 

for target 28F008SA-offset " 





; Initialize pointer to 28F008SA address 1 


CMP 

ES : [DI] , 

( (DEVICE.ID 

SHL 8) OR DEVICE.ID) 





; Does device ID read correctly? 


JZ 

W_WRD.ID.PASS 



CMP 

ES : [DI] , 

( (DEVICE. ID2 SHL 8) OR DEVICE.ID2) 


JNZ 

W_WRD.ID.ERR 


W.WRD.ID. 

PASS: 





MOV ' 

AX, 

"Byte write 

destination address-segment" 





; Initialize pointer to byte write dest. address 


MOV 

ES, 

AX 



MOV 

DI, 

"Byte write 

destination address-offset" 


MOV 

ES : [DI] , 

( (WRITE.SETUP SHL 8) OR WRITE.SETUP) ; Write byte write setup command 


MOV 

AX, 

DS : [SI] 

; Load AX with data to write 


MOV 

ES : [DI] , 

AX 

; Write to devices 

W.WRD.LOOP : 





TEST 

ES : [DI] , 

( (READY SHL 8) OR READY) ; Read 28F008SA Status Registers 


JZ 

W.WRD.LOOP 

; Loop until bit 7=1 


TEST 

ES:[DI] , 

(((W.ERR.FLAG OR VPP.FLAG) SHL 8) OR (W.ERR.FLAG OR VPP.FLAG)) 


JZ 

W.WRD.CONT 

; Success ! 


MOV 

AX, 

ES:[DI] 

; Load Status Register data into AX 


TEST 

AL, 

W.ERR.FLAG 

; Check Status Register bit 4 (low byte) 


JNZ 

W.WRD.ERR 


; Jump if = 1 


TEST 

AH, 

W.ERR.FLAG 

; Check Status Register bit 4 (high byte) 


JNZ 

W.WRD.ERR 


; Jump if = 1 


TEST 

AL, 

VPP.FLAG 

; Check Status Register bit 3 (low byte) 


JNZ 

W.WRD.VPP 


; Jump if = 1 


TEST 

AH, 

VPP.FLAG 

; Check Status Register bit 3 (high byte) 


JNZ 

W.WRD.VPP 


; Jump if = 1 


W.WRD.ID.ERR : 

; Insert code to service improper device ID read error here, 

; Are 28F008SA RP# inputs disabled? Is Vcc applied to the 28F008SAs? 


W.WRD.ERR : 

; Insert code to service byte write error here 

W_WRD_VPP : 

; Insert code to service byte write Vpp low error here 

W.WRD.CONT : 

; Code continues from this point..... 

This routine writes a word of data to a pair of 28F008SAs. Note that all constants have been “OR’d” for parallel 
read/write of two devices at once. If a string of words is to be written at one time, the Vpp ramp up, RP# disable 
and device ID checks need only be done before the first word write attempt. Additionally, when writing multiple 
words at once, examination of bits other than bit 7 (WSM Status) need only occur after the last word write has 
completed. The Status Register retains any error bits until the Clear Status Register command is written. 
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,* The following code controls block erase of a single 28F008SA (x8 block erase) 

; ES:[DI] points to the block to be erased 

; In protected mode operation, ES references a descriptor 

; Register AX is modified by this procedure 


ERASE. SETUP 

EQU 

20H 

ERASE.CONFIRM 

EQU 

ODOH 

READ. ID 

EQU 

90H 

INTEL. ID 

EQU 

89H 

DEVICE. ID 

EQU 

0A2H 

DEVICE.ID2 

EQU 

0A1H 

READY 

EQU 

80H 

E.ERR.FLAG 

EQU 

20H 

E.CMD.FLAG 

EQU 

30H 

VPP.FLAG 

EQU 

08H 


; Insert code here to ramp Vpp and disable component RP# input. If a string of blocks is 

; to be erased at one time, Vpp ramp to 12V and ID check need only occur once, 

; before the first block is erased 

MOV AX, "Address 0 for target 28F008SA-segment" 

; Initialize pointer to 28F008SA address 0 

MOV ES , AX 

MOV DI, "Address 0 for target 28F008SA-offset" 

MOV BYTE PTR ES:[DI], READ.. ID ; Write Inteligent Identifier command 

CMP BYTE PTR ES;[DI], INTEL.ID ; Does manufacturer ID read correctly? 

JNZ E.BYT.ID.ERR 

MOV DI, "Address 1 for target 28F008SA-offset" 

; Initialize pointer to 28F008SA address 1 
CMP BYTE PTR ES:[DI], DEVICE.ID ; Does device ID read correctly? 

JZ E_BYT_ID_PASS 

CMP BYTE PTR ES:[DI], DEVICE.ID2 

JNZ E_BYT.ID.ERR 

E_BYT.ID.PASS : 

MOV AX, "Block erase destination address-segment" 

; Initialize pointer to block erase dest. address 

MOV ES, AX 

MOV DI, "Block erase destination address-offset" 

MOV BYTE PTR ES:[DI], ERASE. SETUP ; Write block erase setup command 

MOV BYTE PTR ES:[DI], ERASE.CONFIRM ; Write block erase confirm command 

E.BYT.LOOP : 

TEST BYTE PTR ES:[DI] , READY ; Read 28F0008SA Status Register 

JZ E.BYT.LOOP ; Loop until bit 7 = 1 

TEST BYTE PTR ES:[DI], (E.CMD.FLAG OR VPP.FLAG) 

JZ E.BYT.CONT ; Success! 

TEST BYTE PTR ES:[DI], E.CMD.FLAG ; Check Status Register bits 4 and 5 

JNZ E_BYT.CMD.ERR ; Jump if = 1 

TEST BYTE PTR ES:[DI], E.ERR.FLAG ; Check Status Register bit 5 

JNZ E.BYT.ERR ; Jump if = 1 

TEST BYTE PTR ES:[DI], VPP.FLAG ; Check Status Register bit 3 

JNZ E.BYT.VPP ; Jump if = 1 

E_BYT.ID.ERR: 

; Insert code to service improper device ID read error here. 

; Is 28F008SA RP# input disabled? Is Vcc applied to the 28F008SA? 

E.BYT.CMD.ERR : 

; Insert code to service block erase command sequence error here 

; (setup followed by a command other than confirm) 

E.BYT.ERR: 

; Insert code to service block erase error here 

E.BYT.VPP : 

; Insert code to service block erase Vpp low error here 

E.BYT.CONT : 

; Code continues from this point 

This routine erases a block of a single 28FOOSA. Note the use of BYTE PTR notation to force x8 accesses. If a string 
of blocks is to be erased at one time, the Vpp ramp up, RP# disable and device ID checks need only be down before 
the first block erase attempt. Additionally, when erasing multiple blocks at once, examination of bits other than bit 7 
(WSM Status) need only occur after the last block erase has completed. The Status Register retains any error bits 
until the Clear Status Register command is written. 
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; The following code 

controls block erase of a pair of 28F008SAs (xl6 block erase) 

; ES ; [DI] 

points to 

the blocks to be erased 

; In protected mode 

operation, ES references a descriptor 

; Register AX is modified by this procedure 

ERASE. SETUP 

EQU 

20H 

ERASE.CONFIRM 

EQU 

ODOH 

READ. ID 

EQU 

90H 

INTEL.ID 

EQU 

>89H 

DEVICE. ID 

EQU 

0A2H 

DEVICE.ID2 

EQU 

0A1H 

READY 

EQU 

80H 

E.ERR.FLAG 

EQU 

20H 

E.CMD.FLAG 

EQU 

30H 

VPP.FLAG 

EQU 

08H 

; Insert 

code here to ramp Vpp and disable component RP# inputs. If a string of bloi 


to be erased at one time, Vpp ramp to 12V and ID check need only occur < 


before the first block pair is erased 

MOV 

AX, 

"Address 0 for target 28F008SA-segment" 

; Initialize pointer to 28F008SA address 

MOV 

ES, 

AX 

MOV 

DI, 

"Address 0 for target 28F008SA-offset " 

MOV 

ES ; [DI] , 

( (READ. ID SHL 8) OR READ. ID) 

; Write Inteligent Identifier command 

CMP 

ES : [DI] , 

((INTEL.ID SHL 8) OR INTEL.ID) 

; Does manufacturer ID read correctly? 

JNZ 

E.WRD.ID 

.ERR 

MOV 

DI, 

"Address 1 for target 28F008SA-offset" 

; Initialize pointer to 28F008SA address 

CMP 

ES ; [DI] , 

( (DEVICE. ID SHL 8) OR DEVICE.ID) 

; Does device ID read correctly? 

JZ 

E.WRD.ID 

.PASS 

CMP 

ES ; [DI] , 

( (DEVICE.ID2 SHL 8) OR DEV ICE. I D2) 

JNZ 

E.WRD.ID 

.ERR 

E_WRD.ID.PASS ; 

MOV 

AX, 

"Block erase destination address-segment" 

; Initialize pointer to block erase dest. 

MOV 

ES, 

AX 

MOV 

DI, 

"Block erase destination address-offset" 

MOV 

ES : [DI] , 

( (ERASE. SETUP SHL 8) OR ERASE. SETUP) 

; Write block erase setup command 

MOV 

ES ; [DI] , 

((ERASE.CONFIRM SHL 8) OR ERASE.CONFIRM) 

; Write block erase confirm command 

E.WRD.LOOP : 

TEST 

ES : [DI] , 

((READY SHL 8) OR READY) ; Read 28F008SA Status Registers 


E.WRD.LOOP 


; Loop until bit 7=1 


ES : [DI] , ( ( (E.CMD.FLAG OR VPP_FLAG) SHL 8) OR (E.CMD.FLAG OR VPP.FLAG)) 


AX, ES : [DI] 

AL, E.CMD.FLAG 

E.WRD.CMD.ERR 

AH, E.CMD.FLAG 

E_WRD.CMD.ERR 

AL, E.ERR.FLAG 

E.WRD.ERR 

AH, E.ERR.FLAG 

E.WRD.ERR 

AL, VPP.FLAG 

E.WRD.VPP 

AH, VPP.FLAG 

E.WRD.VPP 


Load Status Register data into AX 
Check Status Reg bits 4 and 5 (low byte) 

Jump if = 1 

Check Status Register bits 4 and 5 (high byte) 
Jump if = 1 

Check Status Register bit 5 (low byte) 

Jump if = 1 

Check Status Register bit 5 (high byte) 

Jump if = 1 

Check Status Register bit 3 (low byte) 

Jump if = 1 

Check Status Register bit 3 (high byte) 

Jump if = 1 


E.WRD.ID.ERR: 

; Insert code to service improper device ID read error here. 

; Are 28F008SA RP# inputs disabled? Is Vcc applied to the 28F008SAS? 

E.WRD.CMD.ERR : 

; Insert code to service block erase command sequence error here 

; (setup followed by a command other than confirm) 

E.WRD.ERR; 

; Insert code to service block erase error here 

E.WRD.VPP; 

; Insert code to service block erase Vpp low error here 

E.WRD.CONT ; 

; Code continues from this point 
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This routine erases a block pair of two 28F008SAs. Note that all constants have been “OR’d” for parallel read/write 
of two devices at once. If a string of block pairs is to be erased at one time, the Vpp ramp up, RP# disable and device 
ID checks need only be done before the first block pair erase attempt. Additionally, when erasing multiple block 
pairs at once, examination of bits other than bit 7 (WSM Status) need only occur after the last block pair erase has 
completed. The Status Register retains any error bits until the Clear Status Register command is written. 


3.0 ‘C’ DRIVERS 


y************************************************************** ************************* ************** y 


/* Copyright Intel Corporation, 1992 */ 
/* Brian Dipert, Intel Corporation, May 7, 1992, Revision 2.1 */ 
/* The following drivers control the Command and Status Registers of the 28F008SA Flash */ 
/* Memory to drive byte write, block erase. Status Register read and clear and */ 
/* array read algorithms. Sample Vpp and RP# control blocks are also included, */ 
/* as are example programs combining drivers into full algorithms */ 
/* The functions listed below are included: */ 
/* erasbgn() : Begins block erasure */ 
/* erassusp() : Suspends block erase to allow reading data from a block of the */ 
/* 28F008SA other than that being erased */ 
/* erasres() : Resumes block erase if suspended */ 
/* end() : Polls the Write State Machine to determine if block erase or byte write */ 
/* have completed */ 
/* eraschk() : Executes full status check after block erase completion */ 
/* writebgn() : Begins byte write */ 
/* writechk(): Executes full status check after byte write completion */ 
/* idread() : Reads and returns the manufacturer and device IDs of the target */ 
/* 28F008SA */ 
/* statrd() : Reads and returns the contents of the Status Register */ 
/* statclr() : Clears the Status Register */ 
/* rdmode () : Puts the 28F008SA in Read Array mode */ 
/* rdbyte () : Reads and returns a specified byte from the target 28F008SA */ 
/* vppup() : Enables high voltage Vpph */ 
/* vppdown() : Disables Vpph */ 
/* pwden() : Enables active low signal RP# */ 
/* pwddis ( ) : Disables active low signal RP# */ 
/* */ 
/* Addresses are transferred to functions as pointers to far bytes (ie long integers). An */ 
/* alternate approach is to create a global array the size of the 28F008SA and */ 
/* located "over" the 28F008SA in the system memory map. Accessing specific */ 
/* locations of the 28F008SA is then accomplished by passing the chosen function */ 
/* an offset from the array base versus a specific address. Different */ 
/* microprocessor architectures will require different array definitions; ie for */ 
/* the Intel architecture, define it as "byte eightmeg[16] [10000] " and pass each */ 
/* function TWO offsets to access a specific location. MCS-96 architectures are */ 
/* limited to "byte eightmeg[10000] " ; alternate approaches such as using port pins */ 
/* for paging will be required to access the full flash array */ 
/* */ 
/* To create a far pointer, a function such as MK_FP() can be used, given a segment and */ 
/* offset in the Intel architecture. I use Turbo-C; see your compiler reference */ 
/* manual for additional information. */ 

/* Revision History: Rev 2.1 */ 
/* */ 
/* Changes From Revision 1.0 to Revision 2.0: */ 
/* Added alternate 28F008SA device ID to routine idread() */ 
/* */ 
/* Changes from 2.0 to 2.1: Revised the Erase Suspend algorithm to remove potential */ 
/* "infinite loop" caused by the WSM going "ready" after the system reads the */ 
/* Status Register, and before the system issues the Erase Suspend command */ 


typedef unsigned char byte 
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***********************************************^ 
/* Function: Main */ 

/* Description: The following code shows examples of byte write and block */ 

/* erase algorithms that can be modified to fit the specific application and */ 

/* hardware design */ 

^*^*t************* *********************************************************************** **^** ******** ^ 

main ( ) 


byte far *address ; 
byte data, status; 


/* 

/* 

/* 

/* 

/* 

/* 


/* 


r 


The following code gives an example of a possible byte write algorithm. */ 

Note that Vpp does not need to be cycled between byte writes when a string of byte */ 

writes occurs. Ramp Vpp to 12V before the first byte write and leave at 12V until after */ 
completion of the last byte write. Doing so minimizes Vpp ramp up-down delay and */ 

maximizes byte write throughput */ 

vppup ( ) ; 

-INSERT SOFTWARE DELAY FOR VPP RAMP IF REQUIRED" */ 

pwddis() ; 

address = OXxxxxxL; 

data = OXyy ; 

if (writebgn(data, address) == 1) 

-RECOVERY CODE-POWER NOT APPLIED (ID CHECK FAIL)" */ 

else 

i 

while (end(jtstatus) ) 
switch ( writechk( status ) ) 

( 


case 0: 

break ; 

case 1: 

"RECOVERY CODE -VPP LOW DETECT ERROR" */ 

break ; 

case 2: 

"RECOVERY CODE-BYTE WRITE ERROR" */ 

break ; 

} 

statclr() ; 

) 

vppdown ( ) ; 


This “C” routine gives an example of combining lower-level functions (found in following pages) to complete a byte 
write. Routines vppup( ) and pwddis( ) enable the 28F008SA for byte write. Function writebgn( ) issues a byte write 
sequence to the device, end( ) detects byte write completion via Status Register bit 7, and writechk( ) analyzes Status 
Register bits 3-6 to determine byte write success. If a string of bytes is to be written at one time, Vpp ramp up and 
RP# disable need only be done before the first byte write attempt. Additionally, when writing multiple bytes at 
once, examination of bits other than bit 7 (WSM Ready) need only occur after the last byte write has completed. The 
Status Register retains any error bits until the Clear Status Register command is written. 
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/* 

/* 

/* 

/* 

/* 

/* 


/* 


/* 


/* 


/* 


} 


The following code gives an example of a possible block erase algorithm. 

Note that Vpp does not need to be cycled between block erases when a string of block 
erases occurs. Ramp Vpp to 12V before the first block erase and leave at 12V until after 
completion of the last block erase. Doing so minimizes Vpp ramp up-down delay and 
maximizes block erase throughput 
vppup ( ) ; 

"INSERT SOFTWARE DELAY FOR VPP RAMP IF REQUIRED" 
pwddis() ; 

address = OXxxxxxL; 
if (erasbgn(address) == 1) 

"RECOVERY CODE-POWER NOT APPLIED (ID CHECK FAIL)" 

else 

{ 

while (end(&status) ) 


*/ 

*/ 

*/ 

*/ 

*/ 

*/ 


*/ 


switch (eraschk(status) ) 

{ 

case 0: 

break ; 

case 1: 


"RECOVERY CODE- VPP LOW DETECT ERROR" 
break ; 

case 2: 

"RECOVERY CODE-BLOCK ERASE ERROR" 
break ; 

» case 3: 

"RECOVERY CODE-ERASE SEQUENCE ERROR" 
break ; 

} 

statclr() ; 

) 

vppdown() ; 


*/ 


*/ 


*/ 


This “C” routine gives an example of combining lower-level functions (found in following pages) to complete a block 
erase. Routines vppup( ) and pwddis( ) enable the 28F008SA for block erase. Function erasbgn( ) issues a block erase 
sequence to the device, end( ) detects block erase completion via Status Register bit 7, and eraschk( ) analyzes Status 
Register bits 3-6 to determine block erase success. If a string of blocks is to be erased at one time, Vpp ramp up and 
RP# disable need only be done before the first block erase attempt. Additionally, when erasing multiple blocks at 
once, examination of bits other than bit 7 (WSM Ready) need only occur after the last block erase has completed. 
The Status Register retains any error bits until the Clear Status Register command is written. 


I 
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^***^^******t******************************** ********************************************************* / 

/* Function: Erasgbn */ 

/* Description: Begins erase of a block. */ 

/♦ Inputs: blckaddr: System address within the block to be erased */ 

/* Outputs: None */ 

/♦ Returns: 0 = Block erase successfully initiated */ 

/* 1 = Block erase not initiated (ID check error) ♦/ 

/* Device Read Mode on Return: Status Register (ID if returns 1) */ 

^******************1^*^* ******************************************************************************* ^ 

#define ERASETUP 0X20 /* Erase Setup command */ 

#define ERASCONF OXDO /* Erase Confirm command */ 

int erasbgn( blckaddr) 

byte far *blckaddr; /* blckaddr is an address within the block to be erased */ 

[ ' 

byte mfgrid.deviceid ; 

if (idread(&mfgrid,&deviceid)==l) /* ID read error; device not powered up? */ 

return (1) ; 

♦blckaddr = ERASETUP; /* Write Erase Setup command to block address */ 

♦blckaddr = ERASCONF; /* Write Erase Confirm command to block address ♦/ 

return (0) ; 

} 

Routine erasbgn( ) issues a block erase command sequence to a 28F008SA. It is passed the desired system address for 
the block to be erased. After calling idread( ), it writes the erase command sequence at the specified address. It 
returns “0” if block erase initiation was successful, and “1” if the ID read fails (device not powered up or RP# not 
disabled). 
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******************************************************************************** ^ 


/* Function: Erassusp „ */ 
/* Description: Suspends block erase to read from another block */ 
/* Inputs: None */ 
/* Outputs: None */ 
/* Returns: 0 = Block erase suspended ♦/ 
/* 1 = Error; Write State Machine not busy (block erase suspend not possible) x */ 
/* Device Read Mode on Return: Status Register */ 


f* ************* ******************************************************************************** *^ 


#define 

RDYMASK 

0X80 

/* 

Mask to isolate the WSM Status bit of the Status Register 

*/ 

#define 

WSMRDY 

0X80 

/* 

Status Register value after masking, signifying that 

*1 




/* 

the WSM is no longer busy 

*/ 

#define 

SUSPMASK 

0X40 

/* 

Mask to isolate the erase suspend status bit of the 

*/ 




/* 

Status Register 

*/ 

#define 

ESUSPYES 

0X40 

/* 

Status Register value after masking, signifying that 

*/ 




/* 

block erase has been suspended 

*/ 

#define 

STATREAD 

0X70 

/* 

Read Status Register command 

*/ 

#define 

SYSADDR 

0 

/* 

This constant can be initialized to any address within 

*/ 




/* 

the memory map of the target 28F008SA and is 

*/ 




/* 

alterable depending on the system architecture 

*/ 

#define 

SUSPCMD 

OXBO 

/* 

Erase Suspend command 

*/ 

int erassusp () 





{ 

byte far 

♦stataddr ; 

/* 

Pointer variable used to write commands to device 

*/ 


stataddr 

= (byte far ♦) SYSADDR; 




♦stataddr 

= SUSPCMD; 

/* 

Write Erase Suspend command to the device 

*/ 


♦stataddr 

= STATREAD; 

/* 

Write Read Status Register command. .necessary in case 

*/ 




/* 

erase is already completed 

*/ 


while ((* 

stataddr & RDYMASK) 

!= WSMRDY) 




; 

/* 

Will remain in while loop until bit 7 of the Status 

*/ 




/* 

Register goes to 1, signifying that 

*/ 




/* 

the WSM is no longer busy 

*/ 


if ( (*stataddr & SUSPMASK) = 

ESUSPYES) 




return (0) ; 

/* 

Erase is suspended. . return code "0" 

*/ 


return (1) ; 

/♦Erase has already completed; suspend not possible. 

*/ 




/* 

Error code B l n 

*/ 


Routine erassuspQ issues the erase suspend command to a 28F008SA. It first makes sure the WSM is truly busy, 
then issues the erase suspend command and polls Status Register bits 7 and 6 until they indicate erase suspension. It 
returns “0” if block erase was successful, and “1” if the WSM was not busy when suspend was attempted. 
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t *************************************************************************************************** / 


/* 

Function: 

Erasres 

*/ 

/* 

Description: Resumes block erase previously suspended 

*/ 

/* 

Inputs: 

None 

*/ 

/* 

Outputs : 

None 

*/ 

/* 

Returns : 

0 = Block erase resumed 

*/ 

/* 


1 = Error; Block erase not suspended when function called 

*/ 

/* 

Device Read Mode on Return: Status Register 

*/ 


/*************** ********************* ***************************************************************** ^ 

#define RDYMASK 0X80 

#define WSMRDY 0X80 

#define SUSPMASK 0X40 

#define ESUSPYES 0X40 

#define STATREAD 0X70 

#define SYSADDR 0 


#define RESUMCMD 0XD0 
int erasres() 


/* Mask to isolate the WSM Status bit of the Status Register ♦/ 
/* Status Register value after masking, signifying that the */ 


/* WSM is no longer busy */ 
/* Mask to isolate the erase suspend status bit of the */ 
/* Status Register */ 
/* Status Register value after masking, signifying that ♦/ 
/* block erase has been suspended */ 
/* Read Status Register command */ 
/* This constant can be initialized to any address within ♦/ 
/* the memory map of the target 28F008SA and is ♦/ 
/* alterable depending on the system architecture */ 
/* Erase Resume command */ 


byte far *stataddr; /* Pointer variable used to write commands to device ♦/ 

stataddr = (byte far *) SYSADDR; 

♦stataddr = STATREAD; /* Write Read Status Register command to 28F008SA ♦/ 

if ( (*stataddr & SUSPMASK) != ESUSPYES) 

return (1) ; /* Block erase not suspended. Error code "1" */ 

♦stataddr = RESUMCMD; /* Write Erase Resume command to the device */ 

while ( (♦ stataddr & SUSPMASK) = ESUSPYES) 

; /* Will remain in while loop until bit 6 of the Status ♦/ 

/* Register goes to 0, signifying block */ 

/* erase resumption ♦/ 

while ( (*stataddr & RDYMASK) == WSMRDY) 

; . /♦ Will remain in while loop until bit 7 of the Status ♦/ 

/♦ Register goes to 0, signifying that the WSM is */ 

/♦ once again busy ♦/ 

return (0) ; 


Routine erasres( ) issues the erase resume command to a 28F008SA. It first makes sure the WSM is truly suspended, 
then issues the erase resume command and polls Status Register bits 7 and 6 until the indicate WSM resumption. It 
returns “0” if block erase resume was successful, and “1” if the WSM was not suspended when resumption was 
attempted. 
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^*^^^****^^^****** 4 *************************************************************************************^ 

/* Function: End */ 


/* 

/* 

/* 

/* 

/* 

/* 


Description: Checks to see if the WSM is busy (is byte write/block erase completed?) */ 

Inputs: None */ 

Outputs: statdata: Status Register data read from device */ 

Returns: 0 = Byte Write/Block Erase completed */ 

1 = Byte Write/Block Erase still in progress */ 

Device Read Mode on Return: Status Register */ 


ft************) «c*******************************************^**********************************************/ 

Mask to isolate the WSM Status bit of the Status */ 

Register value after masking, signifying that the */ 
WSM is no longer busy */ 

Read Status Register command */ 

This constant can be initialized to any address within*/ 

the memory map of the target 28F008SA and is */ 

alterable depending on the system architecture */ 


#define 

RDYMASK 

0X80 

/* 

#define 

WSMRDY 

0X80 

1 * 




/* 

^define 

STATREAD 

0X70 

/* 

#define 

SYSADDR 

0 

1 * 




/* 




/* 


int end (statdata) 
byte *statdata; 


[ 


byte far *stataddr; 


/* Allows Status Register data to be passed back to the */ 
/* main program for further analysis */ 


/* Pointer variable used to write commands to device 


stataddr = (byte far *)SYSADDR; 

♦stataddr = STATREAD; /* Write Read Status Register command to 28F008SA 

if ( ( (* statdata = *stataddr) & RDYMASK) 1= WSMRDY) 

return (1); /* Byte write/block erasure still in progress. . .code " 

return (0); /* Byte write/block erase attempt completed. . .code "0" 


*/ 

*/ 


Routine end( ) detects completion of byte write or block erase operations of a 28F008SA. It passes back the Status 
Register data it reads from the device. It also returns “0” if Status Register bit 7 indicates WSM “Ready”, and “1” if 
indication is that the WSM is still “Busy”. 
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/ He* * ** * * ** * * ******* * ************* **** ** *** ****** * *** *** * ********* 4c ******* * ***** * ** 4c * * * **** ****** * * f 

/* Function: Eraschk */ 
/* Description: Completes full Status Register check for block erase (proper command */ 
/* sequence, Vpp low detect, block erase success). This routine assumes that block */ 
/* erase completion has already been checked in function end(), and therefore does */ 
/* not check the WSM Status bit of the Status Register */ 
/* Inputs: statdata: Status Register data read in function end */ 
/* Outputs: None */ 
/* Returns: 0 = Block erase completed successfully */ 
/* 1 = Error; Vpp low detect */ 
/* 2 = Error; Block erase error */ 
/* 3 = Error; Improper command sequencing */ 
/* Device Read Mode on Return: Same as when entered */ 


^***^^^*t*****************************^**************************************************************/ 

#define 

ESEQMASK 

0X30 


/* 

Mask to isolate the erase and byte write status bits of 

V 





/* 

the Status Register 

*/ 

#define 

ESEQFAIL 

0X30 


/* 

Status Register value after masking if block erase 

*/ 





/* 

command sequence error has been detected 

*/ 

#define 

EERRMSK 

0X20 


/* 

Mask to isolate the erase status bit of the 

*/ 





/* 

Status Register 

*/ 

#define 

ERASERR 

0X20 


/* 

Status Register value after masking if block erase error 

*/ 





/* 

has been detected 

*/ 

#define 

VLOWMASK 

0X08 


/* 

Mask to isolate the Vpp status bit of the Status Register 

*/ 

#define 

VPPLOW 

0X08 


/* 

Status Register value after masking if Vpp low 

*/ 





/* 

has been detected 

*/ 

int eraschk (statdata) 





byte statdata ; 



/* 

Status Register data that has been already read from the 

*/ 





/* 

28F008SA in function end() 

*/ 

( 

if ((statdata k VLOWMASK) 

== VPPLOW) 




return 

(1) ; 

/* 

Vpp low detect error, return code "1* 

*/ 


if ((statdata & EERRMSK) 

= ERASERR) 




return 

(2) ; 

/* 

Block erase error detect, return code "2" 

*/ 


if ((statdata & ESEQMASK) 

= ESEQFAIL) 




return 

(3) ; 

/* 

Block erase command sequence error, return code *3" 

*/ 


return (0) ; 


/* 

Block erase success, return code "0" 

*/ 


) 

Routine eraschk( ) takes the Status Register data read in end( ) and further analyzes it. It returns “0” if block erase 
was successful, “1” if Vpp low error was detected, “2” if block erase error was reported and “3” if an erase command 
sequence error was found (erase setup followed by a command other than erase confirm). This is useful after a block 
or string of blocks has been erased, to check for successful completion. 
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I* Function: Writebgn */ 

I* Description: Begins byte write sequence */ 

/* Inputs: wdata: Data to be written into the device */ 

/* waddr: Target address to be written */ 

/* Outputs: None */ 

/* Returns: 0 = Byte write successfully initiated */ 

/* 1 = Byte write not initiated (ID check error) */ 

/* Device Read Mode on Return: Status Register (ID if returns 1) */ 

#define SETUPCMD 0X40 /* Byte Write Setup command */ 

int writebgn (wdata, waddr) 

byte wdata; /* Data to be written into the 28F008SA */ 

byte far *waddr; /* waddr is the destination address for the data */ 

/* to be written */ 


{ 

byte mfgrid.deviceid ; 


if (idread(&mfgrid,&deviceid)==l) /* Device ID read error. . .powered up? */ 
return (1) ; 

*waddr = SETUPCMD; /* Write Byte Write Setup command and destination address */ 
*waddr = wdata; /* Write byte write data^ and destination address */ 
return (0) ; 




/* 

Function: 

Writechk 




/* 

Description: Completes full Status Register check for byte write (Vpp 

low 

detect, byte 

*/ 

/* 


write success) . This routine assumes that byte write completion has already. 

*/ 

/* 


been checked in function end() and therefore does not check 

the 

WSM Status 

*/ 

/* 


bit of the Status Register 



*/ 

/* 

Inputs: 

statdata: Status Register data read in function end() 



*/ 

/* 

Outputs : 

None 



V 

/* 

Returns : 

0 = Byte write completed successfully 



V 

/* 


1 = Error; Vpp low detect 



V 

/* 


2 = Error; Byte write error 



V 

r 

Device Read Mode on Return: Status Register 



*/ 




#define 

WERRMSK 

0X10 

y* 

Mask to isolate the byte write error bit of 

the */ 




/* 

Status Register 

*/ 

#define 

WRITERR 

0X10 

/* 

Status Register value after masking if byte 

write error */ 




/* 

has been detected 

V 

#define 

VLOWMASK 

0X08 

i* 

Mask to isolate the Vpp status bit of the 

*/ 




i* 

Status Register 

V 

#define 

VPPLOW 

0X08 

/* 

Status Register value after masking if Vpp 

low */ 




/* 

has been detected 

*/ 


int writechk(statdata) 
byte statdata ; 

( 

if ((statdata & VLOWMASK) 
return (1) ; 

if ((statdata & WERRMSK) 
return (2) ; 
return (0) ; 


/* Status Register data that has been already read from the */ 


/* 28F008SA in function end() */ 

== VPPLOW) 

/* Vpp low detect error, return code "1" y */ 

== WRITERR) 

/* Byte write error detect, return code "2" */ 

/* Byte/string write success, return code "0" */ 


} 


Routine writebgn( ) issues a byte write command sequence to a 28F008SA. It is passed the desired system address for 
the byte to be written, as well as the data to be written there. After calling idread( ), it writes the byte write command 
sequence at the specified address. It returns “0” if byte write initiation was successful, and “1” if the ID read fails 
(device not powered up or RP# not disabled). 

Routine writechk( ) takes the Status Register data read in end( ) and further analyzes it. It returns “0” if byte write 
was successful, ,“1” if Vpp low error was detected, and “2” if byte write error was reported. This is useful after a byte 
or string of bytes has been written, to check for successful completion. 


i 
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/* 

Function: 

Idread 


V 

/* 

Description: Reads the manufacturer and 

device IDs from the target 28F008SA 

*/ 

/* 

Inputs: 

None 


*/ 

/* 

Outputs : 

mfgrid: Returned manufacturer 

ID 

*/ 

/* 


deviceid: Returned device ID 


*/ 

/* 

Returns : 

0 = ID read correct 


*/ 

/* 


1 = Wrong or no ID 


*/ 

/* 

Device Read Mode on Return: Intelligent 

Identifier 

*/ 


/* ******************************** t ***************************************************************** / 


^define 

MFGRADDR 

0 

/* 

Address "0" for the target 28F008SA.. 

..alterable depending 

*/ 




/* 

on the system architecture 


*/ 

#define 

DEVICADD 

1 

/* 

Address "1" for the target 28F008SA., 

. .alterable depending 

*/ 




/* 

on the system architecture 


*/ 

#define 

IDRDCOMM 

0X90 

/* 

Inteligent Identifier command 


*/ 

#define 

INTELID 

0X89 

/* 

Manufacturer ID for Intel devices 


*/ 

#define 

DVCID 

0X0A2 

/* 

Device IDs for 28F008SA 


*/ 

#define 

DVCID2 

0X0 A 1 






int idread(mfgrid,deviceid) 


byte *mfgrid ; 
byte *deviceid ; 
[ 


/* The manufacturer ID read by this function, to be */ 
/* transferred back to the calling program */ 
/* The device ID read by this function, to be transferred */ 
/* back to the calling function */ 


} 


byte far *tempaddr; /* Pointer address variable used to read IDs */ 

tempaddr = (byte far * ) MFGRADDR ; 

*tempaddr = IDRDCOMM; /* Write Intelligent Identifier command to an address within */ 

/* the 28F008SA memory map (in this case 00 hex) */ 

*mfgrid = *tempaddr; /* Read mfgr ID, tempaddr still points at address "0" */ 

tempaddr = (byte far *)DEVICADD; /* Point to address "1" for the device specific ID */ 

♦deviceid = *tempaddr; /* Read device ID */ 

if ( (*mfgrid != INTELID) || ((*deviceid != DVCID) && (*deviceid != DVCID2) ) ) 

return (1) ; /* ID read error; device powered up? */ 

return (0) ; 


Routine idread( ) issues the Intelligent Identifier command to a 28F008SA. It passes back the manufacturer and 
device IDs it reads. In addition, it returns “0” if the IDs read matched those expected for the 28F008SA or 
28F008SA-L, and “1” if either the manufacturer or device IDs did not match. 



AP-360 



y*************************************************************** ********************* ******* **********^ 


/* 

Function: 

Statrd 

*/ 

/* 

Description: Returns contents of the target 28F008SA Status Register 

*/ 

/* 

Inputs : 

None 

V 

/* 

Outputs : 

statdata: Returned Status Register data 

*/ 

/* 

Returns : 

Nothing 

*/ 

/* 

Device Read Mode on Return: Status Register 

*/ 


y*****************************************************************************************************y 

#define STATREAD 0X70 /* Read Status Register command */ 

#define SYSADDR 0 /* This constant can be initialized to any address within */ 

/* the memory map of the target 28F008SA and is */ 

/* alterable depending on the system architecture */ 

int statrd(statdata) 


byte *statdata; 

( 

byte far *stataddr; 


/* Allows Status Register data to be passed back to the */ 

/* calling program for further analysis */ 

/* Pointer variable used to write commands to device */ 


stataddr = (byte far *) SYSADDR; 

♦stataddr = STATREAD ; /* Write Read Status Register command to 28F008SA */ 

♦statdata = *stataddr; 
return ; 


y*****************************************************************************************************/ 


/* ' Function: Statclr */ 
/* Description: Clears the 28F008SA Status Register */ 
/* Inputs: None */ 
/* Outputs: None */ 
/* Returns: Nothing */ 
/* Device Read Mode on Return: Array */ 


^t********************************************************^^***************************************** / 


#define STATCLER 0X50 

#define SYSADDR 0 


int statclr () 

{ 

byte far *stataddr; 


/* Clear Status Register command */ 
/* This constant can be initialized to any address within */ 
/* the memory map of the target 28F008SA and is */ 
/* alterable depending on the system architecture */ 


/* Pointer variable used to write commands to device */ 


stataddr = (byte far *) SYSADDR; 

♦stataddr = STATCLER; /* Write Clear Status Register command to 28F008SA */ 

return ; 


Routine statrd( ) reads a 28F008SA Status Register. It issues the Read Status Register command and passes back the 
data it obtains. 

Routine statclr( ) issues the Clear Status Register command to a 28F008SA. This routine is required after analyzing 
Status Register contents in routines like eraschk( ) and writechk( ). The 28F008SA Status Register retains state of 
bits 3-6 until they are cleared by the Clear Status Register command. 
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/* Function: Rdmode */ 
/* Description: Puts the target 28F008SA in Read Array Mode. This function might be used, for */ 
/* example, to prepare the system for return to code execution out of the Flash */ 
/* memory after byte write or block erase algorithms have been executed off-chip */ 
/* Inputs: None */ 
/* Outputs: None */ 
/* Returns: Nothing */ 
/* Device Read Mode on Return: Array */ 


/*****************************************************************************************************/ 


#define RDARRAY OXFF 

#define SYSADDR 0 


int rdmode ( ) 

{ 

byte far *tempaddr; 


/* Read Array command v */ 
/* This constant can be initialized to any address within */ 
/* the memory map .of the target 28F008SA and is */ 
/* alterable depending on the system architecture */ 


/* Pointer variable used to write commands to the device */ 


tempaddr = (byte far *) SYSADDR; 

*tempaddr = RDARRAY ; /* Write Read Array command to 28F008SA */ 

return; 


/*****************************************************************************************************/ 


/* Function: Rdbyte */ 
/* Description: Reads a byte of data from a specified address and returns it to the */ 
/* calling program */ 
/* Inputs: raddr: Target address to be read from */ 
/* Outputs: rdata: Data at the specified address */ 
/* Returns: Nothing */ 
/* Device Read Mode on Return: Array */ 


^******* ********************************************************************************************* *^ 


#define RDARRAY OXFF 


/* Read array command 


*/ 


int rdbyte (rdata, raddr) 
byte *rdata; 
byte far *raddr ; 


/* Returns data read from the device at specified address */ 
/* Raddr is the target address to be read from */ 


{ 

*raddr = RDARRAY; 

*rdata = *raddr; 

return ; 

} 


/* Write read array command to an address within the */ 
/* 28F008SA (in this case the target address) */ 
/* Read from the specified address and store */ 


Routine rdmode( ) simply puts a 28F008SA in Read Array mode. This is useful after byte write and block erase 
operations, to return the 28F008SA to its “normal” mode of operation. After block erase or byte write, the 
28F008SA will continue to output Status Register data until the Read Array command is issued to it, for example. 

Routine rdbyte( ) not only puts the 28F008SA in Read Array mode, it also reads a byte of data. It is passed the 
desired system byte address, and passes back the data at that address. 
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/* Function: Vppup */ 
/* Description: Ramps the Vpp supply to the target 28F008SA to enable byte write or block */ 
/* erase. This routine can be tailored to the individual system architecture. For */ 
/* purposes of this example, I assumed that a system Control Register existed at */ 
/* system address 20000 hex, with the following definitions: */ 
/* */ 
/* Bit 7: Vpph Control: 1 = Enabled */ 
/* 0 = Disabled */ 
/* Bit 6: PWD Control: 1 = PowerDown Enabled */ 
/* 0 = PowerDown Disabled */ 
/* Bits 5-0: Undefined */ 
/* V 
/* Inputs: None */ 
/* Outputs: None */ 
/* Returns: Nothing */ 
/* Device Read Mode on Return: As existed before entering the function. Part is now ready for */ 
/* program or erase */ 




#define VPPHIGH 0X80 

#define SYSCADDR 0X20000 


/* Bit 7=1, Vpp elevated to Vpph 
/* Assumed system Control Register Address 


int vppup () 

{ 

byte far *contaddr; 


/* Pointer variable used to write data to the system 
/* Control Register 


i 


contaddr 

♦contaddr 

return ; 


(byte far 
♦contaddr 


) SYSCADDR ; 
VPPHIGH ; 
/* 


/* Read current Control Register data, 
constant to ramp Vpp 


"OR" 


with 


*/ 

*/ 


*/ 

*/ 


V 

V 




/* Function: Vppdown */ 
/* Description: Ramps down the Vpp supply to the target 28F008SA to disable byte write/block */ 
/* erase. See above for a description of the assumed system Control Register. */ 
/* Inputs: None */ 
/* Outputs: None */ 
/* Returns: Nothing */ 
/* Device Read Mode on Return: As existed before entering the function. Part now has high Vpp */ 
/* disabled. If byte write or block erase was in progress when this function was */ 
/* called, it will complete unsuccessfully with Vpp low error in the */ 
/* Status Register. */ 




#define VPPDWN 0X7F 

#define SYSCADDR 0X20000 

int vppdown () 

{ 

byte far *contaddr; 


/* Bit 7 = 0, Vpp lowered to Vppl */ 

/* Assumed system Control Register Address */ 


/* Pointer variable used to write data to the system */ 

/* Control Register */ 


contaddr = (byte far *) SYSCADDR 
♦contaddr = *contaddr & VPPDWN; 

/* 


return ; 


/* Read current Control Register data, 
constant to lower Vpp 


"AND" with 


Functions vppup( ) and vppdown( ) give examples of how to control via software the hardware that enables or 
disables 12V Vpp to a 28F008SA. The actual hardware implementation chosen will drive any modification of these 
routines. 


I 
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********************************************************************************/ 
/* Function: Pwden */ 

/* Description: Toggles the 28F008SA RP# pin low to put the device in Dsep PowerDown mode. */ 

/* See above for a description of the assumed system Control Register. */ 

/* Inputs: None */ 

/* Outputs: None */ 

/* Returns: Nothing ' */ 

/* Device Read Mode on Return: The part is powered down. If byte write or block erase was in */ 

/* progress when this function was called, it will abort with resulting partially */ 

/* written or erased data. Recovery in the form of repeat of byte write or block */ 

/* erase will be required once the part transitions out of powerdown, to */ 

/* initialize data to a known state. */ 


#define 

^define 


PWD 

SYSCADDR 


0X40 

0X20000 


/* Bit 6 = 1, RP# enabled 

/* Assumed system Control Register Address 


*/ 

*/ 


int pwden ( ) 


byte far ♦contaddr; 


/* Pointer variable used to write data to the system 
/* Control Register 


contaddr = (byte far *) SYSCADDR; 

♦contaddr = *contaddr | PWD; /♦ Read current Control Register data, "OR" with constant */ 
/* to enable Deep PowerDown ♦/ 

return ; 




/* Function: Pwddis */ 
/* Description: Toggles the 28F008SA RP# pin high to transition the part out of Deep */ 
/* PowerDown. See above for a description of the assumed system Control Register. */ 
/* Inputs: None */ 
/* Outputs: None */ 
/* Returns: Nothing */ 
/* Device Read Mode on Return: Read Array mode. Low voltage is removed from the RP# pin. */ 
/* 28F008SA output pins will output valid data time tPHQV after the RP# pin */ 
/* transitions high (reference the datasheet AC Read Characteristics) assuming */ 
/* valid states on all other control and power supply pins. */ 


/*****************************************%#******%******##**%**%*#******%#*#%***#****#***%***#$****** j 


#define PWDOFF OXBF /* Bit 6 = 0, RP# disabled */ 

#define SYSCADDR 0X20000 /* Assumed system Control Register Address */ 

int pwddis (0 


byte far *contaddr; 


/* Pointer variable used to write data to the system */ 

/* Control Register */ 


contaddr = (byte far *) SYSCADDR 
♦contaddr = *contaddr & PWDOFF; 

return ; 


/* Read current Control Register data, "AND" with 
/* constant to disable Deep PowerDown 


V 

V 


Functions pwden( ) and pwddis( ) give examples of how to control via software the hardware that enables or disables 
a 28F008SA RP# input. The actual hardware implementation chosen will drive any modification of these routines. 
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ADDITIONAL INFORMATION 

Order Number 


28F008SA Datasheet 290429 

28F008SA-L Datasheet 290435 

AP-359 “28F008SA Hardware Interfacing” 292094 

AP-364 “28F008SA Automation and Algorithms” 292099 

ER-27 “The Intel 28F008SA Flash Memory” 29401 1 

ER-28 “ETOX-III Flash Memory Technology” 294012 


REVISION HISTORY 


Number 

Description 

002 

Revised Erase Suspend Algorithm in “C” Drivers. 

003 

PWD# pin renamed RP# to match JEDEC standards. 
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1.0 INTRODUCTION 

As personal computers migrate to platforms that are 
easily held with one hand, a revolutionary system archi- 
tecture is required to meet space and power require- 
ments. 

• An architecture that is not bounded by what has 
been done before with existing memory architecture, 
but free to meet the demanding requirements of mo- 
bile end users. 

• An architecture free to adapt and accommodate new 
technological advances in software and hardware, 
while protecting end-users initial base hardware in- 
vestment. 

Implementing this new system architecture requires 
traditional PC storage media such as ROM, DRAM, 
floppy disk and hard disk to move aside and make 
room for the latest in memory storage, Intel’s 
FlashFile™ memory (see architecture comparison in 
Figure 1.). 
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Figure 1. Architecture Comparison 


By combining FlashFile memory with new system ar- 
chitecture, completely new types of computers are now 
possible that fit in the palm of your hand and replace or 
integrate many of the code or storage functions of other 
memory types. Moreover, FlashFile memory enables 
hand-held computers to last many hours on just a cou- 
ple of AA batteries. FlashFile memory can be used for 
storing eXecute- In-Place (XIP) code in the system’s 
memory map, while additionally functioning like a disk 
for file and program storage. Since this type of design 
features FlashFile memory resident on the PC’s moth- 
erboard and is typically arranged in an array, it is de- 
scribed as a Resident Flash Array (or RFA). To further 
differentiate the two tasks of an RFA, the file store task 
is called a Resident Flash Disk (RFD), while the XIP 
task is called Resident Flash for XIP (or RFX) code 
storage. 
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The FlashFile memory is also used in card form as 
specified by the Personal Computer Memory Card In- 
ternational Association (PCMCIA). Flash memory 
cards provide file and program storage similar to an 
RFD, but add the feature of removability, increasing or 
adding to ease-of-use for the end user. The PCMCIA 
specification addresses both the memory and I/O 
card’s physical, electrical and mechanical characteris- 
tics, while leaving the host PC implementation relative- 
ly free for interpretation. Enhancing the PCMCIA 
specification, Intel developed the Exchangeable Card 
Architecture (ExCATM), which defines the host PC 
system card interface. ExCA further refines the 
PCMCIA specification and provides for card exchange- 
ability and inter-operability for both memory and I/O 
cards. 

Memory and I/O cards complement this new mobile 
architecture by integrating many of the common but 
functionally separate tasks used by today’s mobile pro- 
fessional in either electronic or paper form. Some of 
these tasks are schedule keepers, phones, address 
books, checkbooks, credit cards, fax, pagers, personal 
voice storage, task managers/schedulers, paperless 
form reports, scratch pads, and notepads. 


1.1 Why A New Memory 
Architecture? 

The ideal hand held memory system is: 

• Power Conscious (prolongs battery life and reduces 
heat) 

• Dense (stores lots of code and data in a small 
amount of space but weighs very little) 

• Updateable (allows in-situ code enhancements) 

• Fast (lets you read and write data quickly) 

• Inexpensive (low cost per megabyte) 

° Reliable (retains data when exposed to extreme tem- 
perature and mechanical shock) 

Since the PC’s introduction over 10 years ago, design- 
ers have grappled with how to construct memory sys- 
tems that met the above criteria. Portable computing 
makes the system design even tougher with more strin- 
gent requirements for low power, low volume and less 
weight. The best combination available for portable de- 
signs in their infancy was the same as used for the desk- 
top; solid-state memory and magnetic storage, i.e., 
SRAMs, DRAMS plus magnetic hard disks. DRAMs 
are dense and inexpensive, yet slower than the proces- 
sors they serve, and they are volatile. SRAMs, although 
fast enough to keep pace with processors, are relegated 
to caching schemes (compensating for DRAM’s slow- 
ness) due to low density and high cost while also being 
volatile. Magnetic hard disks, the nonvolatile append- 
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age to DRAM and SRAM, are dense, inexpensive on a 
cost-per-megabyte basis and nonvolatile, but are slow, 
power hungry, take up a sizable amount of volume and 
are susceptible to damage from physical shock. 

Mobile computing designs cannot depend on hard 
drives as portable notebook PCs do. Volume (4" x 8 x 
0.5" or less), power (two A As), and shock constraints 
preclude using even the 1.3" hard drives available 
today. Also, vitally important data such as credit card 
numbers or transactions, signatures, or checkbook 
information demands reliability of the highest order. 


1.2 The Flash Memory Alternative 

High Density 

Intel’s ETOX III Flash Memory Cell is 30% smaller 
than equivalent DRAM cells; therefore it will closely 
track DRAM density. Intel’s 28F008SA FlashFile 
Memory can store 8 megabits, or one megabyte, of 
data. Flash memory is more scaleable than DRAM be- 
cause the flash storage cell is not sensitive to soft error 
failure, therefore it can have a more simple cell struc- 
ture. Thus as density increases and process lithography 
continues to shrink, flash memory will pace and ulti- 
mately overtake the DRAM technology treadmill. 

Updatable 

ROMs and EPROMs may offer lower device costs, but 
if servicing the customer or end-user is important to an 
OEM, overall system cost must be factored in. Al- 
though ROMs and EPROMs are nonvolatile, changing 
the code within them is either very difficult (in the case 
of EPROMs) or entirely impossible (in the case of 
ROMs). Whole inventories of ROMs could be lost in 
the event of a catastrophic bug, while an innovative 
design with FlashFile memory can be updated in the 
factory or by end-users via networks, OEM Bulletin 
Board Systems, or other memory cards. Updating sys- 
tems could actually become a second source of income 
for OEMs and Independent Software Vendors, enhanc- 
ing the quality of the product while increasing end-user 
satisfaction. 

Power Conscious 

Intel’s FlashFile memory provides a deep powerdown 
mode, reducing power consumption to typically less 
than 0.2 juiA. Typical read current is only 20 mA while 
typical standby current (flash memory not being ac- 
cessed with CE# high) is only 30 juA. Additionally, 
FlashFile devices operating at 3.3 V^c are available for 
state-of-the-art low power consumption designs. 


Fast 

Don’t be misled by technology-to-technology speed 
comparisons. Architecting a system around FlashFile 
memory bypasses the code/data bottleneck created by 
connecting slow mechanical serial memory (such as 
disks) to a high-performance, parallel-bussed processor 
system. For example, data seek time for a 1.8" magnet- 
ic hard disk is 20 ms, plus an 8 ms average rotational 
delay, while flash memory access time is less than 
0.1 ms. At the chip level, read speeds for FlashFile 
memory are about 85 ns. Therefore, either direct execu- 
tion of code from flash memory or downloading to sys- 
tem RAM will dramatically enhance overall system 
performance. 

Nonvolatile 

Unlike DRAM or SRAM, FlashFile memory requires 
no battery backup. Further, Intel’s flash devices retain 
data typically for over 100 years, well beyond the useful 
lifetime of even the most advanced computer. 

Rugged and Reliable 

On average, today’s hard-disk drives can withstand up 
to 10 Gs of operating shock; Intel’s FlashFile memory 
can withstand as much as 1000 Gs. FlashFile compo- 
nents can operate beyond 70°C while magnetic drives 
are limited to 55°C. Intel’s FlashFile Memory can be 
cycled 100,000 times per block or segment. Even be- 
yond that cycle level, FlashFile does not fail or lock up 
like EEPROM devices, it just tends to take longer to 
erase blocks and program bytes than the times specified 
in the data sheet. By employing wear-leveling tech- 
niques, a 10 KB file written every 5 minutes, 24 hours a 
day to a 20 MB flash array takes 1.2 million hours or 
136 years before reaching the 10,000 cycle level. 

Many applications benefit from ROMed or XIP ver- 
sions of code, particularly hand held personal comput- 
ers, vertical application pen-based clipboards, and in- 
dustrial control and data accumulation equipment. 
These applications pose system design constraints re- 
quiring small form factor, low power consumption, and 
ruggedized construction due to active mobile users or 
harsh environments. Exposure to shock, vibration, or 
temperature extremes is common, precluding the use of 
rotating media. Flash memory provides an excellent 
code storage choice for such system designs featuring 
thin TSOP packaging, low (deep powerdown mode) or 
zero (capability to shut off power without losing data) 
power consumption, and 1000 G shock resistance and 
extended temperature products. Additionally flash 
memory provides remote or end-user update capability 
over ROMs, allowing OEM’s to service their products 
more efficiently and add new software features and ap- 
plications after the sale. 
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The features of Intel’s FlashFile memory truly enables 
new, compact and portable system architecture. This 
application note discusses implementing just such a de- 
sign using Intel’s boot block flash memory and Intel’s 
FlashFile (28F008SA) components for extended memo- 
ry eXecute-In-Place (XIP) code store, disk-like func- 
tionality for file and program storage, and BIOS code 
storage. 

Related Publications 

The following data books and reference manuals pro- 
vide valuable information for developing an RFA- 
based design: 

• Intel 28F008SA Data Sheet Order number 290429 

• Microsoft MS-DOS 5.00 ROM Technical Specifica- 
tion and OEM Adaptation Kit (OAK) 

• Microsoft Flash Filing System OAK 

• Microsoft Windows 3.1 ROM Technical Specifica- 
tion and OAK 

For additional information on flash memory, power 
supply solutions and EPLDs, see Appendix A. 

2.0 SOFTWARE DESIGN 

Software design is considered first for solid-state de- 
signs because the software functionality desired affects 
in large part how the hardware design is implemented. 
Many software products exist for solid-state systems: 

• DOS operating systems from Microsoft, Novell’s 
Palm DOS and Datalight’s ROM-DOS 

• A Graphical User Interface (GUI) operating system 
in Windows 3.1 ROM version 

• Application software from Microsoft (such as 
Word, Excel and MS-Works) and Lotus 1-2-3 Ver- 
sion 2.2. 

Because no standardization exists, implementation dif- 
fers from package to package or vendor to vendor. 
Therefore, this application note describes a system us- 
ing MS DOS ROM Version, MS Flash Filing System, 
Windows 3.1 ROM Version plus Pen extensions. All 
are readily available applications today and offer the 
highest inter-compatibility. However, the hardware and 
software design concepts presented here work just as 
well with Novell’s (formally DRI) Palm DOS and also 
GO Corporation’s Penpoint operating systems. 

2.1 XIP Operating System 

The first decision one must make for a solid-state soft- 
ware design is the operating system. Many alternatives 
exist for small hand held computer systems. Any solu- 
tion depends on what requirements are placed on desk- 
top compatibility, software compatibility, and ease of 


developing applications. In the pen-based market, DOS 
compatibility is not necessarily a requirement. This is 
evident by the multiple emerging entries of pen-based 
GUI’s. However, data transfer using a medium such as 
memory cards between desktop systems and hand held 
computers depends on an agreed file format. At least 
for now, DOS is still the major operating system of 
choice for the largest number of desktop systems. 
Therefore, DOS compatibility is still a necessity for 
many hand held computing systems and is incorporated 
in this design. 

To insure compatibility and easy system integration, 
MS DOS 5.0 ROM Version is the easiest choice. With 
this version, an XIP DOS implementation can be con- 
figured to as small as 64 KB using just the Runtime 
Kernel and a minimized command interpreter. If 
CONFIG.SYS and AUTOEXEC.BAT processing is re- 
quired, an additional 56 KB are required plus a ROM 
DISK large enough to hold AUTOEXEC.BAT, 
CONFIG.SYS, and any drivers and files that are refer- 
enced by either file. 

Microsoft provided the capability for additional XIP 
DOS applications to be added to an MS DOS XIP im- 
plementation by providing two new DOS functions, 
“Find First ROM Program” and “Find Next ROM 
Program.” This allows DOS-based XIP applications 
(such as OEM-specific utilities and applications or Em- 
bedded DOS applications) to easily be added to the MS 
DOS 5 ROM build. 

Many different memory configurations MS-DOS ROM 
are possible by distributing various software pieces (Mi- 
crosoft refers to them as granules) between different 
ROM locations below and above the 1 MB address 
space. Certain restrictions exist on individual granules 
requiring them to appear below 1 MB. The granules 
and address location requirements are specified in a ta- 
ble within the MS DOS ROM 5.0 OAK. Approximate- 
ly 43 KB of granules must be located below the first 
1 MB of address space. Other granules can be located 
either below or above 1 MB. The total size of all gran- 
ules in this design is approximately 128 KB. 

How MS DOS ROM Boots Up 

For system startup and booting DOS without a disk, 
MS DOS 5 ROM must intercept the INT 19h call made 
by the BIOS. This is accomplished by locating a gran- 
ule as an adapter ROM within adapter space (C0000h- 
EFFFFh). This granule contains the ROM scan identi- 
fier “5 5 A Ah” which must appear on a 2 KB boundary 
and identifies the module as a ROM to the BIOS dur- 
ing Power On Self-Test (POST), and also identifies the 
MS DOS 5 ROM INT 19h interceptor. When the BIOS 
Post code identifies the ROM, control is turned over to 
the ROM for its initialization. At this time, the MS 
DOS 5 ROM redirects the INT 19h vector to the MS 
DOS 5 ROM code and control returns back to the 
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BIOS POST code. When the BIOS is completely fin- 
ished testing and initializing, it issues INT 19h, and the 
MS DOS 5 ROM INT 19h handler gains control. The 
handler loads the MS DOS 5 ROM bootstrap loader 
into RAM and passes control to it. If the bootstrap 
loader includes the “Multi-Boot” option, a list of menu 
boot options are presented to the user if an OEM de- 
fined key is being pressed. The menu might look like 
Figure 2. 


Booting from a disk: 

1 . Boot from Floppy Disk. 

2. Boot from Hard Disk 

Booting from ROM: 

3. Floppy is default; process startup files. 

4. Hard drive is default; process startup files. 

5. Floppy is default; do not process startup files. 

6. Hard drive is default; do not process startup files. 

7. ROM drive is default; process startup files. 

Figure 2. Multi-Boot Menu 

The menu is activated by pressing the ALT key during 
the system memory scan, which is the default provided 
in the OAK. Other types of keys may be selected by the 
OEM for. their specific implementation. Selecting the 
options under Booting from a disk will bypass the 
ROM system completely. Selecting the options under 
Booting from ROM will invoke MS DOS 5 ROM and 
whatever the option specifies for processing the startup 
files, CONFIG.SYS and AUTOEXEC.BAT. 

If the Multi-Boot option is not available or is not acti- 
vated by the user, the MS DOS 5 ROM bootstrap load- 
er reads a byte from CMOS RAM to determine boot 
options. The byte is defined in Figure 3. 


Reserved 

Default 
Drive If 
ROM Boot 

Default 
Drive If 
ROM Boot 

ROM 

CONFIG.SYS 

Processing 

Default 

Boot 

7 to 4 

3 

2 

1 

0 


Default Boot Bit 0: 

0- Boot from ROM 

1- Normal disk boot operation (first is drive 00, then drive 80) 


ROM Configuration Processing Bit 1 : 

0- Process CONFIG.SYS and AUTOEXEC.BAT from default drive 
1 - Do NOT process CONFIG.SYS or AUTOEXEC.BAT files 

Default Drive if ROM Boot Bits 2 & 3: 

00- First Floppy Drive (Oh) 

01- First Hard Drive (80h) 

10- ROM Drive 

Figure 3. CMOS Byte Definitions 


inlel. 

If the system is to boot from ROM by either selecting 
the Multi-Boot option or reading the CMOS byte, the 
MS DOS 5 ROM bootstrap loader loads BIOS (note: 
not system BIOS, but the BIOS layer of MS DOS) and 
DOS initialization granules into RAM, records the ad- 
dresses of the resident BIOS and DOS code granules in 
the BIOS data area, records boot options (default drive, 
CONFIG.SYS & AUTOEXEC.BAT processing) in the 
BIOS data area, and passes control to BIOS initializa- 
tion. Just before the end of BIOS initialization, control 
is passed to SYSINIT which moves itself and DOS data 
and initialization code to high memory where both 
SYSINIT and DOS initialization takes place. Next 
SYSINIT then reads and processes the CONFIG.SYS 
file where installed drivers called in CONFIG.SYS and 
additional elements of the DPB chain will be placed in 
memory following the existing DOS structures as well 
as system buffers allocated. At this point, system boot- 
strap is finished and the command interpreter is started 
using the DOS call to execute ROM utilities. If a full 
command processor is chosen, the user will now see 
“C:>” prompt. 


2.2 DOS In Flash Implementation 

For this particular implementation, a full version of MS 
DOS with the full Command processor was chosen. 
This configuration uses 64 KB of adapter space (upper 
memory) at EOOOOh to EFFFFh for MS-DOS 5 ROM, 
and a combination 64 KB XIP binary file and a 256 KB 
ROM Disk binary file located in extended memory at 
F90000h. See Figure 4. ROM DOS and ROM Disk 
Memory Maps. This location is just after the end of the 
XIP GUI code block. The 64 KB XIP Binary contains 
the transient portion of COMMAND.COM and the 
DOS BIOS initialization and is created during the build 
of the MS DOS 5 ROM system, while the 256 KB 
ROM Drive contains the necessary files for bringing up 
the system and loading the MS Flash File System driv- 
ers which is addressed in the next section. 
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The EOOOOh segment was chosen because it happens to 
be free on the flash BIOS storage chip. Also, later on in 
this design we will be adding an RFD, which uses up 
the whole DOOOOh segment, and ExCA which requires 
16 KB of adapter space that we located at CCOOOh (see 
Figure 4 for a memory map). The ROM disk image 
location was chosen because there was room available 
in the extended XIP portion. The XIP portion is locat- 
ed at COOOOOh (12 MB) due to compatibility reasons 
with the 386SL processor and SL window constraints. 
In a non-SL design, the ROM disk portion of MS DOS 
ROM can be located anywhere in extended memory 
above 1 MB. 


taken for building a ROM version of DOS is taken 
from the MS-DOS 5.00 ROM OAK. Please refer to the 
MS-DOS 5.00 ROM OAK for specific details. 

There are a set of compile options specified in the MS 
DOS 5 ROM OAK that need to be defined by the 
OEM for their particular implementation and are con- 
tained in the OAK file named “VERSION.INC”. The 
compile options used for this example are listed as fol- 
lows: 


3 


A copy of the ROM image description file is included 
in Appendix B. The following summarizes the steps 
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ROMDOS equ TRUE 
POWER equ FALSE 
ROMDRIVE equ TRUE 
CMOS equ TRUE 
CONFIGPROC equ TRUE 

For this application this means that for: 

“ROMDOS” — a ROMDOS build (as opposed 
to DISK build simulation) is 
used 

“POWER” — the MS DOS APM and power 

management are NOT used 

“ROMDRIVE” — the compiler will use the internal 
ROMDRIVE drivers 

“CMOS” — forces MS DOS 5 ROM to look 

at the CMOS byte if the Multi- 
Boot option is not chosen 

“CONFIGPROC” — normal CONFIG.SYS and 

AUTOEXEC.BAT processing 
will be used 

Since we are planning to use a ROM DRIVE, MS DOS 
5 ROM needs to know where the ROM DRIVE exists. 
To set the ROM drive base address, the MS DOS 5 
ROM OAK file ROMRDHI.ASM must be modified. 

Edit the file and set the ROMDRIVERBASE LO 

equal to OOOOh and the ROMDRIVERBASE HI 

equal to OF Ah, or 64 KB above the base address of the 
extended memory XIP module. 

Now the MS DOS ROM binaries are ready for build- 
ing. Using the MS NMK utility, 3 separate binary files 
are compiled based on the requirements and addresses 
specified in the MS-DOS ROM Image Description file 
in Appendix B. ROM binary files 1 and 2 can be com- 
bined into one 64 KB binary image as follows: 

copy /b ROMl.BIN + ROM2.BIN ROMDOS5.BIN 

Once the XIP binaries are built, the rest of the ROM 
disk needs to be built. First, specify a RAM Drive with- 
in your build or development PC using the MS DOS 
RAMDRIVE.SYS device driver as follows: 

device = RAMDRIVE.SYS 256 /e 

After rebooting your PC, copy the files needed for your 
particular application. For an example of CON- 
FIG.SYS and AUTOEXEC.BAT files, see Appendix 
C. Change the drive label as per the MS DOS 5 OAK 
instructions and then use the MS DOS IMGET utility 
to capture the image of the RAM drive into a binary 
file. Next, concatenate the ROM3.BIN binary image 
created by the NMK with the ROM Disk image cap- 
tured from the RAM drive by using the MS DOS copy 
command as stated earlier: 

copy /b ROM3.BIN + RDISK.BIN ROMDSK.BIN 


intel 

This will create a 327 KB binary file with both XIP 
DOS code and the ROM Disk code for a single load 
into flash memory. 

Loading the ROMDOS5.BIN file into the system’s 
flash BIOS chip requires the use of a BIOS Independent 
Software Vendor’s (ISV) Flash Update Utility. Most 
major BIOS ISVs now offer such utilities. If your par- 
ticular system design uses a BIOS developed internally, 
refer to Intel’s AP-341 “Designing an Updatable BIOS 
Using FLASH Memory” (order number 292077) for 
more information on flash BIOS designs and related 
software. 

Loading the ROMDISK.BIN file requires developing a 
DOS-based utility to access flash memory in Protected 
Mode. Creating this utility is discussed under Section 
4.0, Software Utilities, subsection 4.2 Binary Loader. 


2.3 Resident Flash Disk 

Once a DOS-based, XIP operating system is in place, 
the next area to work on is file storage for flash memo- 
ry. File storage is possible with either FlashFile compo- 
nents or FlashFile cards, since they appear the same to 
file system software. However, the characteristics of 
flash memory are very unlike magnetic storage media 
characteristics. File Allocation Table (FAT)-based sys- 
tems rely on the fact that the operating system has un- 
restricted write capability and/or access to the media, 
particularly when updating the FAT for a file creation, 
update or deletion. Flash memory on the other hand, 
does not necessarily allow write access 100% of the 
time. When the flash memory media is completely 
erased (all FFh’s), writing data to the media can occur 
at any time and at any location. Additional data writes 
within the same block but at different locations can also 
occur. However, once a bit is written to a zero (Ob), 
erasure of the whole block is required before allowing 
that particular bit to change back to one (lb). This 
asymmetrical characteristic of flash memory prevents 
using a straight implementation of the FAT-based file 
architecture and requires an alternative file system im- 
plementation to take advantage of Flash Memory bene- 
fits. 


Blocking 

Intel’s FlashFile memory offers 64 KB separately eras- 
able blocks enhancing the use of flash memory as a file 
storage medium. The large block size (as opposed to 
512 byte blocks or sectors) provides the system with 
fewer total blocks to manage, resulting in less system 
overhead used for file management. Additionally, large 
blocks reduce file fragmentation since large files will 
most likely be contained in one block as opposed to 
several 512 byte sectors. This reduced fragmentation 
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also improves read performance since files are more 
likely to be intact with a Flash File System vs. a FAT 
file system. These features led to the creation of Micro- 
soft’s Flash Filing System. 

2.3.1 MICROSOFT’S FLASH FILING SYSTEM 

To enhance the use of flash memory as a disk, Micro- 
soft created the Flash Filing System. This file system 
operates as a list of linked lists while keeping track of 
individual block erasure and file deletions, using mini- 
mal system overhead. File allocation structures use in- 
directly linked lists, allowing the file system to update 
files and data within the files without first requiring the 
area where the file is located to be erased and then 
updated. During file deletion, a file’s header structure is 
written to mark the file as deleted, removing the file 
from the file allocation listing. Once the array of flash 
memory contains a majority of deleted files, the file 
system performs a (background) cleanup operation and 
copies good files out to free blocks and erases the blocks 
with all the deleted files. This achieves the goal of the 
user being able to use flash memory the same as they 
would use any other mass storage media without doing 
anything different. 

Three distinct parts comprise the file system organiza- 
tion and implementation: 

— A File System Redirector, whose job is to intercept 
the disk operations passed to MS DOS by an appli- 
cation and translate them into generic file opera- 
tions, passing them on to the file system driver. 

— A File System Driver, which accepts generic file 
operations passed to it from the File System Redi- 
rector, implements the architecture and logic of the 
Microsoft Flash Filing System, and passes low-level 
commands such as read, write, copy, and erase to 
the device driver. 

— A Device Driver, which accepts low-level com- 
mands from the File System Driver and interfaces 
to the host system hardware implementation. 

The File System Redirector performs a task analogous 
to a network redirector for LAN (Local Area Network) 
systems and appends itself to MS DOS. Any applica- 
tions then think they are running from a networked file. 
Some classes of applications and utilities will not oper- 
ate via this interface. Specifically, those applications 
that issue the INT 13h disk BIOS I/O call, INT 25h 
DosAbsRead, or INT 26h DosAbsWrite calls will not 
work properly with the Flash Filing system, just as they 
would not work over a network LAN. The File System 
Driver treats the flash media as a collection of large 
blocks, all identical in size. Individual block statistics 
are kept within a variable length structure at the top of 


the block with the remainder of the space available for 
directory, file control structures and file data storage. 
The File System Driver also determines when de-allo- 
cated space (deleted files or directories) within a block 
is reclaimed for re-use. 

The device driver portion is OEM-modifiable and needs 
to be written for the specific hardware example used. 
This device driver, specifically called iCARD29, is cov- 
ered in more detail in the next section, ExCA Architec- 
ture, under iCARDDRV File System Driver Summary. 
The only MS FlashFile System hardware requirement 
is a single window available per socket in a system’s 
adapter space that addresses all the flash memory to be 
used. Window size and base address are left to the sys- 
tem designer to decide, based on system design require- 
ments. Some hardware guidelines are: 

• Register-defined window size of either 4 KB, 8 KB, 
16 KB, or 32 KB 

• Register-defined base address in adapter space 
(COOOOh to DFFFFh) 

For more detailed information on Microsoft’s Flash 
Filing System, consult the Microsoft Flash Filing Sys- 
tem OAK. 


2.4 Resident Flash Disk (RFD) and 
ExCA Architecture 

Many systems which use an RFA will also want to 
incorporate PCMCIA memory and I/O cards. If an 
RFD uses the same software architecture used for 
PCMCIA cards, less software duplication is present in 
systems containing both cards and RFDs. This section 
discusses the Intel Exchangeable Card Architecture 
(ExCA) as it applies to an RFD and a Flash Filing 
system. 

Most of this section was excerpted from the ExCA 1.1 
Specification. The reader is encouraged to obtain that 
document for more details not revealed in this discus- 
sion. Other documents are the PCMCIA PC Card 
Standard Release 2.0, the PCMCIA Card Services In- 
terface Specification, and the PCMCIA Socket Services 
Interface Specification Release 2.0. 

ExCA specifies a standard host system hardware and 
software interface for 68 pin, PCMCIA/JEIDA memo- 
ry and I/O cards. ExCA Release 1.10 defines the mini- 
mum hardware and software interfaces that card and 
system designers can rely on for basic compatibility 
across PC Cards, systems, and related software. By de- 
fining these interfaces, ExCA makes the PCMCIA goal 
of PC Card inter-operability a reality. 
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2.4.1 ExCA SOFTWARE INTERFACE 

The primary purpose of the ExCA Software Interface is 
to explicitly define a minimal set of socket control and 
resource access functions upon which higher-level PC 
Card Client device drivers can rely. A PCMCIA imple- 
mentor may incorporate a range of functions beyond 
the basic Memory Card Interface specified in PCMCIA 
1.0. For PCMCIA 2.0, three primary functional exten- 
sions to the specification exist. They are: I/O devices, 
L-XIP-mapped memory (“L” stands for LIM or Lotus, 
Intel, Microsoft), and E-XIP-mapped memory (“E” 
stands for Extended or Protected mode memory). 
While basic memory requirements can be met with a 
single, small memory-mapped window or even via an 
I/O approach, both XIP modes require direct-mapping 
interface capability, with very specific boundaries in the 
L-XIP mode. Without an ExCA-like hardware and 
software support for direct-mapped memory, XlP-for- 
matted cards cannot function. The ExCA socket hard- 
ware and software specifications define basic, clear 
compatibility definitions for PC cards, software drivers, 
and host systems. 


ExCA allows PC Cards and sockets to be accessed by 
multiple PCMCIA-aware device drivers, configuration 
utilities and applications, with efficient and non-con- 
flicting use of system resources. An architectural dia- 
gram of ExCA functionality is shown in Figure 5. The 
primary components of the software interface are Sock- 
et Services and Card Services. Socket Services provides 
the lowest-level function set for socket hardware adapt- 
er control. Card Services allocates resources and coor- 
dinates PC Card-related activities for higher-level client 
device drivers. 
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Figure 5. By using the same software architecture used 
for PCMCIA cards, less software duplication is present in systems 
containing both cards and Resident Flash Disks. 




AP-362 


iny 


2.4.2 ExCA SOCKET SERVICES 

ExCA Socket Services is the lowest-level software inter- 
face that directly controls PC Card sockets. Socket 
Services defines a software interface to manipulate 
socket adapter hardware in a way that is independent of 
hardware implementation. Socket Services defines sev- 
eral abstract resources which can be manipulated. An 
Adapter is the hardware that supports connecting one 
or more 68-pin PCMCIA Sockets to a host system, or 
in the case of a resident flash disk, the hardware that 
supports a memory interface only. A Socket is the 
hardware that supports a single 68-pin PCMCIA con- 
nector. A Window is the hardware that supports map- 
ping a region of system memory or I/O address space 
to a region of card memory or I/O address space. A 
Card is a PCMCIA card that is inserted into a socket. 
Example functions are: configure a socket for an I/O or 
memory interface, control socket power voltages and 
make callbacks for PC Card insertion and status chang- 
es. 

Socket Services handlers use minimal RAM so that 
they will fit within a ROM-BIOS. The Socket Services 
interface can be used during POST, and must be ROM- 
resident to support booting from a PC Card. The inter- 
face is accessed via an 8086-compatible register-based 
protocol, and invoked through software interrupt lAh, 
with functions starting at 80h. This interrupt is shared 
with the real-time CMOS Clock Driver. The Socket 
Services software interrupt is called with the proper set- 
tings in the host processor’s registers. The functions 
returns status via the Carry flag and registers specific to 
the function invoked. 

Multiple hardware socket adapter interfaces can be 
supported by chaining multiple Socket Services han- 
dlers. This includes providing Socket Services support 
for motherboard-resident flash memory arrays by treat- 
ing the control circuitry and memory array as if it were 
a PC Card single socket/card combination. 

2.4.3 ExCA CARD SERVICES 

Card Services is the interface used to manipulate 
ExCA-related system resources. Card Services is sub- 
divided into five functional categories: Client Services, 
Resource Management, Client Utilities, Bulk Memory 
Services, and Advanced Client Services. Client Services 
provide for client initialization and the callback regis- 
tration of clients. Resource Management provides basic 
access to available system resources, combining knowl- 
edge of the current status of system resources with the 
underlying Socket Services adapter control functions. 
Client Utilities perform common tasks required by cli- 
ents so that functions, such as CIS (Card Information 


Structure) tuple access, do not need to be duplicated in 
each of the client device drivers. Bulk Memory Serv- 
ices provide read, write, copy, and erase memory func- 
tions for use by file systems or other generic memory 
clients that need to be isolated from memory hardware 
details. Advanced Client Services provide specific func- 
tions for clients with special needs. 

Card Services provide a packet-based request interface 
(i.e., uses a block of RAM for passing inputs and out- 
puts between the caller and the interface) which pro- 
vides a standard protocol for PC Card client device 
drivers to access cards and their required system re- 
sources. It provides separate registration and callbacks 
for card insertion and card status change event notifica- 
tions, allowing associated client device drivers to take 
the appropriate actions. For file system read, write, 
erase and copy operations, a special interface is provid- 
ed for Memory Technology Drivers (MTDs) which can 
handle the details of different memory technologies. 

NOTE: 

This interface is not used by iCARD29. Instead, the 
MTD functions are built into iCARD29. 

Resource Management provides a protocol for sharing 
resources within an environment, where previously the 
end-user was responsible for resolving resource con- 
flicts. Resource Management resolves resource conten- 
tions without end-user interaction. 

Advanced Client Services contains a RetumSSEntry 
function which is essentially a direct bypass to Socket 
Services. Card Services require Socket Services to ma- 
nipulate PC Cards and socket hardware. ExCA client 
drivers should typically interact directly with Card 
Services and not Socket Services. 

Card Services is typically implemented as a device driv- 
er. Card Services provides function number AFh in the 
Socket Services interrupt lAh interface for real-mode 
operation. During initialization, Card Services deter- 
mines the state of the host environment. This includes 
determining available system memory, available I/O 
ports, IRQ assignments, installed PC Cards and socket 
state. How this is performed is implementation specific. 

2.4.4 ICARD29 FILE SYSTEM DRIVER 

iCARDRV2.EXE is an Intel developed, low-level, flash 
memory driver for the MS Flash Filing System. It pro- 
vides read, write, copy, and erase functions within the 
ExCA architecture and interfaces to a PCMCIA stan- 
dard Card Services 2.0 (which provides proper resource 
arbitration). iCARD29 is completely independent of 
other peer level drivers and performs no direct calls to 
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Socket Services. Support for Intel’s Series 1 and Series 2 
flash memory cards and the RFA flash disk is provid- 
ed. iCARD29 is also used to read ROM cards and 
read/write SRAM cards. 


2.4.5 RFD SOCKET SERVICES 

RFD “SocketServices” functions similar to ExCA 
SocketServices in that the software interface to manipu- 
late socket adapter hardware is preserved, but an RFD 
SocketServices does not control any sockets or cards or 
respond to card removal and insertion events. RFD 
SocketServices allows a resident flash disk implementa- 
tion, through chipset logic or external logic, to appear 
to ExCA software and the system as another Adapter 
using a single Window mechanism, accessing perma- 
nently installed flash memory on a motherboard. All 
the rest of ExCA SocketServices functions are kept as 
they relate to this definition. An example of a non- 
working RFD SocketServices function is using it to 
configure an I/O card. If requested to complete such an 
operation, RFA SocketServices will respond with 
“Function not supported.” 

For more information on the specific hardware design 
used for a Resident Flash Disk, refer to Section 3.5. 


2.5 XIP Graphical Users interface 
(GUI) Overview 

Many GUIs exist today, but not all are configured to 
run in a minimized XIP mode for portables. Some de- 
signs may implement a simple DOS-based pen interface 
on top of an XIP DOS, like Communications Intelli- 
gence Corporation’s PenDOS*, and add a single appli- 
cation like a forms recorder. Other designs may not use 
XIP DOS at all and the system design revolves around 
the XIP GUI requirements alone. 

Microsoft leads the rest of the software industry in XIP 
GUI development, releasing the Windows 3.1 ROM 
Development Kit in September of 1992 and recently 
introducing the Modular Windows Development Kit in 
January of 1993. Both are XIP GUI implementations 
of the Windows GUI Operating System and are fully 
modularized for OEM configuration. Modularization 
assists OEMs by simplifying the streamlining of an 
O/S’s suitability to task by allowing the OEM to 
choose which functions are important and required for 
a particular design and which functions can be left out. 
Benefits to the OEM are: 

— Preserved API for using existing Windows applica- 
tions or new application development 

— Reduced development time and costs by using stan- 
dard Windows application development tools and a 
wide choice of Windows software developers 

— Ease of use for end-user 


Modular Windows 

Microsoft’s Modular Windows Operating System uses a 
subset of the Windows 3.1 Operating System and in- 
cludes extensions supporting TV-based multimedia 
players. Target market is home entertainment, but 
could easily be adapted for machine control on factory 
floors. The differences between Modular Windows and 
Windows 3.1 ROM are summarized below: 

— Reduced support for the Windows 3.1 application 
programming interface (API) 

— Reduced support for Windows 3.1 extension librar- 
ies 

— New user-interface controls (instead of pull-down 
menus) 

— New support for hand-control input devices 


Software requirements are: 

• MS DOS 5.0 in XIP form 

System requirements are: 

• 80286 or greater CPU 

• 1 MB RAM minimum 

• 1 MB of XIP memory (Flash, EPROM, or ROM) 



Since the focus of this application note is personal com- 
puters, Sub-Notebooks and below, Modular Windows 
implementations will not be discussed. However, many 
of the principles of putting Modular Windows code in 
flash memory (memory maps, software tools, flash up- 
datability, etc.) are the same here as the Windows 3.1 
ROM example which is discussed later in this section. 


Windows 3.1 ROM Version 

Computers running Windows in ROM or XIP mode 
are very similar to standard PC running disk-based 
Windows. The only major exception is the presence of a 
large amount of XIP code storage in extended memory 
from which Windows executes, and a smaller amount 
of XIP code storage in adapter space. For the rest of 
this discussion, the Windows XIP code stored in ex- 
tended memory is referred to as HIROM.BIN and the 
small amount of Windows XIP code stored in Real 
Mode space is referred to as LOROM.BIN. 

Two modes of operation are possible for XIP Windows; 
Standard and Enhanced, just as on disk-based PCs. 
However, each require different system resources for 
the XIP Windows version. 
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For Standard Mode, Windows executes fully in ROM, 
leaving almost all the system RAM available for user 
programs. This means that all Windows “core code” 
including DOSX.EXE, USER.EXE, GDI, the Win- 
dows kernel and all drivers run from XIP storage 
space. Also, all shell programs, applets, fonts and other 
Windows resources are stored in and run from XIP 
storage space without being loaded into RAM. 

Enhanced Mode Windows must execute partially from 
RAM. Enhanced Mode components such as 
WIN386.EXE and VxDs (virtual device drivers) must 
be loaded into RAM from some type of disk (a flash 
disk, ROM disk, or flash card) for execution, as their 
code writes back to their execution location from time 
to time and creates errors if loaded into XIP code stor- 
age such as flash memory. Components shared between 
modes, specifically USER.EXE, GDI, the kernel and 
drivers, continue to run from their stored locations in 
XIP address space. 

Additionally, for either Standard or Enhanced modes, 
all Windows 3.1 features are supported in XIP Win- 
dows. The only limiting factors are the amounts of 
available RAM, XIP storage and, in the case of En- 
hanced mode, disk space. 


Adding Applications 

The Windows 3.1 ROM Development Kit (RDK) can 
add any Windows executable program or application 
into the main XIP binary image file HIROM.BIN. The 
application must conform to the XIP application re- 
quirements specified in the Windows 3.1 Technical 
Specification. Microsoft is capable of supplying XIP 
versions of Word for Windows, Excel, Microsoft Mail 
and Microsoft Works but must be developed between 
an OEM and Microsoft on a platform-by-platform ba- 
sis. 

Once the O/S and application functionality is deter- 
mined and the build script CONTENTS.ROM edited, 
the RDK produces two binary images:' the large 
HIROM.BIN Extended mode image containing O/S 
and application code, and the small Real mode 
LOROM.BIN image containing the listing of all the 
XIP code contained in HIROM.BIN. After both XIP 
Windows binary files are loaded into flash memory and 
the system is up and running, clicking on an application 
causes the XIP Windows kernel to search its internal 
listing (LOROM.BIN) for an XIP image module first. 
If the image is not found within the XIP listing, the 
Windows kernel then searches the file paths present at 
runtime to try and load the application from its current 
file directories. If the program is not found within 
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file directories, XIP Windows returns “Application 
missing, file not found.” Additions of other extensions 
to the XIP image such as multimedia support and Pen 
Windows are added in a similar manner. 


2.6 XIP GUI Implementation 

As mentioned earlier, XIP Windows requires two mod- 
ules; a small amount of XIP storage in device adapter 
space called LOROM.BIN, and a larger amount of XIP 
storage called HIROM.BIN in extended memory 
space. The LOROM.BIN file contains information 
about the modules loaded in the HIROM.BIN XIP (see 
Figure 6) image and must be accessed in real mode by 
three modules, WIN.COM, RSWAP.EXE, and 
WIN386.EXE. Additionally, portions of the DOS ex- 
tender (DOSX.EXE) must be able to run in real mode 
and are therefore located in the LOROM.BIN XIP 
image. The information the three modules look for is 
contained in the ROM Table Of Contents (ROMTOC), 
also located in LOROM.BIN and contains general in- 
formation about both XIP images (small and large), 
entry point addresses for initialization, and a list of the 
executables stored in the large XIP image. 


FFFFFFh 




FF8000h 



ROM Disk 
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Figure 6. 16 MByte XIP GUI Memory Map 


The extended memory XIP image contains the bulk of 
the system’s code and data segments, EXE headers, and 
a prototype Local Descriptor Table (LDT) which is a 
data structure defining the addresses, sizes and types of 
segments used by 80286, Intel386™, or Intel486™ 
processors. For more information on a Windows 3.1 
XIP-based system, please refer to the Microsoft Win- 
dows 3.1 ROM Development Kit. 
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Software Requirements 

• MS DOS 5.0 or equivalent in XIP mode 

• Software Utility to load both small and large XIP 
images into flash memory 

• For Enhanced Mode disk space requirements, MS 
Flash Filing System 2.0 combined with ExCA soft- 
ware for a Resident flash disk. 


System Requirements 

• 80286 CPU or greater 

• RAM: Minimum of 1 MB for Standard Mode or 

2 MB for Enhanced mode 

• XIP Store: Minimum of 2 MB for Standard Mode, 

3 + MB for Enhanced mode 

• Flash Disk Store: Zero for Standard Mode, 2 MB 
for Enhanced mode 

For this particular design example, Enhanced mode 
functionality is used to show a full implementation of 
Windows. An RFD is used to load WIN386.EXE, 
VxDs and all the *.INI and *.GRP files. A complete 
listing of the CONTENTS.ROM file used by the Win- 
dows ROM Image Builder utility to create an XIP 
Windows system is shown in Appendix D. The Win- 
dows RDK Enhanced Full sample CONTENTS.ROM 
file is used as a template and edited to locate the 
LOROM.BIN file at C8000h and is a total of 16 KB. 
The HIROM.BIN file is located at COOOOOh and is a 
total of 3.6 MB. 


2.7 Pen Extensions 

Microsoft’s Windows for Pen Computing is an exten- 
sion to Microsoft Windows version 3.1 and has its own 
SDK. Pen Windows Extensions do not require any 
changes to existing Windows 3.1 applications and a se- 


lection of pen recognizer drivers come bundled in the 
SDK provide for fast development of a pen-based sys- 
tem. In particular, the Wacom PL-100V pen tablet and 
VGA graphics card can be added to an ISA bus slot for 
early debug and pen software development. 

All the Pen Windows extensions are directly executable 
within the HIROM XIP image and can be added to the 
CONTENTS.ROM listing. 


3.0 HARDWARE 


This section describes the general hardware require- 
ments for an RFA design, then discusses a specific im- 
plementation using the SL architecture as an example 
(primarily due to the built-in ISA Sliding Window)., 
Many of the concepts presented here can easily be in- 
corporated into new chipsets designs to take advantage 
of the benefits flash memory brings to solid-state de- 
signs. 


3.1 Resident Flash Disk 
Implementation 



As stated in Section 2.3, the MS Flash Filing System 
requires a hardware mapping window in Real Mode 
address space. This window is similar in function to an 
EMS mapping window, but unlike EMS this window 
interfaces directly to flash memory. The SL Superset 
provides an example of just such a mapping, using in 
the ISA Sliding Window. The window is configured via 
the SL’s ISA WINDOW register and has a fixed base 
address of DOOOOh and a fixed size of 64 KB. By setting 
the correct address in the register, the full 16 MB ISA 
address space is viewable in 64 KB increments. Addi- 
tionally, the register defines access to the 16 MB flash 
disk address space made available by a separate flash 
disk Chipselect (see Figure 7). 
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Although the built-in functionality of the ISA Sliding 
Window is quite nice, the large 64 KB footprint of the 
window in Real Mode address space is difficult to work 
around. For a non-SL implementation, smaller, more 
flexible sliding windows are possible through external 
logic (FPGAs or EPLDs) or hopefully from future PC 
chipsets desiring to provide the capability the flash 
memory offers. The hardware requirements are simply: 

1. A Window base address that appears in Real Mode 
memory somewhere in adapter space (COOOOh to 
DFFFFh) that is also register definable. 

2. A Window size that is also register definable for 
either 4 KB, 8 KB, 16 KB, or 32 KB. 

These two options provide a level of flexibility for an 
OEM’s system implementation and reduces the memo- 
ry footprint in adapter space. 

The flash disk address mapping in Figure 7 shows the 
flash disk and ISA bus address maps together. The SL’s 
ISA Sliding window allows 64 KB blocks of the flash 
disk address space to be mapped into the Real mode 
area from DOOOOh to DFFFFFh for access by the MS 
FlashFile System. For some ideas on how to implement 
an external logic flash disk implementation, see AP-343 
“Solutions for High Density Applications Using Intel 
Flash Memory,” order number 292079. The application 
note describes a complete design for an ISA Bus add-in 
card. A local bus design can be derived from the ISA 
Bus implementation or the SL implementation logic 
discussed in Section 3.6, Schematic Overview. 


3.2 XIP DOS Implementation 

As stated in Section 2.2 DOS in Flash Implementation, 
MS DOS 5.0 ROM Version is built assuming the 
EOOOOh segment location and also consists of a ROM 
Disk located in extended memory at F90000h. The only 
reason for the ROM disk location is to avoid 386SL co- 


processor errata at the 8 MB location and window base 
address constraints, which must be divisible by the win- 
dow size in use. In non-SL designs, the ROM Disk can 
be located anywhere above 1 MB in a NON-cacheable 
region. The design example uses Intel’s 2 Mb, 
28F002BX-T boot block flash memory. This device is 
organized with varying sized blocks; a 16 KB hardware 
lockable boot block, two 8 KB separately erasable Pa- 
rameter Blocks, and separately erasable 96 KB and 
128 KB main code blocks. To unlock and allow pro- 
gramming and erasure of the boot block, an additional 
12V must be applied to the PWD# pin, thereby guar- 
anteeing hardware protection. The benefit of using boot 
block architecture is that in the unlikely event that 
something happens during a BIOS code update, the sys- 
tem can recover using the kernel code in the boot block 
to initialize enough of the system to access a floppy 
drive or memory card socket to load in BIOS update 
code and a BIOS binary file. 


Using a 2 Mb (256 KB) device enables the design to use 
a single memory chip for 4 separate code modules: the 
standard AT compatibility BIOS (64 KB), MS DOS 5.0 
ROM (64 KB), Video BIOS (32 KB), and Power Man- 
agement Code (32 KB). The sum of all 4 modules is 
greater than 128 KB and if mapped straight down from 
the top of the 1 MB address space, could cover both the 
BIOS and all of the adapter space. To avoid this con- 
flict, some chipset designs physically position the BIOS 
function at the top of the 16 MB memory map, then use 
64 KB mapping windows to position the correct block 
between EOOOOh and FFFFFh. 



The SL Superset provides a second BIOS ROM chipse- 
lect enabling only one 128 KB portion to appear at 
EOOOOh to FFFFFh at a time. Additionally, the SL Su- 
perset provides an ISA Sliding Window which allowed 
windowed access into protected mode space. Figure 8 
shows how each module is mapped into the boot block 
flash memory. 
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Figure d. Boot Block Mapping 


The boot block flash memory chip is physically located 
at the top of the 16 MB address space, but the SL Su- 
perset logically locates the top 128 KB of the chip into 
Real Mode address space just below 1 MB. Additional- 
ly, an exclusive OR gate is tied to the highest order 
address line, flipping the 2 Mb boot block chip at its 
mid point. This places the locked boot block just under 
the first 128 KB of the part, while the other 128 KB 
containing the AT System BIOS and MS DOS 5.0 
ROM appears at the top of the device. This is done to 
position the boot block (which contains BIOS recovery 
code) out of the IBM BIOS compatibility table area, 
allowing access to the AT System BIOS and MS DOS 
ROM code. 


When the system boots, the processor jumps to the AT 
BIOS location by default. As the system is booting, the 
BIOS enables the ISA Sliding Window to access the 
other 128 KB of boot block flash memory, and pro- 
ceeds to copy the Power Management code to its spe- 
cial location within the System Management Mode 
space. Next, the BIOS copies the Video BIOS code into 
shadow memory at COOOOh to C7FFFh and turns off 
the ISA Sliding Window. The BIOS then scans the MS 
DOS 5.0 ROM adapter code, and allows MS DOS 
ROM to hook INT 19h, and finishes the rest of its 
POST before turning control over to DOS by issuing 
INT 19h. 
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3.3 XIP GUI Implementation 

As stated earlier, Windows 3.1 ROM Version takes up 
about 3.6 MB of extended address space 
(HIROM.BIN) and 16 KB of Real mode adapter ad- 
dress space (LOROM.BIN). HIROM.BIN can be lo- 
cated anywhere above 1 MB and should probably be 
high enough above the DRAM address space to allow 
additional DRAM to be added to the system by the 
end-user. Ideally, the system design should be able to 
cache the area where the Windows HIROM XIP code 
is located. This allows the system to take advantage of 
XIP code locality since XIP code should produce a 
very high cache hit ratio. Since the 28F008SA Flash- 
File memory is a x8 device, xl6 access is accomplished 
by pairing two devices for a LOW Byte HIGH Byte 
configuration. This creates an erasable block size of 
128 KB. 

The LOROM.BIN file has a couple of implementation 
options. One method is to use a spare block out of the 
extended memory XIP region. This method requires 
external logic to decode the specific adapter space ad- 
dress dedicated to the LOROM function, and generate 
a chipselect to the last block of flash memory. Since the 
LOROM.BIN file size is only 16 KB and the smallest 
erasable block size is 128 KB, 112 KB of the block is 
left unused. Given that the HIROM and LOROM files 
are updated together, the HIROM file could feasibly 
use the extra space if necessary. 

Another option for the LOROM file is to use some free 
storage space within the 2 Mb boot block flash memory 
chip. The file could then be copied to the correct adapt- 
er space shadow RAM location at boot time. Copying 
the LOROM.BIN file can occur at the same time that 
Video BIOS and Power Management code are copied. 
This method provides update capability while reducing 
external logic requirements. The only hinge factor is 
getting the system’s BIOS code to copy the file before 
or during POST. 

Either option is possible. The choice is dependent on 
determining which is easier, modifying hardware or 
modifying a BIOS bootup process. 

3.4 Chipset Considerations 

Chipset designers interested in implementing an RFA- 
ready chipset should consider the following recommen- 
dations for RFA hardware requirements: 

Flash BIOS > 128 KByte 

• Minimally, include a Flip Bit on the highest order 
address line. This allows 128 KB pages to move in 
and out of the same 128 KB address space. 


• Position the BIOS at the top of 16 MB or 32 MB 
address space, keeping the flip bit and include a win- 
dow mapping mechanism similar to an EMS-like 
window. This window provides temporary Real 
mode access of the 2nd 128 KB of BIOS code stor- 
age. 

RFD Functionality 

• Include a built-in Flash disk Chipselect to minimize 
external logic 

• Add an EMS-like mapping window 

— Register defined, base address between COOOOh 
and DFFFFh 

— Register defined window size adjustable 4 KB, 
8 KB, 16 KB, and 32 KB 

— Register address capability to 64 MB RFD 

XIP Code Functionality 

° Include a built-in XIP Flash Chipselect 
® Add 2 register defined, cacheable windows 

— Adjustable base address anywhere above 1 MB 

— Size adjustable 2 MB, 4 MB, or 8 MB 

3.5 SL Based Design 

Lacking an off-the-shelf, RFA-ready chipset and sys- 
tem, an SL Superset design is used as an example. To 
achieve as close to local bus access times as possible, the 
SL’s Peripheral Interface (PI) Bus is used. The PI Bus 
is asynchronous and runs a CPU cycles plus one addi- 
tional wait state. 

To position the FlashFile memory on the PI Bus into 
the system’s address map, a spare Video Window regis- 
ter (GABCR) is used (see Figure 9). For the design 
example, a base address of COOOOOh is used combined 
with a window size of 4 MB. The COOOOOh base address 
avoids some conflicts with 386SL systems at the 8 MB 
address location. Since the GABCRs window base ad- 
dress must be divisible by its size, the 12 MB address 
made the most sense (avoiding the 8 MB location) 
while being high enough to allow at least 8 MB of sys- 
tem RAM. For any other XIP system design, any base 
address should be usable. Although the GABCR regis- 
ter positions the FlashFile memory correctly and routes 
all system address map accesses to COOOOOh to 
FFFFFFh to the PI Bus, by the fact that the GABCR 
is a graphics window, it is defined as a non-cacheable 
window. 

• Include a cache enable/disable bit within the regis- 
ter 

These requirements work for non-Intel architecture just 
as well as for the Intel architecture. 



Even though the SL Superset provides a flash disk Win- 
dow and Chipselect, two EPLDs are needed to decode 
the flash disk Chipselect from Video Chipselects, while 
the XIP flash memory required externally generated 
chipselects. Additional logic is also needed to decode 
the LOROM.BIN stub at CCOOOh and route the access 
to the highest block of XIP Memory. 

The RFA example design uses both an Intel 85C090-15 
and an Intel 5AC3 12-25 EPLD to provide board con- 
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The Intel 85C090 also controls the mix between how 
much flash memory is used for Resident Flash Disk 
Memory (FDM) and how much flash Disk Memory 
(RFD) and how much flash memory is used for XIP 
Memory. The EPLD description files in Appendix E 
show how to change the equations to obtain the desired 
mix needed for any particular OEM’s implementation. 
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5AC312 Mode Registers 

The 5AC312 provides two registers to control Vpp, 
power down, and the Ready Interrupt. The registers 
are written and read with PI Bus Memory cycles to the 
upper 64 KB of the Flash Disk Address Plane. This 
space is otherwise unused; no flash memory resides 
there. Address assignments in the flash disk plane are 
as follows: 

FFOOOOh Power Control Register (Wt/Rd) 
FF0002h Interrupt Control Register (Wt/Rd) 
FF0004h (Reserved) 

FF0006h Clear Flash Disk Memory READY 
Interrupt (Wt only) 

The Clear Flash disk Memory READY Interrupt is not 
used with FlashFile System 1.0. It is intended to be 
used with the next file system from Microsoft. The 
above assignments alias every 8 Bytes (4 words) up to 
FFFFFEh. 

The Power Control Register bits are defined as follows: 

Bit 

0 Enable all Flash Memory Vpp 
(if jumper E9-E1 0 installed) 

1 (Reserved; reads as a zero) 

2 (Reserved; reads as a zero) 

3 Power Down all flash memory 

4-1 5 Undefined 

The Interrupt Control Register bits are defined as fol- 
lows: 

Bit 

0 Enable Flash Memory READY Interrupt 

1 Flash Memory READY Interrupt (Read only) 

2 Flash Memory Any Zone Busy (Read only) 

3 (Reserved; reads as zero) 

4-15 Undefined 

Reserved bits should be written as zeroes; they will read 
as zeroes. Undefined bits should be written as zeroes; 
they may read as either zeroes or ones. 

Cold boot (RSTDRV) clears all defined bits in the reg- 
ister. Warm boot (CTRL-ALT-DEL) does not affect 
the contents of the register. 

The Flash Memory READY interrupt is cleared by 
writing to address FF0006h in the flash disk Address 
plane. The data written is not interpreted; it should be 
all zeros. 


A major power consumer on the RFA example design 
board is the 85C090 EPLD. This is due to using Turbo 
Mode to quickly decode the PI Bus signals and mini- 
mize RFA access time. Unfortunately, this causes a 
constant current draw of 160 mA. The EPLD’s Normal 
mode cannot be used since there is no advance warning 
of an XIP flash memory access. 

PRDY# Enable Jumper 

The PI Bus signal PRDY# has a very weak pull-up 
resistor on the motherboard. Consequently, it has to be 
driven high (inactive) for a short time at the end of each 
cycle. Timing for this logic comes from the early taps 
on the delay line as follows: 

100 Nanosecond delay line 
(SXTTLDM- 1 2 1)E4-E5 

200 Nanosecond delay line 
(SXTTLDM- 125)E4-E3 

Power Control 

The purpose of the SMOUT4 signal was to allow the 
RFA Daughter board to perform a local standby, pow- 
ering down various devices on the RFA Daughter 
board. However, since the EPLD must remain powered 
on until Global suspend, and consumes a high amount 
of current compared to the FlashFile power consump- 
tion, local standby was not implemented. 

4.0 SOFTWARE UTILITIES 

A few software utilities need to be created to load the 
binaries created for XIP code implementations. 

4.1 RFA Diagnostic 

It is highly recommended that system designers develop 
simple diagnostic tools to test the hardware at a very 
low level (i.e., write byte, write word, read word, erase 
block). Such a tool proves invaluable when debugging 
new hardware and software designs and resolving hard- 
ware and software conflicts. 
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4.2 RFA Binary Loader 

The RFA Binary files HIROM.BIN, LOROM.BIN, 
and ROM Disk must all be loaded into Protected Mode 
from Real Mode. This can be accomplished a number 
of ways: 

1. Use a DOS Extender. This provides a quick method 
to create a utility using the tools a DOS extender 
provides. However, licensing may prove to be diffi- 
cult or expensive. 

2. Using BIOS-based extended memory calls. These 
actually worked quite nicely and reliably, but 
proved to be slow and doubled the time to erase and 
program HIROM.BIN. 

3. Putting the processor in flat mode. This method al- 
lows for fast, direct access to the extended memory, 
but cannot be done under windows. 

For lab testing, our binary loader used a simple file 
name plus command line parameters. A system for end- 
users would need a more elaborate user interface to 
guide them through the software update. Some basic 
software requirements outside of the basic file read/ 
write capabilities and command line parsing for the 
flash memory Binary Loader are: 

• Incorporate basic flash memory program and era- 
sure commands. These software drivers are available 
for both ASM86 and “C” in Application Note-360 
“28F008SA” Software Drivers, order number 
292095-002. This application note addresses things 
like read device identifier, Vpp ramp time, x8 and 
xl6 parallel programming and block erasure by pro- 
viding proven, tested routines for each. 


• Choose a method of Protected Mode access that 
makes the most sense for you. 

• Allow for specific base addresses to be entered by 
the user, while within the program automatically de- 
termining what block and the number of blocks to 
be erased from the base address and binary file size. 

5.0 SUMMARY 

This application note discussed a new system architec- 
ture based on solid-state software and hardware design 
concepts. This new architecture is based on using flash 
memory for the following; BIOS + DOS code storage, 
a nonvolatile RAM disk or RFD, and as XIP GUI 
code storage or RFX. Specific flash memory compo- 
nent and PCMCIA card information is found in their 
respective datasheets. Contact your local Intel or distri- 
bution sales office for more information or to obtain 
assistance in evaluating Boot Block or FlashFile memo- 
ry components, as well as Intel’s product line of 
PCMCIA Flash Memory Cards. 



AP-362 



APPENDIX A 

ADDITIONAL PUBLICATIONS 


> Intel "28F008SA Hardware Interfacing" Application Note 
Order number 292094 

> Intel "28F008SA Software Drivers" Application Note 
Order number 292095 

> Intel "Power Supply Solutions for Flash Memory" Application Note 
Order number 292092 

> Intel 85C090 24-Macrocell CHMOS EPLD 
Order number 290247 

> Intel 5AC3 1 2 1 2-Macrocell CHMOS EPLD 
Order number 290247 

292097-9 
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APPENDIX B 

MS DOS ROM IMAGE DESCRIPTION 


# RFA ROM DOS Description File # 

# ROM image description file for 64K of ROM space at U 

# E0000-EFFFF and one 256K ROMDISK module at F90000 U 

# Actual file sizes created: Three 32K modules 


ROMl=Int 19 hook and Resident DOS Code 

ROM 1 SIZE=8000 

ROM 1 MAX=7FFF 

R0M1TYPE=SEG 

ROM 1 ADDR=E000 

ROM 1 CHKSUM= YES 

ROM 1NUMBLOCKS=40 

ROM 1FILES=.. \romhead\romboot.bin ..\dos\resdos. 1 6 


ROM2=COMMAND ROM Hdr Res. BIOS Code Bootstrap loader Resident Command Code 

ROM2SIZE=8000 

ROM2MAX=7FFF 

ROM2TYPE=SEG 

ROM2ADDR=E800 

ROM2CHKSUM=YES 

292097-10 

ROM2NUMBLOCKS=40 

ROM2FILES=.. \cmd\command\romhead.bin ..\bios\resbio.l6 \ 

..\romload\romload.sys ..\cmd\command\rescom.l6 ..\dos\romdos.sys 

ROM3=Command interpreter 
ROM3SIZE= 10000 
ROM3MAX=FFFF 
ROM3TYPE=BASE 
ROM3ADDR=F90000 

ROM3FILES=..\cmd\command\command. 1 6 . .\bios\rombio.sys 

292097-11 
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APPENDIX C 

ROMDISK CONFIG.SYS AND AUTOEXEC.BAT 


AUTOEXEC.BAT 

@echo off 
prompt $P$G 

set path=c:\;d:\rdk 1 0\build\disk;d:\utils;d:\diags; 
c:\doskey 

doskey d=dir$l $2 

d:\rdklO\build\disk\smartdrv.exe 1024 1024 

set TEMP=d:\ 

ver/r 

echo "MS DOS ROM, Card & Flash Disk SS 2.0, MS FlashFile System 2," 
echo "and Windows 3.1 ROM " 

CONFIG.SYS 

DEVICE=c:\HIMEM.SYS 

break=on 

buffers=40 

files=40 

lastdrive=H 

DOS=HIGH,UMB 

REM ************************************************ 

REM FlashFile System Drivers 

Device=C:\rfaslss.sys 

Device=C:\ss365sl.exe 

Device=C:\cs.exe 

Device=C:\rtinit.exe 

Device=C:\icard29.exe 

Device=C :\m s-flash . sy s 

REM ************************************************** 


3 


292097-12 


3-611 



AP-362 



APPENDIX D 

WINDOWS 3.1 CONTENTS.ROM 


NOTE: Semi-colons denote a commented-out line which is NOT added to the HIROM Binary file. 

.**************«********************«*****«*« 

; Windows 3.1 ROM Development Kit (RDK) 1 .0 
; Sample ROM Description File 
; Copyright Microsoft Corporation, 1992 

; Enhanced Mode, Full 
; 10/20/92 Removed TT Fonts 

ROMS 

; Specifies length of ROMs and the linear addresses 
; at which they are to appear. 

; Name Address Length (max) 


LoROM 0c8000 004000 ; 16k 
HiROM C00000 3FFC00 ; 4 Mb 


TABLES 

; Specifies information for tables to reside in ROM. 


ROMTOC 100 LoROM 
NUMFILENT 14 
LDT 1024 HiROM 256 
; WINFLAGS 13 
WINFLAGS 15 
; SYSDIR system 
ROMVERSION 1000 


; ROMTOC entries 
; FILES entries 

; Local Descriptor Table 
; 286 version; Value is in HEX 
; 386 version; Value is in HEX 

; Windows directory on disk (optional) 

; 1 = masked ROM, 000 = OEM version 


MODULES 

; Specifies modules to be loaded into ROM. 

; Format is as follows: 

; Module SEG File ROM Flags Comments 


; Kernel 

DOSX.EXE %ROMFILES%dosx.exe LoROM NOEXEHDR ; Std mode MS DOS extender 
SEG 2 HiROM ; DXDGROUP - Copy from ext with INT 1 5h 
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SEG 3 HiROM ; DXPMCODE 

; KERNEL.EXE %ROMFILES%kml286.exe HiROM 
KERNEL.EXE %ROMFILES%kml3 86.exe HiROM 


; 286 kernel 

; 386 kernel (ROM version) 


; Drivers (Replaceable) 


SYSTEM.DRV %ROMFILES%system.drv HiROM 
KEYBOARD.DRV %ROMFILES%keyboard.drv HiROM 
SEG 10 COMP ; Do not remove! 

; Display 

; VGAROM2 .DRV %ROMFILES%vgarom2.drv HiROM 
VGAROM3.DRV %ROMFILES%vgarom3.drv HiROM 
; SVGAR2.DRV %ROMFILES%svgar2.drv HiROM 
; SVGAR3.DRV %ROMFILES%svgar3.drv HiROM 


; System 

; Keyboard 


•286 VGA 
; 386 VGA 
; 286 SuperVGA 
; 386 SuperVGA 


MOUSE.DRV %ROMFILES%mouse.drv HiROM ; Mouse 

SEG 2 RAM COMP NORELOC ; Do not remove! 

; NOMOUSE.DRV %ROMFILES%nomouse.drv HiROM ; No mouse 


COMM. DRV %ROMFILES%comm.drv 
SEG 2 RAM COMP NORELOC 
SEG 3 COMP 


HiROM ; COM, LPT 

; Do not remove! 

; Do not remove! 


MMSOUND.DRV %ROMFILES%mmsound.drv HiROM ; Sound 


; Core 

GDI.EXE %ROMFILES%gdi.exe HiROM ; ROM version 

USER.EXE %ROMFILES%user.exe HiROM ; ROM version 

SEG 3 RAM COMP NORELOC ; Do not remove! 

; Non-Replaceable System DLLs 

SHELL.DLL %ROMFILES%shell.dll HiROM ; Shell APIs 

LZEXPAND.DLL %ROMFILES%lzexpand.dll HiROM ; Expansion 

WIN87EM.DLL %ROMFILES%win87em.dll HiROM ; Math emulator 

; Replaceable System DLLs 

COMMDLG.DLL %ROMFILES%commdlg.dll HiROM STUB ; Common dialogs 
OLECLI.DLL %ROMFILES%olecli.dll HiROM STUB ; OLE Client 
OLESVR.DLL %ROMFILES%olesvr.dll HiROM STUB ; OLE Server 
TOOLHELP.DLL %ROMFILES%toolhelp.dll HiROM STUB ; Tool Help DLL 
DDEML.DLL %ROMFILES%ddeml.dll HiROM STUB ; DDE 
VER.DLL %ROMFILES%ver.dll HiROM STUB ; Version DLL 

; Multimedia Extensions 

MMSYSTEM.DLL %ROMFILES%mmsystem.dll HiROM STUB ; Multimedia 
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SND.CPL %RETAIL%snd.cpl HiROM ; Sound icon 

MPLAYER.EXE %RETAIL%mplayer.exe HiROM ; Media Player 

SOUNDREC.EXE %RETAIL%soundrec.exe HiROM ; Sound Recorder 

; Advanced Power Management (APM) 

; POWER.DRV %RETAIL%power.drv HiROM ; APM driver 

; Shell Programs 

PROGMAN.EXE %RETAIL%progman.exe HiROM ; Program Mgr 

WINFILE.EXE %RETAIL%winfile.exe HiROM ; File Manager 

TASKMAN.EXE %RETAIL%taskman.exe HiROM ; Task Manager 

WINHELP.EXE %RETAIL%winhelp.exe HiROM ; Windows Help 

WINTUTOR.EXE %RETAIL%wintutor.exe HiROM ; Tutorial 

; Control Panel 

DRIVERS. CPL %RETAIL%drivers.cpl HiROM ; Drivers icon 

MAIN.CPL %ROMFILES%main .cpl HiROM ; Main icons 

CONTROL.EXE %RETAIL%control.exe HiROM ; Control Panel 

; Printing Support 

; PRINTMAN.EXE %RETAIL%printman.exe HiROM ; Print Mgr 

; UNIDRV.DLL %ROMFILES%unidrv.dll HiROM ; Uni driver 

; DMCOLOR.DLL %ROMFILES%dmcolor.dll HiROM ; Uni driver 

; System Fonts 

VGASYS.FON %RETAIL%vgasys.fon HiROM ; System (VGA) 

VGAFIX.FON %RET AIL%vgafix. fon HiROM ; Fixed pitch 

VGAOEM.FON %RETAIL%vgaoem.fon HiROM ; OEM 

; Bitmap Fonts 

COURE.FON %RETAIL%coure.fon HiROM ; Courier (VGA) 

SERIFE.FON %RETAIL%serife.fon HiROM ; MS Serif (VGA) 

SMALLE.FON %RETAIL%smalle.fon HiROM ; Small (VGA) 

SSERIFE.FON %RETAIL%sserife.fon HiROM ; MS Sans Serif (VGA) 

SYMBOLE.FON %RETAIL%symbole.fon HiROM ; Symbol (VGA) 

; Plotter Fonts 

MODERN. FON %RETAIL%modern.fon HiROM ; Modern 

ROM AN. FON %RETAIL%roman.fon HiROM ; Roman 

SCRIPT.FON %RETAIL%script.fon HiROM ; Script 

; TrueType Fonts 
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ARIAL.FOT %RETAIL%arial . fot HiROM 

ARIALBD.FOT %RETAIL%arialbd.fot HiROM 
AR1ALBI.FOT %RETAIL%arialbi.fot HiROM 
ARIALI.FOT %RETAIL%ariali.fot HiROM 
COUR.FOT %RETAIL%cour. fot HiROM 
COURBD.FOT %RETAIL%courbd.fot HiROM 
COURBI.FOT %RETAIL%courbi.fot HiROM 
COURI.FOT %RETAIL%couri . fot HiROM 
SYMBOL.FOT %RETAIL%symbol.fot HiROM 
TIMES.FOT %RETAIL%times.fot HiROM 
TIMESBD.FOT %RETAIL%timesbd.fot HiROM 
TIMESBI.FOT %RETAIL%timesbi.fot HiROM 
TIMESI.FOT %RETAIL%timesi . fot HiROM 
WINGDING.FOT %RETAIL%wingding.fot HiROM 


; Arial 

; Arial Bold 
; Arial Bold Italic 
; Arial Italic 
; Courier New 

; Courier New Bold 
; Courier New Bold Italic 
; Courier New Italic 
; Symbol 

; Times New Roman 

; Times New Roman Bold 
; Times New Roman Bold Italic 
; Times New Roman Italic 
; WingDings 


; MS DOS App Support — 

VGA.3GR %RETAIL%vga.3gr HiROM 

WINOLDAP.MOD %RETAIL%winoldap.mod 
SEG 2 RAM COMP NORELOC 
WINOA386.MOD %RETAIL%winoa386.mod 
SEG 1 RAM COMP NORELOC 
SEG 2 RAM COMP NORELOC 
SEG 5 RAM COMP NORELOC 

DOSAPP.FON %RETAIL%dosapp.fon 
EGA80WOA.FON %RETAIL%ega80woa.fon 
EGA40WOA.FON %RETAIL%ega40woa.fon 
CGA80WOA.FON %RETAIL%ega80woa.fon 
CGA40WOA.FON %RETAIL%cga40woa.fon 


mode grabber 

; Std mode MS DOS app support 
remove! 

; Enh mode MS DOS app support 
remove! 
remove! 
remove! 

HiROM ; MS DOS app window fonts 

HiROM 
HiROM 
HiROM 
HiROM 


; Enh 

HiROM 

; Do not 

HiROM 

; Do not 
; Do not 
; Do not 


; Applets 

CALC.EXE %RETAIL%calc.exe HiROM 
CALENDAR. EXE %RETAIL%calendar.exe HiROM 
CARDFILE.EXE %RETAIL%cardfile.exe HiROM 
CHARMAP.EXE %RETAIL%charmap.exe HiROM 
CLIPBRD.EXE %RETAIL%clipbrd.exe HiROM 
CLOCK.EXE %RETAIL%clock.exe HiROM 
NOTEPAD.EXE %RETAIL%notepad.exe HiROM 
PACKAGER.EXE %RETAIL%packager.exe HiROM 
PBRUSH.DLL %RETAIL%pbrush.dll HiROM 
PBRUSH.EXE %RETAIL%pbrush.exe HiROM 
PIFEDIT.EXE %RETAIL%pifedit.exe HiROM 
RECORDER.DLL %RETAIL%recorder.dll HiROM 
RECORDER.EXE %RETAIL%recorder.exe HiROM 
SOL.EXE %RETAIL%sol . exe HiROM 

; TERMINAL.EXE %RETAIL%terminal.exe HiROM 


; Calculator 

; Calendar 
; Cardfile 

; Character Map 
; Clipboard Viewer 
; Clock 

; Notepad applet 
; Packager applet 
; for Paintbrush 
; Paintbrush 
; PIF Editor 

; for RECORDER.EXE 
; Recorder 
; Solitaire 

; Terminal 
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WINMINE.EXE %RETAIL%winmine.exe HiROM ; WinMine 

WRITE.EXE %RETAIL%write.exe HiROM ; Write 

; Applications 


FILES 

; Specifies optional files to be installed into ROM. 

; TrueType TTF font files are specified in this section. 

; ROM Name Path ROM 


; TrueType Data 


ARIAL.TTF %RETAIL%arial.ttf HiROM 
ARIALBD.TTF %RETAIL%arialbd.ttf HiROM 
ARIALBI.TTF %RETAIL%arialbi.ttf HiROM 
ARIALI.TTF %RETAIL%ariali.ttf HiROM 
COUR.TTF %RETAIL%cour.ttf HiROM 
COURBD.TTF %RETAIL%courbd.ttf HiROM 
COURBI.TTF %RETAIL%courbi.ttf HiROM 
COURI.TTF %RETAIL%couri.ttf HiROM 
SYMBOL.TTF %RETAIL%symbol.ttf HiROM 
TIMES.TTF %RETAIL%times.ttf HiROM 
TIMESBD.TTF %RETAIL%timesbd.ttf HiROM 
TIMESBI.TTF %RETAIL%timesbi.ttf HiROM 
TIMESI.TTF %RETAIL%timesi.ttf HiROM 
WINGDING.TTF %RETAIL%wingding.ttf HiROM 


; Arial 

; Arial Bold 
; Arial Bold Italic 
; Arial Italic 
; Courier New 

; Courier New Bold 
; Courier New Bold Italic 
; Courier New Italic 
; Symbol 

; Times New Roman 

; Times New Roman Bold 
; Times New Roman Bold Italic 
; Times New Roman Italic 
; WingDings 
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APPENDIX E 
EPLD EQUATIONS 


Included below are the equations for both the 85C090 and the 5AC312 EPLDs. See the RFA Schematic 
Diskette for disk-readable *.ADF and *.JED files. 

85C090 EPLD 

CN_SPC_A.ADF 

85C090 

OPTIONS: TURBO=ON 
PART: N85C090 %PLCC% 


% 
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This EPLD provides the main control logic of the Resident Flash 
Array Evaluation board. The following is included: 

Flash Memory chip enables 

Modes Register chip enable (RS CE/FLASH CE5) 

ROM Stub control logic 

74FCT623 Data Buffer Control 

74FCT373 Address Latches Gate control (HOLD#) 

WT, WT#, and RD# generation 

CN REV A - 04/06/92 Initial release 

CN_SPC_A - 04/08/92 Reconfigured Flash Array to provide 8 Meg 
of Flash Disk and 4 Meg of Executable Memory. 

CN_SPC_B - 04/29/92 Update to allow byte writes. 

CN_REV_B - 06/01/92 Added generalize configuration scheme. 

% 

INPUTS: 

DL_OUT@2 % Delay line out (high edge sets PRDY f/f) % 

PM@4 % PI bus Memory or IO# % 

PCMD#@14 % PI bus Command % 

PSTART_DLY#@42 % Delayed PSTART# signal (used to create HOLD#) % 

A14@5 % PI/ISA bus Latched Addresses % 

A15@19 

A16@20 

LA17@21 % PI/ISA bus Unlatched Addresses % 

LA18@26 

LA19@25 

LA20@27 

LA21@28 

LA22@29 

LA23@30 

MRDC#@3 % ISA bus Memory Read (All 16MByte) % 

VGACS#@13 % VGA Chip Select % 

FLASHDCS#@ 1 2 % Flash Disk Chip Select % 

L_PW@41 % PI bus PW/R# (latched) % 

EN_PRDY@40 % Enable PRDY# driver % 

SA00@43 % Latched address bit 00 % 

SBHE_L#@37 % Latched System Byte High Enable % 

OUTPUTS: 

FLASH_CE0#@15 % Flash Memory Zone pairs Chip Selects % 

FLASHCE 1 #@ 1 6 
FLASH_CE2#@35 
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FLASH_CE3#@34 

FLASH_CE4#@33 

FLASH_CE5#@32 

RS_CE@3 1 % ROM Stub Chip Select % 

RD#@6 % Read Strobe % 

WT_L#@10 % Write Strobe, Lower Byte % 

WT U#@8 % Write Strobe, Upper Byte % 

WT@36 % Write Strobe (Active High for 74F623 enable) % 

HOLD#@7 % Hold Address Latches (close gate) % 

SA1 6@1 1 % HIGH for Sel_RS, else 3-S % 

DL_IN@38 % Delay line driver % 

PRDY#@9 % PI bus signal % 

PRDY@1 8 % D-type f/f % 


NETWORK: 

PM = INP(PM) 

nPCMD = INP(PCMD#) 
nPSTART_DLY = INP(PSTART_DLY#) 

A14 = INP(A14) 

A15 = INP(A15) 

A16 = INP(A16) 

LAI 7 = INP(LAI7) 

LAI 8 = INP(LA18) 

LAI 9 = INP(LA19) 

LA20 = INP(LA20) 

LA21 = INP(LA21) 

LA22 = INP(LA22) 

LA23 = INP(LA23) 

nMRDC = INP(MRDC#) 
nVGACS = INP(VGACS#) 
nFLASHDCS = INP(FLASHDCS#) 

L_PW = INP(L_PW) 

ENPRDY = INP(EN_PRDY) 

DL_OUT = INP(DL_OUT) 

SAOO = INP(SAOO) 

nSBHE_L = INP(SBHE_L#) 

FLASH_CEO#,nFLASH_CEO = COIF(_FLASH_CEO,VCC) 

FLASHCE1 #,nFLASH_CEl = COIF(_FLASH_CEl,VCC) 

FLASH_CE2#,nFLASH_CE2 = COIF(_FLASH_CE2,VCC) 

FLASH_CE3#,nFLASH_CE3 = COIF(_FLASH_CE3,VCC) 

FLASH_CE4#,nFLASH_CE4 = COIF(_FLASH_CE4, VCC) 

FLASH_CE5#,nFLASH_CE5 = COIF(_FLASH_CE5,VCC) 

RS_CE,RS_CEf - COIF(iRS_CE, VCC) 

RD# = CONF(_RD,VCC) 

WT_L# - CONF(_WT_L, VCC) 

WT_U# = CONF(_WT_U, VCC) 

WT = CONF(iWT,VCC) 
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HOLD# = CONF(_HOLD,VCC) 

DL_IN,DL_INf = COIF(iDL_IN,VCC) 

PRDY,PRDYf - RORF(VCC,DL_OUT,_DL_IN,GND,VCC) 

PRDY# = CONF(_PRD Y, ENPRD Y) 

SA16 - CONF(VCC,Rd_RS) 

EQUATIONS: 

% Internal Declarations % 

PCMD = nPCMD'; 

PSTARTDLY = nPSTART_DLY; 

MRDC = nMRDC'; 

VGACS = nVGACS'; 

FLASHDCS = nFLASHDCS'; 

SBHE_L = nSBHE_L'; 

FLASH_CE0 = nFLASHCEO’; 

FLASH_CE1 =nFLASH_CEl'; 

FLASH_CE2 = nFLASH_CE2’; 

FLASH_CE3 = nFLASH_CE3'; 

FLASHCE4 = nFLASH_CE4’; 

FLASH_CE5 = nFLASH_CE5’; 

_DL_IN = DL_INf; 

_PRDY = PRDYf; 

Hold = PSTART_DLY 
+ PCMD 
+ MRDC; 

Open = /Hold; 

Closed = /Open; 

Sel_FDM = FLASHDCS; % Flash Disk Memory (mem cycles only) % 

Sel_XIP = /FLASHDCS * /VGACS * PM; % Execute-in-place Memory % - 

% ROM Stub, 0C8000h through OCBFFEh % 

Sel RS = /FLASHDCS * /VGACS * /LA23 * /LA22 * /LA2 1 

*/LA20* LA19 * LA18*/LA17*/A16* A15*/A14; 

Sel Modes = Sel FDM * LA23 * LA22 * LA21 ♦ LA20 % Modes Reg % 
*LA19*LA18*LA17*A16; 

ModesCE = RSCEf * /FLASHCE5; 

Rd_RS = RS_CEf * FLASH_CE5; 

Yes = VCC; 
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No = GND; 

% Zone pairs 0 and 1 are unconditionally assigned to the Flash 
Disk. Zone pair 5 is unconditionally assigned to the Executable 
Memory. Zone pairs 2, 3, and 4 are assigned with the three 
equations below by selecting either Yes or No for the three 
Flash Disk assignments. Assignments must be in order, 3 can 
be assigned to the Flash Disk only if 2 is, and 4 can be assigned 
to the Flash Disk only if 2 and 3 is. Zone pairs not assigned 
to the Flash Disk are automatically assigned to Executable 
Memory. % 

% Demo Configuration 

Z2eqFD = No; 

Z3eqFD = No; 

Z4eqFD = No; 

% 

% Customer Configuration % 

Z2eqFD = Yes; 

Z3eqFD = Yes; 

Z4eqFD = No; 

Z2eqXIP8 = /Z2eqFD; 

Z3eqXIP8 = /Z2eqXIP8 * /Z3eqFD; 

Z3eqXIPA = Z2eqXIP8 * /Z3eqFD; 

Z4eqXIP8 = /Z2eqXIP8 * /Z3eqXIP8 * /Z4eqFD; 

Z4eqXIPA = Z3eqXIP8 * /Z4eqFD; 

Z4eqXIPC = Z3eqXIPA * /Z4eqFD; 

Z5eqXIP8 = /Z2eqXIP8 * /Z3eqXIP8 * /Z4eqXIP8; 

Z5eqXIPA = Z4eqXIP8; 

Z5eqXIPC = Z4eqXIPA; 

Z5eqXIPE = Z4eqXIPC; 

% Outputs % 

% Zone pairs 0 and 1 are unconditionally assigned to Flash Disk. % 

FLASH CEO’ = Open * Sel FDM * /LA23 * /LA22 * /LA21 
+ Closed * FLASH CEO; 

FLASH CEl' = Open * Sel_FDM * /LA23 * /LA22 4 LA21 
+ Closed * FLASH CEl; 

% Zone pairs 2, 3, and 4 are conditionally assigned to either 
Flash Disk or Execute-in-Place memory. XIP starts at 800000h 
to avoid conflict with ROM Stub. % 
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_FLASH_CE2' = Open ♦ SelFDM * /LA23 ♦ LA22 * /LA21 * Z2eqFD 
+ Open *Sel_XIP* LA23 * /LA22 * /LA21 *Z2eqXIP8 
+ Closed * FLASH CE2; 

FLASH CE3' = Open * Sel FDM * /LA23 * LA22 * LA21 * Z3eqFD 
+ Open * SelXIP * LA23 * /LA22 * /LA21 ♦ Z3eqXIP8 
+ Open * Sel_XIP * LA23 * /LA22 * LA21 * Z3eqXIPA 
+ Closed * FLASH CE3; 

_FLASH_CE4' = Open * Sel FDM * LA23 * /LA22 * /LA21 * Z4eqFD 
+ Open * Sel_XIP * LA23 ♦ /LA22 * /LA21 * Z4eqXIP8 

+ Open * Sel XIP * LA23 * /LA22 * LA21 * Z4eqXIPA 

+ Open * Sel_XIP * LA23 ♦ LA22 * /LA21 * Z4eqXIPC 
+ Closed * FLASH CE4; 

% Zone pair 5 is unconditionally assigned to Execute-in-Place. 

Zone pair 5 is also enabled if Rom Stub is selected. % 

_FLASH_CE5* = Open * Sel_XIP * LA23 * /LA22 * /LA21 * Z5eqXIP8 
+ Open * Sel_XIP * LA23 * /LA22 * LA21 * Z5eqXIPA 
+ Open * Sel_XIP * LA23 * LA22 * /LA21 * Z5eqXIPC 

+ Open * Sel XIP * LA23 ♦ LA22 * LA21 * Z5eqXIPE 

+ Open * Sel_RS 

+ Closed * FLASH_CE5; 

% RS CE forces Flash Addresses 1 5 through 20 high. This, along 
with the activation of FLASH_CE5#, cause ROM Stub accesses to 
go to the upper 16 KBytes of Zone pair 5. % 

iRS CE = Open * Sel_RS 
+ Open * Sel_Modes 
+ Closed * RS_CEf; 

_RD' = PCMD * FLASH_CE0 * /L_PW 
+ PCMD * FLASH_CE1 * /L_PW 
+ PCMD * FLASH_CE2 ♦ /L_PW 
+ PCMD * FLASH_CE3 * /L_PW 
+ PCMD * FLASH CE4 * /L JPW 
+ PCMD * FLASH CE5 * /L_PW 
+ PCMD * Modes_CE * /L_PW 
+ MRDC * Rd_RS; 

_WT_IT = PCMD * FLASH_CE0 * L_PW * SBHEL 
+ PCMD ♦ FLASH CEl * L_PW * SBHE L 
+ PCMD * FLASH CE2 * L_PW * SBHE_L 
+ PCMD * FLASH CE3 * L_PW * SBHE L 
+ PCMD * FLASH CE4 * L_PW * SBHE_L 
+ PCMD * FLASH CE5 * L_PW * SBHE_L 

+ PCMD * FLASH_CE5 * L_PW * RS_CEf % RS_CE->SBHE_L 3-S % 

+ PCMD * Modes_CE * L_PW * SBHE_L; 
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_WT_L' = PCMD * FLASH_CEO * L_PW * /SAOO 
+ PCMD * FLASHCEl ♦ L_PW * /SAOO 
+ PCMD * FLASH_CE2 * L_PW * /SAOO 
+ PCMD * FLASH_CE3 * L_PW * /SAOO 
+ PCMD * FLASH_CE4 * L_PW ♦ /SAOO 
+ PCMD * FLASH_CE5 * L_PW * /SAOO 
+ PCMD * ModesCE * L_PW ♦ /SAOO; 

iWT = PCMD * FLASH_CEO * L_PW 
+ PCMD * FLASH CEl * L_PW 
+ PCMD * FLASH CE2 * L_PW 
+ PCMD ♦ FLASH_CE3 ♦ L_PW 
+ PCMD * FLASH CE4 • L_PW 
+ PCMD * FLASH CE5 * L_PW 
+ PCMD * Modes_CE * L_PW; 

_HOLD' = Hold; 

iDL_IN = PCMD * FLASH_CE0 
+ PCMD * FLASH CEl 
+ PCMD * FLASH_CE2 
+ PCMD * FLASH_CE3 
+ PCMD * FLASH_CE4 
+ PCMD * FLASH_CE5 
+ PCMD * Modes CE; 

ENDS 

****************************************************************************** 
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5AC312 EPLD 

OPTIONS: TURBO = OFF 
PART: N5AC312 % PLCC % 


This EPLD contains logic for the following: 

Flash Array VPP control 

FDM and XIP Power Down control 

Flash Disk Memory READY Interrupt control 

MD REV A - 04/08/92 Initial release 

MD_REV_B - 04/29/92 MODES_CE now a function for FLASH CE5 and 
RS CE, rather than separate. This is to 
save pins on the other EPLD. 


% 
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INPUTS: 

WT#@2 

% Write Strobe 

RD^@4 

% Read Strobe 

SA01@9 

% Buffered/Latched Address bit 01 

SA02@10 

% BufFered/Latched Address bit 02 


RSTDRV@16 % ISA bus Reset Driver % 

ALL_RDY@27 % All Flash ICs assigned to Flash Disk are RDY % 
SMOUT4@12 % +5LOCAL ON when this is high % 

FLASH_CE5#@6 

RS_CE@8 % ROM Stub Chip Select % 

OUTPUTS: 

% Output pins % 


EN_FLASH_VPP@22 % Pwr Cntrl Reg bit 00; Enable Flash Array VPP % 
PWR_UP@26 % Pwr Cntrl Reg /bit 03 % 

PWRD#@3 % Power control signal to entire Flash Array % 

INTR@13 % Intr Cntrl Reg bit 00; Flash Disk RDY Intr % 

SD00@17 % Internal Data Bus % 

SD01@18 

SD02@20 

SD03@21 

UNUSED23@23 

UNUSED24@24 


% Buried Macrocells % 

CLR_INTRf % Clear Interrupt flip-flop % 

EN INTRf % Modes Reg bit 02; Enable Flash Disk RDY Intr % 

NETWORK: 

nWT = INP(WT#) 

nRD = INP(RD#) 

SA01 = INP(SAOl) 

SA02 = INP(SA02) 

RSTDRV = INP(RSTDRV) 

ALLRDY = INP(ALLRDY) 

SMOUT4 = INP(SMOUT4) 

INTRCLK = CLKB(ALLRDY) 
nFLASH_CE5 = INP(FLASH_CE5#) 

RSCE = INP(RSCE) 

SD00,SD00f = COIF(iSD00,CHIP_RD) 

SD01,SD01f = COIF(iSD0 1 ,CHIP_RD) 

SD02,SD02f = COIF(iSD02,CHIP_RD) 
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SD03,SD03f 


= COIF(iSD03,CHIP_RD) 


EN_FLASH_VPP,EN 
PWR_UP, P WRUPf 
PWRD# 

EN_INTRf 

INTR,INTRf 

CLRINTRf 

UNUSED23 

UNUSED24 


FLASH_VPPf= RORF(iEN_FLASH_VPP,nWT,RSTDRV,GND,VCC) 
= RORF(iPWR_UP,nWT,GND,RSTDRV,VCC) 

= CONF(_PWRD,VCC) 

= NORF(iEN_INTR,nWT,RSTDRV,GND) 

= RORF(VCC,INTR_CLK,CLR_INTRtGND,VCC) 

= NOCF(iCLR_INTR) 

= CONF(GND,VCC) 

= CONF(GND, VCC) 


EQUATIONS: 


% Internal declarations % 

RD = nRD'; 

WT = nWT; 

FLASHCE5 = nFLASH_CE5'; 

Modes CE = RS_CE * /FLASH CE5; 


Sel Pwr Reg = Modes_CE * /SA02 * /SA01; 


Sel lntr Reg = Modes_CE * /SA02 * SA01; 


Sel Clr lntr = Modes_CE * SA02 * SA01; 

CHIP RD = RD * Modes CE; 

FDMBusy = /ALLRDY; 

% Outputs and buried registers % 

iSDOO = Sel Pwr Reg * EN FLASH VPPf 
+ Sel lntr Reg * EN INTRf; 

iSDOl = Sel Pwr Reg * GND 
+ Sel Jntr_Reg * INTRf; 

iSD02 = Sel Pwr Reg * GND 

+ Sel lntr Reg * FDM_Busy, 

iSD03 = Sel Pwr Reg * /PWR_UPf 
+ Sel _Intr_Reg * GND; 

iEN_FLASH_VPP = Sel_Pwr_Reg * SDOOf 
+ /Sel_Pwr_Reg * EN FLASH VPPf, 


iPWRUP = Sel_Pwr_Reg * /SD03f 
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+ /SelPwrReg * PWR_UPf; 

PWRD = PWRUPf 
+ SMOUT4; 

iENINTR = Sel _Intr_Reg ♦ SDOOf 
+ /Sel _Intr_Reg * EN_INTRf; 

iCLRINTR = RSTDRV 
+ /ENINTRf 
+ WT * Sel Clr lntr, 


ENDS 
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1.0 INTRODUCTION 

The Intel 28F008SA FlashFile™ Memory is today’s 
optimum solution for high density solid state storage. 
Flash memory, exemplified by the 28F008SA, is an en- 
abling technology for today’s powerful system designs 
that are higher performance, more compact, lighter, 
more rugged and have longer battery life. 

Features of the 28F008SA include: 

• High-Density Symmetrically Blocked Architecture: 

— Sixteen 64-Kbyte Blocks 

• Extended Cycling Capability 

— 100,000 Block Erase Cycles 

— 1.6 Million Block Erase Cycles per Chip 

• Automated Byte Write and Block Erase 

— Command User Interface 

— Status Register 

• System Performance Enhancements 

— RY/BY # Status Output 

— Erase Suspend Capability 

• Deep Powerdown Mode 

— 0.20 jmA Iec Typical 

• Very High Performance Read 

— 85 ns Maximum Access Time 

• SRAM-Compatible Write Interface 

• Hardware Data Protection Features 

— Erase/Write Lockout during Power Transitions 

• Industry Standard Packaging 

— 40 Lead TSOP, 44 Lead PSOP 

• ETOX III Nonvolatile Flash Memory Technology 

— 12V Byte Write/Block Erase 

The 28F008SA’s automation is a significant enhance- 
ment to the manual algorithms of first-generation flash 
memory devices. System software and hardware de- 
signs that fully understand and exploit this automation 
will greatly benefit from its versatility and capabilities. 
The concepts presented in this document are applicable 
to such designs. 

This application note discusses in-depth operation of 
the 28F008SA FlashFile memory Write State Machine 
and internal algorithms, emphasizing how they inter- 
face to system hardware and software. The 28F008SA 
datasheet (order number 290429) is a valuable reference 


document, providing in-depth device technical specifi- 
cations, package pinouts and timing waveforms. Com- 
panion application note AP-359, “28F008SA Hardware 
Interfacing” (order number 292094) describes supply 
voltage derivation and filtering, control input/output 
implementation, high density layout and high speed de- 
sign techniques, as Well as providing example system 
interfaces to common microprocessor buses. AP-360, 
“28F008SA Software Drivers” (order number 292095) 
provides example ASM-86 and “C” routines for con- 
trolling the 28F008SA. AP-359 and AP-360 should be 
reviewed in conjunction with this application note and 
the 28F008SA datasheet for a complete understanding 
of this device. 


2.0 AUTOMATION AND 
ALGORITHMS 

Figure 1 shows a block diagram of the 28F008SA and 
its internal contents. Although a main subject of this 
application note is software interface to read and alter 
memory contents, it is useful to begin with an overview 
of the 28F008SA hardware subsections that are directly 
manipulated by the system. In particular, this applica- 
tion note will first discuss the Write State Machine 
(WSM) and Command User Interface/Status Register, 
and then explain the software routines that control this 
hardware. 


2. 1 28F008SA Automation and the 
Write State Machine 

When the system microprocessor reads flash memory 
data from the 28F008SA, it uses control lines CE# and 
OE#, along with address inputs, to select a byte of data 
directly from the memory cell array. However, the sys- 
tem does not directly access the array when it writes to 
the 28F008SA; instead it writes to the Command User 
Interface, whose register contents are interpreted and 
translated into WSM actions. The WSM can be 
thought of as a dedicated “processor”, along with com- 
panion clock-generation circuitry, integrated into the 
flash memory. After receiving proper commands or 
command sequences, it controls byte write and block 
erase algorithms internally. The status of the WSM is 
not invisible to the system; the WSM interfaces to the 
outside world through a full-featured Status Register 
and dedicated RY/BY# (Ready/Busy#) output. Au- 
tomation has significant benefits, some of which are 
more obvious than others. 
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The WSM architecture dramatically simplifies the pro- 
gram and erase algorithms of first-generation flash 
memory devices. Hardware/software timers, erase pre- 
programming, byte-by-byte verification and margining, 
pulse repetition and limited microprocessor multitask- 
ing capability throughout data update have been elimi- 
nated, replaced by a simple two-command write for 
both block erase and byte write. The 28F008SA WSM 
halts itself when its internal algorithms are complete, 
and can alert the system to this completion by a hard- 
ware interrupt (using RY/BY#) or via software poll- 
ing of the 28F008SA Status Register. 

Internal automation frees the system to execute higher- 
priority tasks while a 28F008SA is being block erased 
or byte written, and inherent in this capability is the 
most powerful advantage of the WSM. Operating sys- 
tems prioritize file operations in the following order: 

• Read 

• Write 

• Erase 

When an array of 28F008SA components is used as 
solid-state storage (in a memory card, integrated in a 
flash-based “hard drive ’ form factor or resident on the 
system motherboard), system software can initiate 
slower block erase (0.3 sec minimum) of one or several 


28F008SAs and, by not being “tied” to the erase algo- 
rithm, execute higher priority reads (85 ns minimum) 
or writes (6 juis minimum) of other 28F008SAs as oper- 
ating system requests dictate. Additionally, erase sus- 
pend/resume capability allows data retrieval from a 
28F008SA currently being block erased, again enabling 
“read” as the highest priority task. Block erase as a 
background task is discussed in Section 2.6 of this doc- 
ument. 

Command User Interface 

Table 2 shows the various command sequences that are 
accepted and interpreted by the 28F008SA Command 
User Interface and WSM. Writes to the CUI enable 
reading of device data and intelligent identifiers, read- 
ing and clearing of the Status Register, and commence- 
ment of internal byte write, block erase and erase sus- 
pend/resume algorithms. The CUI itself does not occu- 
py a specifically addressable memory location, and con- 
tains a latch used to store the command and address/ 
data information needed to execute the command. 
Erase Setup and Erase Confirm commands require both 
appropriate command data and an address within the 
block to be erased. The Byte Write Setup command 
requires appropriate command data and the address of 
the location to be written, while the Byte Write com- 
mand consists of the data to be written and its address 
location. 
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Table 1. Status Register Definitions 


WSMS 

ESS 

ES 

BWS 

VPPS 

R 

R 

R 

7 

6 

5 

4 

3 

2 

1 

0 


SR. 7 = WRITE STATE MACHINE STATUS 
1 = Ready 

0 = Busy 

SR. 6 = ERASE SUSPEND STATUS 

1 = Erase Suspended 

0 = Erase in Progress/Completed 

SR. 5 = ERASE STATUS 

1 = Error in Block Erasure 

0 = Successful Block Write 

SR.4 = BYTE WRITE STATUS 

1 = Error in Byte Write 

0 = Successful Byte Write 

SR. 3 = V PP STATUS 

1 = Vp P Low Detect; Operation Abort 
0 = V PP OK 

SR.2-SR.0 = RESERVED FOR FUTURE ENHANCEMENTS 


NOTES: 

RY/BY# or the Write State Machine Status bit must 
first be checked to determine byte write or block erase 
completion, before the Byte Write or Erase Status bits 
are checked for success. 

If the Byte Write AND Erase Status bits are set to “1 M s 
during a block erase attempt, an improper command 
sequence was entered. Attempt the operation again. 

If Vpp low status is detected, the Status Register must 
be cleared before another byte write or block erase op- 
eration is attempted. 

The Vpp Status bit, unlike an A/D converter, does not 
provide continuous indication of Vpp level. The WSM 
interrogates the Vpp level only after the byte write or 
block erase command sequences have been entered 
and informs the system if Vpp has not been switched 
on. The Vpp Status bit is not guaranteed to report ac- 
curate feedback between Vppi_ and Vppn- 


These bits are reserved for future use and should be masked out when polling the Status Register. 


Table 2. Command Definitions 


Command 

Bus 

Cycles 

Req’d 

Notes 

First Bus Cycle 

Second Bus Cycle 

Operation 

Address 

Data 

Operation 

Address 

Data 

Read Array/ Reset 

1 


Write 

X 

SI 




Intelligent Identifier 

3 


Write 

X 

Q 


IA 

1^9 

Read Status Register 

2 


Write 

X 

991 

i 

X 


Clear Status Register 

1 



X 

Q 




Erase Setup/Erase Confirm 

2 



BA 

991 


BA 

Qj 

Erase Suspend/Erase Resume 

2 



X 

BOH 

Write 

X 

Q 

Byte Write Setup/Write 

2 

1.2,4 



40H 

Write 

WA 

991 

Alternate Byte Write Setup/Write 

2 

1,2,4 

Write 

WA 

10H 

Write 

WA 

WD 


NOTES: 

1 . IA = Identifier Address: 00H for manufacturer code, 01 H for device code. 

BA = Address within the block being erased. 

WA = Address of memory location to be written. 

2. SRD = Data read from Status Register. See Table 4 for a description of the Status Register bits. 

WD = Data to be written at location WA. Data is latched on the rising edge of WE. 

I ID = Data read from intelligent identifiers. 

3. Following the intelligent identifier command, two read operations access manufacturer and device codes. 

4. Either 40H or 10H are recognized by the WSM as the Byte Write Setup command. 

5. Commands other than those shown above are reserved by Intel for future device implementations and should not be 
used. 
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Status Register 

Table 1 shows the 28F008SA Status Register and de- 
fines its various bits. Like the Command User Inter- 
face, it does not occupy a specific memory location 
within the device. It functions as an output of the 
WSM, informing the system when internal byte write 
or block erase algorithms have completed, if these algo- 
rithms completed successfully, and whether the 
28F008SA is currently in Erase Suspend mode. Bit 7 
(Write State Machine Status) is replicated in the device 
RY/BY# hardware output. The default state of the 
upper 5 bits of the Status Register after powerup and 
return from deep powerdown mode is 10000 (binary). 

A separate Clear Status Register command allows re- 
initialization of Status Register data after analysis. The 
Status Register is not cleared until this command is 
written to the 28F008SA. 

Bits 5 and 4 of the Status Register, if set by the WSM 
via a byte write or block erase attempt, do not block 
subsequent attempts (they need not be cleared before 
another byte write/block erase command sequence is 
written to the device). However, if the WSM detects a 
“low Vpp” condition and subsequently sets bit 3 of the 
Status Register, the Status Register MUST be cleared 
before another algorithm command sequence will be 
recognized by the 28F008SA. 

It is important to note that the Vpp Status bit of the 
Status Register DOES NOT act like an always-func- 
tional A/D converter; its normal state, even with Vpp 
below 6.5V, is “0”. The WSM only analyzes the Vpp 
level after a byte write or block erase command se- 
quence has been written to the device, and if it detects 
that Vpp is “low” it will cancel the impending byte 
write or block erase operation and set the Vpp Status 
bit to “1”. Therefore, the Vpp Status bit cannot be used 
by the system as an indication of proper Vpp level, be- 
fore a byte write or block erase sequence is initiated. 
The system should instead insert an appropriate soft- 
ware delay between turning on Vpp and writing an ini- 
tial command sequence, or use external hardware as a 
Vpp feedback mechanism. 


2.2 Byte Write Algorithm 

Figure 2 provides a graphical representation of the 
28F008SA byte write algorithm. As can be seen, this 
consists solely of a two-command write sequence, fol- 
lowed by a periodic poll of the device RY/BY # output 
or Status Register. The 28F008SA automatically out- 
puts Status Register data when read after the two-com- 
mand byte write sequence (see Section 2.5). Byte write 
typically completes in 9 juls. 

The byte write algorithm requires high voltage Vppjj 
(12V ±5%) on the device Vpp input until internal al- 
gorithm completion is reported by the WSM. If byte 
write is attempted while Vpp = VppL (^6.5V), the 
Vpp Status bit of the Status Register will be set to “1”, 
and array data will not be altered. Byte write attempts 
while Vpp^ < Vpp < VppH produce spurious results 
and should not be attempted. 

The Status Register will only report errors for “l”s that 
do not write to “0”s during a byte write attempt. Era- 
sure (see Section 2.3) is the method used to change data 
“0”s to “l”s using flash technology. If the system soft- 
ware attempts to write “l”s to a byte at bit locations 
already at value “0”, no Status Register error will be 
reported for those specific bits. 

It is often desired to write multiple bytes of data at one 
time to memory. Since the Status Register is only 
cleared after the Clear Status Register command is 
written to the 28F008SA, a string of bytes can be se- 
quentially written to the device before the “full status 
check procedure” examines Status Register bits other 
than SR. 7. 

Byte write abort occurs when the 28F008SA RP# (Re- 
set/Powerdown) input drops to Vjl (deep powerdown 
mode is entered), or Vpp drops to Vppj^. Although the 
WSM is halted in either case, byte data is partially writ- 
ten at the location where aborted. A repeat byte write 
sequence after system integrity is restored will complete 
the desired operation, or data can be initialized to a 
known value of “FF” thru block erasure. 


intel 
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FULL STATUS CHECK PROCEDURE 



Bus 

Operation 

Command 

Comments 

Write 

Byte Write 
Setup 

Data = 40H (10H) 

Address = Byte to be written 

Write 

Byte Write 

Data to be written 
Address = Byte to be written 

Standby/ 

Read 


Check RY/BY# 

Vqh = Ready, Vol = Busy 
or 

Read Status Register 
Check SR. 7 
1 = Ready, 0 = Busy 
Toggle OE# orCE# to update 
Status Register 

Repeat for subsequent bytes 

Full status check can be done after each byte or after a 
sequence of bytes 

Write FFH after the last byte write operation to reset the 
device to Read Array Mode 


Bus 

Operation 

Command 

Comments 

Optional 

Read 


CPU may already have read 
Status Register data in WSM 
Ready polling above 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4 
1 = Byte Write Error 


SR.3 MUST be cleared, if set during a byte write attempt, 
before further attempts are allowed by the Write State 
Machine 


SR.4 is only cleared by the Clear Status Register Command, 
in cases where multiple bytes are written before full status is 
checked 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 2. Automated Byte Write Flowchart 
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2.3 Block Erase Algorithm 

Figure 3 provides a graphical representation of the 
28F008SA block erase algorithm, similar in its two- 
command write sequence to the byte write algorithm 
discussed earlier. Both the Erase Setup and Erase Con- 
firm commands must be accompanied by an address 
within the desired block to be erased to FFH. The 
28F008SA automatically outputs Status Register data 
when read after the two-command block erase sequence 
(see Section 2.5). Block erase typically completes in 
1.6 sec. 

Again similar to byte write, the block erase algorithm 
requires high voltage Vpph (12V ±5%) on the device 
Vpp input until internal algorithm completion is re- 
ported by the WSM. If block erase is attempted while 
Vpp — VppL (^6.5V), the Vpp Status bit of the Status 
Register will be set to “1”, and array data will not be 
altered. Block erase attempts while VppL < Vpp < 
VppH produce spurious results and should not be at- 
tempted. 

If write of the Erase Setup command is followed by 
write of any other command but Erase Confirm, the 
WSM will decode this as an illegal sequence. It will not 
attempt to erase the specified block, and will report 
error back to the system by setting both the Erase 
Status and Byte Write Status bits of the Status Register 
to “1”. Since the Status Register is only cleared after 
the Clear Status Register command is written to the 
28F008SA, a string of blocks within a 28F008SA can 
be sequentially erased before the “full status check pro- 
cedure” examines Status Register bits other than SR.7. 


Block erase abort occurs when the 28F008SA RP# 
(Reset/Powerdown) input drops to Vjl (deep power- 
down mode is entered) or Vpp drops to VppL. A repeat 
block erase sequence after system integrity is restored 
will complete the desired operation. 


2.4 Erase Suspend/Resume 
Algorithm 

Figure 4 gives a software flowchart for implementing 
erase suspend/resume using the 28F008SA. As men- 
tioned in Section 2.1, operating systems prioritize data 
reads highest, and consequently the 28F008SA has 
been designed with read as its highest performance 
function. Erase suspend allows system software to post- 
pone WSM-controlled block erase if the system re- 
quests read of data from a different block of the same 
device. Although any block of the 28F008SA can be 
read, the block being erased when suspended will con- 
tain unknown data. 

The 28F008SA is suspended by writing the Erase Sus- 
pend command (BOH) to it while the WSM is executing 
an erase algorithm. The WSM will halt block erase, set 
bits 7 and 6 of the Status Register to “1” and transition 
RY/BY# to Vqh> after which time system software 
can read data from either the array or Status Register. 
Issuing the Erase Resume command (DOH) signals the 
WSM to resume block erase. 

Vpp must remain at Vppn throughout the erase sus- 
pend interval, even when reading from the flash memo- 
ry array. The 28F008SA will detect a Vpp transition to 
VppL while suspended, and report this error via Status 
Register bit 3 (set to “1”) after the Erase Resume com- 
mand is written to it. 
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Bus 

Operation 

Command 

Comments 

Write 

Erase 

Setup 

Data = 20H 

Address = Within block to be 
erased 

Write 

Erase 

Confirm 

Data = DOH 

Address = Within block to be 
erased 

Standby/ 

Read 


Check RY/BY# 

Vqh = Ready, Vql = Busy 



or 



Read Status Register 
Check SR.7 
1 = Ready, 0 = Busy 
Toggle OE# or CE# to 
update Status Register 

Repeat for subsequent blocks 

Full status check can be done after each block or after a 
sequence of blocks 

Write FFH after the last block erase operation to reset 
the device to Read Array Mode 


Bus 

Operation 

Command 

Comments 

Optional 

Read 


CPU may already have read 
Status Register data in WSM 
Ready polling above 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4,5 

Both 1 = Command Sequence 
Error 

Standby 


Check SR.5 
1 = Block Erase Error 

SR.3 MUST be cleared, if set during a block erase attempt, 
before further attempts are allowed by the Write State 
Machine 

SR.5 is only cleared by the Clear Status Register Command, 
in cases where multiple blocks are erased before full status 
is checked 

If error is detected, clear the Status Register before 
attempting retry or other error recovery 


Figure 3. Automated Block Erase Flowchart 
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Figure 4. Erase Suspend/Resume Flowchart 
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Since the WSM is driven by its own oscillator, internal 
to the 28F008SA, it operates asynchronously to the sys- 
tem CPU and its clock. Therefore, the possibility exists 
that the WSM could complete erase, returning to 
“ready”, between when the system reads “busy” from 
the Status Register and writes the Erase Suspend com- 
mand. Analyzing both the WSM Status and Erase Sus- 
pend Status bits of the Status Register, as shown in the 
flowchart, will alert the system to such an occurrence. 


2.5 Write State Machine Current/Next 
State Overview 

Byte write and block erase automation equate to tre- 
mendous power and capability in system implementa- 
tions of the 28F008SA, if fully exploited. An in-depth 
understanding of the WSM, its states and its responses 
to inputs, will assist the software engineer in developing 
optimized driver routines for flash memory-based file 
storage and other high-performance applications. Table 
3 lists all possible WSM “current states”, command 
inputs and resultant “next states”. 

Non-shaded boxes highlight those state transitions 
which will most commonly occur when reading from 
and modifying 28F008SA contents, and these tran- 
sitions should be understood in most depth. Shaded 
boxes, on the other hand, represent lesser-used or non- 
sensical transitions, such as improper erase command 
sequences. 

Before reading the 28F008SA, if the current WSM 
mode is not known (if, for example, an interrupt service 
routine has potentially interacted with the device), first 
write the desired output command (i.e. Read Status 
Register, Read Array or Intelligent Identifier). This en- 
sures that the 28F008SA will be in a known state when 
read and will output expected data. 


Read Array 

The 28F008SA automatically defaults to Read Array 
mode when powered up, or when it returns from Deep 
Powerdown mode. As the name implies, the 28F008SA 
outputs array data when read in Read Array mode. 
Read Array is also the default mode after the Clear 
Status Register command is written in most other 
modes. 

Byte Write Setup 

The 28F008SA transitions to Byte Write Setup mode 
after it receives the Byte Write Setup command. If the 
28F008SA is read in Byte Write Setup mode, it outputs 
Status Register data. 

Byte Write 

After the 28F008SA is placed in Byte Write Setup 
mode, the next address/data combination written to it 
transitions the WSM to Byte Write mode, where the 
“Byte Write Command” is latched as desired data to 
write to the array at the specified address location. Im- 
mediately, the WSM examines Vpp, and if it detects an 
invalid level, it halts with Vpp error indication in the 
Status Register (bit 3 = “1”). Bit 7 of the Status Regis- 
ter is “0”, and the RY/BY # output is driven to Vql» 
while the WSM is executing the internal byte write al- 
gorithm in Byte Write mode. The 28F008SA automati- 
cally outputs Status Register data when in Byte Write 
mode. 


Erase Setup 

The 28F008SA transitions to Erase Setup mode after it 
receives the Erase Setup command. If the 28F008SA is 
read in Erase Setup mode, it outputs Status Register 
data. 
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Table 3. Write State Machine Current/Next States 








Command Input (and Next State) 



Current RY/BY# 
State Status 

Data 

When 

Read 

Read 

Array 

(FFH) 

i 

Byte 

Write 

Setup 

(10/40H) 

Erase 

Setup 

(20H) 

Erase 

Confirm 

(DOH) 

Erase 

Suspend 

(BOH) 

Erase 

Resume 

(DOH) 

Read 

Status 

(70H) 

Clear 

Status 

(50H) 

Read ID 
(90H) 



Byte Write 
Setup 

Byte Write 
(Not 

Complete) 

Byte Write 
(Complete) 


Voh Array 


Voh Status 
Vql Status 

Vqh Status 



Array Status Array 


Byte Write (Command Input = Data to be Byte Written) 
Byte Write 


Read Erase _ , . Read Read 

A Write _ . Read Array . A 

Array Setup Status Array 




Erase 

Status Erase Command Error Erase Command Erase Erase Command Error 

Error 


Read Array 


Status Array 



(Not 

Complete) 


Vql Status 



Erase 

Suspend Erase 

to Status 


NOTE: 

1. State transitions labeled “Reserved” are set aside by Intel Corporation for potential future device implementations. Com- 
mand sequences to access these states should not be attempted. 
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Erase 

After the 28F008SA is placed in Erase Setup mode, 
write of the Erase Confirm command transitions the 
WSM to Erase mode, where the specified address is 
decoded into one of 16 blocks to be erased. Immediate- 
ly, the WSM examines Vpp, and if it detects an invalid 
level, it halts with Vpp error indication in the Status 
Register (bit 3 = “1”). Bit 7 of the Status Register is 
“0”, and the RY/BY # output is driven to Vql> while 
the WSM is executing the internal block erase algo- 
rithm in Erase mode. The 28F008SA automatically 
outputs Status Register data when in Erase mode. 

Erase Command Error 

This is the other possible transition mode after Erase 
Setup, and occurs when an invalid command (anything 
but Erase Confirm/Resume) is written to the 
28F008SA as the second in the two-command block 
erase sequence. In this mode, the WSM does not at- 
tempt a block erase, and it returns an error indication 
to the system by setting both bits 4 and 5 of the Status 
Register to “1”. The 28F008SA automatically outputs 
Status Register data when in Erase Command Error 
mode. 

Erase Suspend to Status/ Array 

While the WSM is busy executing an internal block 
erase algorithm, it can be placed in erase suspend by 
writing the Erase Suspend command. After receiving 
and decoding this command, the WSM suspends block 
erase, drives the RY/BY # output to Vqh> sets bits 6 
and 7 of the Status Register to “1” and transitions to 
“Erase Suspend to Status” mode. The 28F008SA auto- 
matically outputs Status Register data when in “Erase 
Suspend to Status” mode. 

The only valid command other than Read Status and 
Erase Resume at this time is Read Array, which tran- 
sitions the WSM to “Erase Suspend to Array” mode. 
As the name implies, the 28F008SA outputs array data, 
not Status Register contents, in this mode. While in 
both Erase Suspend modes, Vpp must remain at Vppn 
for erase to complete successfully when resumed. 

Writing the Erase Resume (same as Erase Confirm) 
command to the 28F008SA transitions the WSM out of 
Erase Suspend and back to Erase. In conjunction with 
this, the WSM returns RY/BY # to Vql and resets bits 
6 and 7 of the WSM to “0”. 


Read Status 

As the name implies, the 28F008SA automatically out- 
puts Status Register contents when read in Read Status 
mode. If system software writes the Clear Status com- 
mand at this point, the WSM resets the Status Register 
to its default value and transitions to Read Array 
mode. 

Read Identifier 

The 28F008SA outputs its manufacturer identifier of 
89H when read from address 00000H when in Read 
Identifier mode. Similarly, a read from address 0000 1H 
returns the device identifier A2H. Using this informa- 
tion, the system can automatically match the device 
with its proper block erase and byte write algorithms. 
Reads from addresses other than 00000H and 0000 1H 
are not supported by Intel, and consistent results of 
such reads are not documented, guaranteed or recom- 
mended. 


2.6 Block Erase as a Background 
Task 

As mentioned earlier, the internal WSM block erase 
algorithm typically takes 1.6 seconds to complete. 
Proper implementation of block erase from a hardware 
and software standpoint, however, can mask this delay, 
by taking advantage of the 28F008SA’s internal auto- 
mation and full-featured system interface. Execution of 
block erase as a background task, with higher priority 
read and write functions in the foreground, is the key. 

The recommended scenario includes an “intelligent” 
operating system routine which can keep track of 
“busy” devices in the 28F008SA array. After initiating 
block erase on these components, the operating system 
is free to concentrate on reads and writes, or any other 
pending requests that demand its attention. The 
28F008SA RY/BY# output alerts the system when 
block erase completes, and the operating system acts on 
this completion in the resulting interrupt service rou- 
tine. 

Hardware interrupt via the RY/BY # output is a rec- 
ommended technique for block erase. However, this 
method should be evaluated closely for alerting the sys- 
tem to byte write completion. The WSM typically com- 
pletes a byte write attempt in 9 juts, a much shorter time 
than that consumed in many CPU interrupt latencies. 
In such cases, software polling of the 28F008SA Status 
Register to detect WSM “ready”, versus hardware in- 
terrupt, will result in highest byte write performance. 
Reference AP-359, “28F008SA Hardware Interfacing”, 
for circuit implementations that not only combine 
RY/BY #s into a common INT, but also allow 
RY/BY # masking if desired. 
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1.0 PURPOSE 

The 28F016SA is the second member of Intel’s 
FlashFile™ memory family. Its architecture evolved 
from that of the 28F008SA, Intel’s first generation 
FlashFile memory device. The 28F016SA retains the 
standard 28F008SA’s versatile capabilities and adds a 
Command Superset architecture which insures compat- 
ibility with the basic command-set. 

This application note shows how to upgrade an existing 
28F008SA-based design to the new 28F016SA memory 
device. Upgrades may require software modifications 
depending on the desired system functionality and 
straightforward hardware modifications to accommo- 
date the new pinout. 

2.0 SIMILARITIES AND DIFFERENCES 
BETWEEN THE 28F016SA AND 
THE 28F008SA 

The 28F016SA memory is 100% command and algo- 
rithm, backward-compatible with the 28F008SA. It is 
defined as a Superset device which brings additional 
capabilities to system designs. Additional pins on the 
28F016SA are added to define a user-selectable 8- or 
16-bit wide memory, add on-chip write protection and 
multiple chip select signals. Note that you do not have 
to use the advanced features if you are performing a 
simple upgrade to the 28F016SA. 

Before starting on your design upgrade, obtain the fol- 
lowing specifications and application notes from Intel 
Corporation Literature Sales, 1 (800) 548-4725. 



Intel 

Order # 

28F008SA Data Sheet 

290429 

28F016SA Data Sheet 

290489 

28F01 6SA User’s Manual 

297372 

28F008SA Software Drivers 

292095 

28F01 6SA Software Drivers 

292126 


2.1 Pinout Differences 

Whereas the 28F008SA is 8-bit wide (40Ld-TSOP 
package), the 28F016SA is a high performance 16-bit 
wide flash file memory offering a user-configurable bus 
width (56Ld-TSOP package). Hence an additional 8 
I/O pins are on the 28F016SA. Furthermore, the im- 
plementation of additional features such as Write Pro- 
tect and Block Locking and user-selectable 3.3V and 
5V operation require the definition of control pins for 
these functions. Finally, the optimization of the 
28F016SA’s architecture to achieve very high write 
performance resulted in a different pinout configura- 
tion from the 28F008SA. 

Both device pinouts preserve the locations of I/O pins 
on the right-hand side and the sequence of pin func- 
tions of the 56Ld-TSOP package. However, it is still 
required to relay out an existing PCB design in order to 
accommodate the 16-Mbit chips. Table 1 lists all pin 
names and their numbers, highlighting all the changes. 
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Table 1. 28F008SA, 28F016SA Pin Comparison Chart 


28F008SA 
Pin Name 

28F016SA 
Pin Name 

28F008SA 

40L-TSOP 

28F016SA 

56L-TSOP 

Notes 

Ao 

A 0 

24 

32 


Ai 

Ai 

23 

28 


a 2 

a 2 

22 

27 


A3 

a 3 

21 

26 


a 4 

A 4 

20 , 

25 


a 5 

As 

19 

24 


mm 

A6 

18 

23 



a 7 

17 

22 


As 

As 

16 

20 



Ag 

15 

19 



A 10 

14 

18 



An 

13 

17 


Al2 


8 

13 

|| 

Al3 


7 

12 

m 

■ 

A 14 

6 

11 

1 1 

mm 


5 

10 


Al6 

Al6 

4 

8 

| 

msm 


3 

7 

| 

■B9I 

Al8 

2 

6 

|| 

Al9 


1 

5 

HI 

B9H 

A20 

— 

4 

1 

DQo 

DQo 

25 

33 


DQ-j 

DQ-j 

26 

35 


DQ 2 

DQ 3 

27 

38 


dq 3 

DQ 3 

28 

40 


dq 4 

dq 4 

32 

44 


dq 5 

dq 5 

33 

46 



28F008SA 
Pin Name 

28F016SA 
Pin Name 

28F008SA 

40L-TSOP 

28F016SA 

56L-TSOP 

Notes 

dq 6 

dq 6 

34 

49 


dq 7 

dq 7 

35 

51 


— 

dq 8 

— 

34 


— 

DQg 

— 

36 


— 


— 



— 


— 

41 


— 


— 



— 

DQ-13 

— 

47 


— 

DQ-j 4 

— 

50 


— 

DQis 

— 

52 


CE# 

CEq# 

9 

14 


— 

CE-j# 

— 

2 

Bl 

RP# 

RP# 

12 

16 

mm 

RY/BY# 

RY/BY# 

36 

53 

4 

OE# 

OE# 

37 

54 


WE# 


38 

55 


— 


— 

31 

5 

huh 


— 

56 


HBH 


— 

1 


Vpp 

Vpp 

11 

15 


Vss 

Vss 




Vcc 

Vcc 

10,31 

9, 37, 43 


NO 

NO 

39, 40 

3, 29, 30 



NOTES: 

1. Highest Order Address 

2. Dual CEx# 

3. Formerly Called PWD# 

4. Open Drain for 28F016SA 

5. x8/x16 Selection 

6. Selects Supply Voltage 
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2.1.1 HARDWARE COMPATIBLE 
CONFIGURATION 

The following is an example which shows the state of 
all pins when operating in a 28F008SA-compatible 
mode: 

WP# = Vcc (Write Protect feature disabled) 

CEo# = CEi# (Chip Enable) 

A 20 = GND or Vcc (selects upper/lower 1 MB) 


3/5# = GND (5V operation) or Vcc (3.3V oper- 

ation) 

V C c = 5.0V or 3.3V 

BYTE# = GND (8-bit mode) 

RY/BY # = Level Mode (set for default) with an ex- 
ternal pull-up resistor 

NOTE: 

The 28F008SA has a CMOS driven RY/BY# output 
for interrupt capability. 



“ 292124-1 

Figure 1. 28F016SA Configured as a 28F008SA-Compatible Memory 
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2.2 Compatible Command-Set 


Byte Write 40H, 10H 

Single Block Erase 20H 

Erase Suspend to Read BOH 

Read Array FFH 

Read CSR 70H 

Clear CSR 50H 

Read Intelligent IDs 90H 


Table 2. 28F008SA-Compatible Commands 


Command 

Notes 

First Bus Cycle 

Second Bus Cycle 

Oper 

Addr 

Data 

Oper 

Addr 

Data 

Read Array 


Write 

X 

FFH 

Read 

AA 

AD 

Intelligent Identifier 

1 

Write 

X 

90H 

Read 

IA 

ID 

Read Compatible Status Register 

2 

Write 

X 

70H 

Read 

X 

CSRD 

Clear Status Register 

CO 

Write 

X 





Word /Byte Write 


Write 

X 

40H 

Write 

WA 

WD 

Alternate Word/ Byte Write 


Write 

X 

10H 

Write 

WA 

WD 

Block Erase/Confirm 


Write 

X 

20H 

Write 

BA 

DOH 

Erase Suspend/Resume 


Write 

X 

BOH 

Write 

X 

DOH 


ADDRESS DATA 


AA = Array Address 
BA = Block Address 
IA = Identifier Address 
WA = Write Address 
X = Don’t Care 


AD = Array Data 

CSR = Compatible Status Register 

CSRD = CSR Data 

GSR = Global Status Register 

BSR = Block Status Register 

ID = Identifier Data 

WD = Write Data 


NOTES: 

1. Following the Intelligent Identifier command, two Read operations access the manufacturer and device signature codes. 

2. The CSR is automatically available after device enters Data Write, Erase, or Suspend operations. 

3. Clears CSR.3, CSR.4 and CSR.5. Also clears GSR.5 and all BSR.5 and BSR.2 bits. See Status register definitions in the 
28F016SA data sheet. 
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2.3 Technology Comparison 

Both the 28F016SA and the 28F008SA are manufac- 
tured on Intel’s Flash ETOX process technology. This 
technology is optimized for random access flash memo- 
ry products with the highest read/write performance 
and lowest power consumption. The ETOX flash tech- 
nology achieves very high reliability and quality. 


2.4 Available Speeds 

The 28F016SA designed on a 0.6 jitm ETOX IV pro- 
cess, achieves faster speeds than the 28F008SA manu- 
factured on 0.8 jxm ETOX III process. Intel offers the 
28F008SA in 5V-read version with speeds at 85/90 ns 
and 120 ns. The 28F016SA on the other hand is offered 
with a dual 3.3V and 5V read capability with speeds of 
(70/80 ns, 100 ns) and (120 ns, 150 ns) at 5V and 3.3V 
respectively. Note that both devices are offered at faster 
speeds (85 ns and 70 ns) under reduced loading condi- 
tions. Please consult the data sheets referenced in this 
application note. 


2.5 Available Packages 

The 28F016SA comes only in a 56Ld-Thin Small Out- 
line Package (TSOP) optimized for its user-selectable 
x8/xl6 memory architecture. The 28F008SA is offered 
in 2 packages, which are the 40Ld-TSOP (both stan- 
dard and reverse pinout) and the 44Ld-Plastic Small 
Outline Package (PSOP). 


2.6 Operating Modes 

The 28F016SA behaves in the same manner as the 
28F008SA. If a compatible command is written to the 
device, the Compatible Status Register contents are au- 
tomatically put on the data bus. With the block locking 
disabled (WP#=high), the 28F016SA is identical to 
the 28F008SA, regardless of any lock-bit settings which 
define the lock state of a given block. The Command 
User Interface (CUI), Write State Machine (WSM) and 
Compatible Status Register (CSR) units function simi- 
larly on both devices. 

The 28F016SA however, allows the user to issue multi- 
ple commands successively by watching the Queue bit 
(GSR. 3 or BSR.3), a feature which improves perform- 
ance, as described in the 28F016SA user’s manual. 
Consult the 28F016SA data sheet and 28F016SA user’s 
manual for detail operation. 


2.7 AC Compatibility 

The 28F016SA specifies the output Load circuit as an 
equivalent transmission line model which reflects the 
timing delays more accurately. The same diode/resistor 
circuit combination found in the 28F008SA data sheet 
also applies to the 28F016SA. 

Address and Data are latched on the rising edge of 
WE# for both devices. All AC timing specifications 
are similar except for the differences noted in the data 
sheets. The 28F016SA has additional write timings de- 
scribing the on-chip page buffers which do not exist on 
the 28F008SA. 


2.8 DC Compatibility 

Whereas the 28F008SA only operates at 5V Vcc and 
the 28F008SA-L only operates at 3.3V Vco the 
28F016SA operates at both 3.3V and 5V Vcc supply 
voltages. In 5 V mode of operation, the two devices are 
similar in terms of input/output level specifications. 
Consult the data sheets for differences in current con- 
sumption. 


2.9 Power Considerations 

In addition to the active, standby and deep power-down 
modes which exist on the 28F008SA, the 28F016SA 
has additional current modes useful in power manage- 
ment applications. 

The two modes are: 

Automatic Power Saving feature which is activated 
whenever the device addresses are not switching which 
is equivalent to a static mode of operation on the chip is 
accessed by a slowed clock. In this state, the chip typi- 
cally draws less than 1 mA of total current. 

The second low current mode of operation is enabled 
through command control, using the Sleep command. 
A Sleep command written to the device will put the 
chip in the lowest current state (deep power-down lev- 
el) after all active operations have been processed. The 
device retains the value of its status registers while in 
sleep mode. 

Note that the AC and DC specifications mentioned 
here are valid at the time this application note was writ- 
ten. Please reference the device data sheets for the latest 
up-to-date specifications. 
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3.0 HARDWARE DESIGN 
CONSIDERATIONS 

If you are considering a density upgrade to the 
28F016SA, careful attention to certain areas must be 
followed. This section is not intended to cover all po- 
tential issues related to system design, but rather as a 
guideline in designing an upgrade to the 28F016SA. 


3.1 Hardware Upgradability 

The following flowchart summarizes the logical steps a 
system designer must go through to complete a density 
upgrade. This simple upgradability procedure allows 
the 28F016SA-based system to achieve quicker time-to- 
market while incorporating future expandability to take 
advantage of the Superset features of the 28F016SA. 


3.2 Hardware Decision Flowchart 
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4.0 SOFTWARE DESIGN AND 
UPGRADABILITY 
CONSIDERATIONS 

In order to do a software upgrade to the 28F016SA, the 
software designer must pay attention to a few key areas. 
They can be grouped as follows: 

Device Intelligent Identifier = AOH (versus A2H for 
28F008SA) 

Compatible Superset Commands 
Compatible Status Register Checks only 
Number of Erase Blocks 


Device Drivers for the 28F008SA and the 28F016SA 
are provided in application notes AP-360 and AP-377 
respectively. 

Software drivers written for the 28F008SA need to rec- 
ognize the new device ID and change the memory size 
boundaries in order to work on a 28F016SA-based sys- 
tem design. 

Note that the 28F016SA can be treated as two 8-Mbit 
memory devices in a single package. The highest order 
address pin A 20 is used to switch between the upper 
and the lower 1 Mbyte flash array. By preserving the 
same basic software driver code, an upgrade to the 
28F016SA enables the quickest time-to-market. 


4.1 Software Decision Flowchart 
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5.0 COMPATIBLE SOFTWARE ALGORITHM FLOWCHARTS 



Bus 

Operation 

Command 

Comments 

Write 

Word/Byte 

Write 

D = 40H or 10H 
A = X 

Write 


D = WD 
A = WA 

Read 


Q = CSRD 

Toggle CE 0 #, CE^.or 
OE# to update CSRD. 

A = X 

Standby 


Check CSR.7 
1 = WSM Ready 
0 = WSM Busy 

Repeat for subsequent Word/Byte Writes. 

CSR Full Status Check can be done after each Word/Byte 
Write, or after a sequence of Word/Byte Writes. 

Write FFH after the last operation to reset device to Read 
Array Mode. 

See Command Bus definitions in the 28F016SA User’s 
Manual for description of codes. 
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CSR FULL STATUS CHECK PROCEDURE 



Bus 

Operation 

Command 

Comments 

Standby 


Check CSR.4 

1 = Data Write Unsuccessful 
0 = Data Write Successful 

Standby 


Check CSR.3 
1 = Vpp Low Detect 
0 = Vpp OK 

CSR.3/4 SHOULD be cleared, if set, before further attempts 
are initiated. 


Figure 2. Word/Byte Writes 
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Bus 

Operation 

Command 

Comments 

Write 

Block Erase 

D = 20H 1 

A = X 

Write 

Confirm 

D = DOH 
A = BA 

Read 


Q = CSRD 

Toggle CE 0 #,CEi#,or 
OE# to update CSRD. 

A = X 

Standby 


Check CSR.7 
1 = WSM Ready 
0 = WSM Busy 

Repeat for subsequent Block Erasures. 

CSR Full Status Check can be done after each Block Erase, 
or after a sequence of Block Erasures. 

Write FFH after the last operation to reset device to Read 
Array Mode. 

See Command Bus definitions in the 28F016SA User’s 
Manual for description of codes. 


CSR FULL STATUS CHECK PROCEDURE 
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Bus 

Operation 

Command 

Comments 



Check CSR. 5 
1 = Erase Error 
0 = Erase Successful 



Check CSR.3 
1 = Vpp Low Detect 
0 = Vpp OK 

Standby 


Check CSR.4, 5 

Both set to 1 - Command 

Sequence Error 

CSR.3/4/5 SHOULD be cleared, if set, before further attempts 
are initiated. 


Figure 3. Block Erase 
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Bus 

Operation 

Command 

Comments 

Write 

Erase 

Suspend 

D = BOH 
A = X 

Read 


Q = CSRD 

Toggle CE 0 #, CEi #, or OE# 
to update CSRD. 

A = X 

Standby 


Check CSR.7 
1 = WSM Ready 
0 = WSM Busy 

Standby 


Check CSR.6 
1 = Erase Suspended 
0 = Erase Completed 

Write 

Read Array 


Read 


Q = AD 

Read must be from block other 
than the one suspended. 

Write 

Erase 

Resume 

D = DOH 
A = X 



Figure 4. Erase Suspend to Read Array 
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6.0 SUMMARY 

This application note summarizes the upgrade consid- 
erations and compatibility areas between the 28F016SA 
and the 28F008SA. It is merely intended as a simple 
guideline to achieve a density and/or performance up- 


inlel. 

grade and to point out the key issues that the hardware 
and software designers must analyze during this pro- 
cess. 

Consult the referenced documentation for a complete 
understanding of compatibility and device capabilities. 
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INTRODUCTION 

ABOUT THE CODE 

This application note provides example software code 
for word writing, block erasing, and otherwise control- 
ling Intel’s 28F016SA, 28F016SV, 28F016XS and 
28F016XD (hereafter referred to as 28F016SA) 16 
Mbit symmetrically blocked memory components. Two 
programming languages are provided: high-level “C” 
for broad platform support, and more optimized 
ASM86 assembly. In many cases, the driver routines 
can be inserted “as is” into the main body of code being 
developed by the system software engineer. Extensive 
comments are included in each routine to facilitate 
adapting the code to specific applications. 

The internal automation of the 28F016SA makes soft- 
ware timing loops unnecessary and results in platform- 
independent code. The following example code is de- 
signed to be executed in any type of memory and with 
all processor clock rates. C code can be used with many 
microprocessors and microcontrollers, while ASM 8 6 
assembly code provides a solution optimized for Intel 
microprocessors and embedded processors. 

The 28F016SA, like the 28F008SA, is divided into 64 
Kbyte blocks. Since the GSR and BSR are defined rela- 
tive to the nearest preceding block beginning address, I 
often refer to this “block base” address in the com- 
ments. 

Assumptions: 

• Pointers (in C) or EDI offsets (in ASM 8 6) are four 
(4) bytes long, providing a flat addressing space over 
the entire 28F016SA device. This implies the use of 
386 or higher machines. If the code is to be run on a 
machine with a smaller address space, the code must 
be modified to include some sort of “windowing” 
scheme which maps segments of flash into system 
memory. The Intel 82365 is commonly used for this 
purpose. 

• “Ints” are 16 bit and “longs” 32 bit in C. 

• It is assumed that these pointers return a value equal 
to what they are pointing to. In other words, even 
though the pointer may be four (4) bytes long, this 
does not imply that incrementing the pointer by one 
will move the pointer four (4) bytes in memory. It is 
entirely dependent upon what the pointer is pointing 
to that determines how the increment will be effect- 
ed. In the case of four (4) byte pointers and 16-bit 
ints, incrementing the pointer by one will effectively 
move the pointer two (2) bytes. 

• There exists a function “set pin” which can set an 

individual 28F016SA pin, given the pin number. 


• There exists a function “get pin” which can return 

the value of an individual 28F016SA pin, given the 
pin number. 

• The C code can access a function which derives the 
corresponding block base address from any given 
address. 

° BYTE# pin on the device determines whether ad- 
dressing refers to words or bytes. I assume word 
writes/reads to a single device. With minor modifi- 
cations this code can be adapted for a pair of 
28F016SAs in Byte mode. 

• 28F016SA commands can be written to any address 
in the block or device to be affected by that com- 
mand. 

Both the C and ASM86 code in this document contain 
the following routines, in this order: 

CSR word byte writes(compatible with 28F008S A) 

CSR block erase(compatible with 28F008SA) 

CSR erase suspend to read(compatible with 

28F008SA) 
lock block 

lock status upload to BSR 

update data in a locked block 

add data in a locked block 

ESR word write 

two byte write 

ESR page buffer write 

ESR block erase 

ESR erase all unlocked blocks 

ESR suspend to read array 

ESR automatic erase suspend to write 

ESR full status check for data write 

ESR full status check for erase 

single load to pagebuffer 

sequential load to pagebuffer 

upload device information 

RYBY reconfiguration 

page buffer swap 

The names of these routines have been changed to more 
closely match the algorithms presented in the 
28F016SA User’s Manual (Order Number 297372). 
Please see Appendix A for a table documenting these 
changes. 

ABOUT THE 28F016SA 

Companion product datasheets for the 28F016SA 
should be reviewed in conjunction with this application 
note for a complete understanding of the device. 

The example code makes extensive use of bit-masking 
when interpreting the status registers. As a quick re- 
view, note that any bit in a register can be tested by 
bitwise ANDing the register with the appropriate pow- 
er of two. Since all of the bits other than the one being 
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tested are masked out, testing the resulting byte for 
truth is the same as testing the desired bit for truth. For 
example, if a register contains 01001010, the test for bit 
3 would be ANDing the register with 00001000, or hex 
8, and testing the result for truth: 


Binary 

Hex 


01001010 

4A 

Register 

& 00001000 

& 08 

Mask for bit 3 

= 00001000 

= 08 

Result 


In this case the result byte is true, indicating that bit 3 
in the register was a 1. 

The meanings of the individual bits of these registers is 
presented here for reference. Note that there are two 
status register spaces, both of which are distinct from 
the flash memory array address space. In the CSR 
space, the CSR is mapped to every address. In the ESR 
space, the GSR is mapped two words above the base of 
each 64K byte block, i.e. to addresses 2, 8002H, 
10002H, etc. (in word mode), while each BSR is simi- 
larly mapped one word above the base of each 64K byte 
block to locations 1, 800 1H, 10001H, etc. (in word 
mode), each BSR reflecting the status of its own block. 


CSR.7 

Write State Machine 
Status 

1= ready 
0= busy 

CSR.6 

Erase-suspend Status 

1 = erase suspended 
0= erase in progress/ 
completed 

CSR.5 

Erase Status 

1= error in block 
erase 

0 = successful block 
erase 

CSR.4 

Data-write Status 

1= error in data write 
0= successful data 
write 



1 = Vpp low detect/ 
operation aborted 
0= Vpp OK when 
operation occurred 

CSR.2 

Reserved for future use 


CSR.1 

Reserved for future use 


CSR.O 

Reserved for future use 



GSR. 7 

Write State Machine 
Status 

1 = ready 
0= busy 

GSR.6 

Operation-suspend 

Status 

1= operation 
suspended 
0= operation in 
progress/ 
completed 

GSR.5 

Device Operation 
Status 

1 = operation 
unsuccessful 
0= operation 
successful or 
running 

GSR.4 

Device Sleep Status 

1 = device in sleep 
0= device not in 
sleep 

GSR.3 

Queue Status 

1 = queue full 
0= queue available 

GSR.2 

Page Buffer 
Availability 

1 = one/two page 
buffers available 
0= no page buffers 
available 

GSR.1 

Page Buffer Status 

1 = selected page 
buffer ready 
0= selected page 
buffer busy 

GSR.O 

Page Buffer Select 
Status 

1 = page buffer 1 
selected 

0= page buffer 0 
selected 


BSR. 7 

Block Status 

1= ready 
0= busy 


Block-lock Status 

1= block unlocked 
for write/erase 
0= block locked to 
write/erase 

BSR.5 

Block Operation 
Status 

1= error in block 
operation 

0= successful block 
operation 

BSR.4 

Block Operation Abort 
Status 

1 = block operation 
aborted 

0= block operation 
not aborted 

BSR.3 

Queue Status 

1 = device queue full 
0= device queue 
available 

BSR.2 

Vpp Status 

1 = Vpp low detected 
0= Vpp OK when 
operation 
occurred 

BSR.1 

Reserved for future 
use 


BSR.O 

Reserved for future 
use 
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28F016SA Commands 

The 28F016SA command set is a superset of the 
28F008SA command set, giving existing 28F008SA 
code the ability to run on the 28F016SA with minimal 
modifications. 

28F008SA-Compatible Commands 

00 invalid/reserved 

20 single block erase 

40 word/byte write 

50 clear status registers 

70 read CSR 

90 read ID codes 

B0 erase suspend 

DO confirm/resume 

FF read flash array 


28F016SA Performance-Enhancement 
Commands 

0C page buffer write to flash 

71 read GSR and BSRs (i.e. the ESR) 

72 page buffer swap 

74 single load to page buffer 

75 read page buffer 
77 lock block 

80 abort 

96.01 RY/BY # enable to level-mode 

96.02 RY/BY # pulse on write 

96.03 RY/BY # pulse on erase 

96.04 RY/BY# pin disable 

97 upload BSRs with lock bit 
99 upload device information 
A7 erase all unlocked blocks 
E0 sequential load to page buffer 
F0 sleep 
FB two-byte write 
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"C" DRIVERS 


/* Copyright Intel Corporation, 1993 */ 

/* File : stddefs.h 

*/ 

/* Standard definitions for C 

Drivers for the 28F016SA/SV/XS/XD Flash */ 

/* memory components 

*/ 

/* Author : Taylor Gautier, Intel Corporation */ 

/* Revision 1.0, 23 September 

1994 */ 


,********.**.**,**,,*..***************************************************.*, 

/* pin values 

*/ 

/****************** ** **************** ***************************************/ 

# define LOW 

0 

#define HIGH 

1 

/a**************************************************************************/ 

/* error codes 

*/ 

/******************************************************** *****************★*/ 

# define NOJERROR 

0 

#define VPP_LOW 

1 

#define OP_ABORTBD 

2 

#def ine BLOCK_LOCKED 

3 

#def ine C OMMAND_S EQ_E RROR 

4 

#def ine WP_LOW 

5 

/ft**************************************************************************/ I 

/* bit masks 

V 

/***************************************************************************/ 

#define BIT__0 

0x0001 

# define BIT_1 

0x0002 

#define BIT_2 

0x0004 

#define BIT_3 

0x0008 

#define BIT_4 

0x0010 

#define BIT_5 

0x0020 

#de£ine BIT_6 

0x0040 

#de£ine BIT_7 

0x0080 

#define LOW_BYTE 

0x0 OFF 

#define HIGH__BYTE 

OxFFOO 

/***************************-**************;*********************************/ 

1 /* RY/BY# enable modes 

V 

/***************************************************************************/ 

#def ine RYBY_ENABLE_TO_LEVEL 

1 

#def ine RYBY_PULSE_ON_WRITE 

2 

#define RYBY_PULSE_ON_ERASE 

3 

#define RYBY_DI SABLE 

4 

/**************************** 

***********************************************/ 

/* pin numbers 

*/ 

/**************************** 

#def ine WPB 56 

★★a********************************************/ 

/* Write Protect pin (active 

low) is pin number 56 on standard */ 

/* pinout of 28F016SA. 

*/ 

#def ine VPP 15 


/* Vpp pin is pin number 15 on standard pinout of 28F016SA. */ 
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/* Copyright Intel Corporation, 1993 
/* File : drivers. c 

/* Example C Routines for 28F016SA/SV/XS/XD Flash memory components 
/* Original Author : Patrick Killelea, Intel Corporation 
/* Revised By : Taylor Gautier, Intel Corporation 
/* Revision 2.0, 23 September 1994 
/* 

/* NOTE: BYTE# pin on the device determines whether addressing 
/* refers to words or bytes. I assume word mode. 

/* NOTE: A 28F016SA command can be written to any address in the 
/* block or device to be affected by that command. 
/******************************************************************* 

# include <stdio.h> 

#include "stddefs.h" 

void set_pin ( int pin, int level) 

{ 

/* set_pin is an implementation-dependent function which sets a 
/* given pin on the standard 28F016SA pinout HIGH = 1 or LOW = 0. 

> 

int get_pin(int pin) 

{ 

/* get_jpin is an implementation-dependent function which returns a 
/* given pin on the standard 28F016SA pinout HIGH = lor LOW = 0 

> 


int *base(int * address) 

{ 

/* base is an implementation-dependent function which takes an 
/* address in the flash array and returns a pointer to the base 
/* of that 64K byte block. 

> 


char *byte_base ( char * address) 

{ 

/* byte version of base function described above 

} 
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int CSR_wordJbyte_writes(int ♦address, int data) 

{ 

/* This procedure writes a byte to the 28F016SA. */ 

/* It also works with the 28F008SA. */ 

int CSR; 

/* CSR variable is used to return contents of CSR register. */ 

♦address ■ 0X1010; 

/♦.Word Write command */ 

♦address * data; 

/* Actual data write to flash address. */ 

while ( 1 (BIT_7 & * address) ) ; 

/* Poll CSR until CSR. 7 = 1 (WSM ready) */ 

CSR =5 * address; 

/* Save CSR before clearing it. */ 

♦address ■ 0X5050; 

/* Clear Status Registers command */ 

♦address ■ OxPFPP; 

/* Write FFH after last operation to reset device to read array mode. */ 

return (CSR); 

/* Return CSR to be checked for status of operation. */ 

> 
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int CSR_block_erase ( int ♦address) 

{ 

/* This procedure erases a 64K byte block on the 28F016SA. */ 

int CSR; 

/* CSR variable is used to return contents of CSR register. */ 

♦address = 0X2020; 

/* Single Block Erase command */ 

♦address » 0XD0D0; 

/* Confirm command */ 

♦address « OxDODO; 

/* Resume command, per latest errata update */ 

while ( I ( BIT_7 & *address)) 

/* Poll CSR until CSR. 7 = 1 (WSM ready) */ 

{ 

/* System may issue an erase suspend command (BO [BO]) here to read data ♦/ 
/* from a a different block. */ 

}; 

/* At this point, CSR. 7 is 1, indicating WSM is not busy. */ 

/* Note that we are still reading from CSR by default. */ 

CSR = *address; 

/* Save CSR before clearing it. */ 

♦address = 0X5050; 

/* Clear Status Registers command */ 

♦address = OxFFFF; 

/* Write FFH after last operation to reset device to read array mode. */ 

return (CSR); 

/* Return CSR to be checked for status of operation. */ 

> 

/* If a write has been queued, an automatic erase suspend occurs to write */ 
/* to a different block. */ 
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int CSR_erase_suspend_to_read ( int *read_address, int *erase_address, int 
♦result) 

{ 

/* This procedure suspends an erase operation to do a read. */ 

Int CSR; 

/* CSR variable is used to return contents of CSR register. */ 

/* Assume erase is underway in block beginning at erase_address . */ 

♦erase__address « OXBOBO; 

/* Erase Suspend command * / 

while ( 1 (BIT_7 & *erase_address ) ) ; 

/* Poll CSR until CSR. 7 = 1 (WSM ready) */ 

if ( BIT_6 & *erase_addre8s) { 

/* If CSR. 6 = 1 (erase incomplete) */ 

♦erase_address ■ OXPPPP; 

/* Read Flash Array command */ 

♦result * ♦read.address; 

/* Do the actual read. Any number of reads can be done here. */ 

♦erase.address ■ 0XD0D0; 

/* Erase Resume command */ 

} else { 

♦erase_address * OXPPPP; 

/* Read Flash Array command */ 

♦result * *read_address; 

/* Do the actual read. Any number of reads can be done here. */ 

) 

♦erase_address a 0x7070; 

/* Read CSR command */ 

CSR ■ ♦erase_address; 

/* Save CSR before clearing it. ♦/ 

♦erase_address ■ 0X5050; 

/* Clear Status Registers command */ 

return (CSR); 

/* Return CSR to be checked for status of operation. */ 

) 
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int lockjblock ( int *lock_addrees) 

/* This procedure locks a block on the 28F016SA. */ 

{ 

int ESR; 

/* ESR variable is used to return contents of GSR and BSR. */ 

int *block_base ■ base (lock_address) ; 

/* Find pointer to base of block being locked. */ 

*lock_address a 0X7171; 

/* Read Extended Status Registers command */ 

while (BIT_3 & * (block_base + 2)); 

/* Poll GSR until GSR. 3 = 0 (queue available) . */ 

set_pin(WPB, HIGH); 

/* Disable write protection by setting WPB high. */ 

set_pin(VPP / HIGH); 

/* Enable Vpp # wait for ramp if necessary in this system. */ 

*lock__address a 0X7777; 

/* Lock Block command * / 

*lock_address a QXD0D0; 

/* Confirmation command */ 

*lock_address a 0X7171; 

/* Read Extended Status Registers command */ 

while ( t (BIT__7 & *(block_base + 2))); 

/* GSR is 2 words above 0; poll GSR until GSR. 7 = 1 (WSM ready) . */ 

ESR = (* (block_base + 2) « 8) + (* (block_base + 1) & LOW_BYTE); 

/* Put GSR in top byte and BSR in bottom byte of return value. */ 

*lock_address a 0X5050; 

/* Clear Status Registers command */ 

*lock_address a OxFFFF; 

/* Write FFH after last operation to reset device to read array mode. */ 

return (ESR); 

) 
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int lock_status_upload_to__BSR(int *address) 

/* This procedure uploads status information into the BSR from non- */ 

/* volatile status bits. */ 

{ 

int ESR; 

/* ESR variable is used to return contents of GSR and BSR. */ 

int *block_base ■ base (address) ; 

/* Find pointer to base of 32K word block. */ 

♦address = 0X7171; 

/* Read Extended Status Registers command • */ 

while (BIT_3 & * (block_base +2)); 

/* Poll GSR until GSR. 3 = 0 (queue available) . */ 

♦address * 0X9797; 

/* Lock-status Upload command */ 

♦address =* 0XD0D0; 

/* Confirmation command */ 

♦address * 0X7171; 

/* Read Extended Status Registers command */ 

while ( ! (BIT_7 & *(block_base + 2))); 

/* Poll GSR until GSR. 7 = 1 (WSM not busy) */ 

ESR ». (* (block_base + 2) << 8) + (* (block__base + 1) & LOW_BYTE); 

/* Put GSR in top byte and BSR in bottom byte of return value. */ 

♦address = 0X5050; 

/* Clear Status Registers command */ 

♦address *» OxFFFF; 

/* Write FFH after last operation to reset device to read array mode. */ 

return (ESR); 

> 
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int update_data_JLn_a_locked_block( ) 

{ 

/* This routine is implemented as pseudo-code to provide an example of */ 

/* impementing the flowchart Updating Data in a Locked Block from the */ 

/* 28F016SA User's Manual */ 

set_pin(WPB, HIGH); 

/* set WP# high */ 

block_erase_with_CSR (block_addresa ) ; 

/* erase block */ 

set_pin(WPB, LOW); 

/* set WP# low */ 

WriteNewData ( ) ; 

/* Use one of Word/Byte Write, Two-Byte Write or Page Buffer Write to Flash*/ 

lock_block(block_addrefls) ; 

/* lock block if desired */ 

> 

int add_data_in_a_locked_block ( ) 

{ 

/* This routine is implemented as pseudo-code to provide an example of */ 

/* impementing the flowchart Updating Data in a Locked Block from the */ 

/* 28F016SA User's Manual */ 

set_pin(WPB, HIGH); 

/* set WP# high */ 

WriteNewData ( ) ; 

/* Use one of Word/Byte Write, Two-Byte Write or Page Buffer Write to */ 

/* Flash */ 

set_pin(WPB, LOW); 

/* set WP# low */ 

} 
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int ESR_word_write(int *write_address, int *data, int word_count) 

/* This procedure writes a word to the 28F016SA. */ 

{ 

int counter, ESR; 

/* counter is used to loop through data array */ 

/* ESR variable is used to return contents of GSR and BSR. */ 

int *block_base = base (write_addres8) ; 


for (counter » 0; counter < word_count; counter++) { 

*write_address * 0X7171; 

/* Read Extended Status Registers command */ 

while ( BIT_3 & *(block_base +1)); 

/* Poll BSR until BSR. 3 of target address = 0 (queue available). */ 

/* BSR is 1 word above base of target block in status reg space. */ 

*write_address = 0X1010; 

/* Write word command */ 

*write_addreB8 ■ data [counter] ; 

/* Write actual data. */ 

> 

*write_address ■ 0X7171; 

/* Read Extended Status Registers command */ 

while ( ! (BIT__7 & *(block_base + 1))); 

/* Poll BSR until BSR. 7 of target address = 1 (block ready). */ 

ESR ■ (* (block_base + 2) « 8) + (* (block_base + 1) & L0W_BYTE); 

/* Put GSR in top byte and BSR in bottom byte of return value. */ 

*write_address = 0X5050; 

/* Clear Status Registers command */ 

*write_address = OxFFFF; 

/* Write FFH after last operation to reset device to read array mode. */ 

return (ESR); 

) 
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int two_byte_write(char ♦address, char *data, int byte_count) 

/* This routine is used when BYTE# is low, i.e. the 28F016SA */ 

/* is in byte mode, to emulate a word write. */ 

/* Because of this, commands are given as 0x0 OXY instead of OxXYXY as in */ 

/* the rest of the code presented here. */ 

/* Mata is a byte array containg the low byte, high byte consecutively of */ 

/* each word. */ 

{ 

int counter, ESR; 

/* ESR variable is used to return contents of GSR and BSR. */ 

char *block_base = byte_base (address) ; 

/* Find pointer to base of block. */ 

for (counter = 0; counter < byte_count; counter++) { 

♦address = 0X0071; 

/* Read Extended Status Registers command */ 

while (BIT__3 & * (block_base + 2)); 

/* Poll BSR until BSR. 3 of target address = 0 (queue available) . */ 

♦address = 0X00FB; 

/* Two-byte Write command */ 

♦address = data [count er++] ; 

/* Load one byte of data register; A0 = 0 loads low byte, Al high ♦/ 

♦address = data [counter] ; 

/* 28F016SA automatically loads alternate byte of data register */ 

> 

/* Write is initiated. Now we poll for successful completion. */ 

♦address = 0X0071; 

/* Read Extended Status Registers command */ 

while ( ! (BIT_7 & ♦ (block_base +2))); 

/* Poll BSR until BSR. 7 of target address = 1 (block ready). */ 

/* BSR is 1 word above base of target block in status reg space. */ 

ESR = (♦(block_base + 4) << 8) + (* (block_base + 2) & LOW_BYTE ) ; 

/* Put GSR in top byte and BSR in bottom byte of return value. */ 

♦address s 0X0050; 

/* Clear Status Registers command */ 

♦address ■ 0x0 OFF; 

/* Write FFH after last operation to reset device to read array mode. */ 

return (ESR); 

> 
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int ESR_pagebuffer_write(int * address, int word_count) 

/* This procedure writes from page buffer to flash. */ 

{ 

/* This routine assumes page buffer is already loaded. */ 

/* Address is where in flash array to begin writing. */ 

/* Low byte of word count word_count must be 127 or fewer, high must be 0. */ 
/* High byte of word count exists for future Page Buffer expandability. */ 

int ESR; 

/* ESR variable is used to return contents of GSR and BSR . */ 

int *block_base ■ base (address) ; 

/* Find pointer to base of block to be written. */ 

* address = 0X7171; 

/* Read Extended Status Registers command */ 

while (BIT_3 & *(block_base +1)); 

/* Poll BSR until BSR. 3 of target address = 0 (queue available). */ 

* address b 0X0C0C; 

/* Page Buffer Write to Flash command */ 

♦address * word_count; 

/* high byte is a don't care, write the low byte */ 

♦address = 0; 

/* write high byte of word_count which must be 0 (reserved for future use) */ 

♦address » 0X7171; 

/* Read Extended Status Registers command */ 

while (!(BIT_7 & ♦(block_base +1))); 

/* Poll BSR until BSR. 7 of target address =1 (block ready) . */ 

ESR b (♦ (block_base + 2) « 8) + (* (block_base + 1) & LOW_BYTE) ; 

/ * Put GSR in top byte and BSR in bottom byte of return value. ♦/ 

♦address b 0X5050; 

/* Clear Status Registers command */ 

♦address s OxFFFF; 

/* Write FFH after last operation to reset device to read array mode. */ 

return (ESR) ; 

} 
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int ESR_block_erase ( int *erase_addrees) 

/* This procedure erases a block on the 28F016SA. */ 

{ 

int ESR/ 

/* ESR variable is used to return contents of GSR and BSR. */ 

int *block_base ■ base (erase_address) ; 

/* Find address of base of block being erased. */ 

*erase_address ■ 0X7171; 

/* Read Extended Status Registers command */ 

while (BIT_3 & *(block_base +1)); 

/* Poll BSR until BSR. 3 of erase_address = 0 (queue available) . */ 

/* BSR is 1 word above base of target block in ESR space. */ 

*eraBe_address • 0X2020; 

/* Single Block Erase command */ 

*erase_address = 0XD0D0; 

/* Confirm command */ 

*erase_address * OxDODO; 

/* Resume command, per latest errata update */ 

*erase_addrees s 0X7171; 

/* Read Extended Status Registers command */ 

while (MBITJ7 & *(blockJbaee + 1))); 

/* Poll BSR until BSR. 7 of target erase_address = 1 (block ready) . */ 

ESR = (* (block_base + 2) << 8) + (* (block_base + 1) & LOWJBYTE); 

/* Put GSR in top byte and BSR in bottom byte of return value. */ 

*erase_address ■ 0X5050; 

/* Clear Status Registers command */ 

*erase_address = OxFPPF; 

/* Write FFH after last operation to reset device to read array mode. */ 

return (ESR) ; 

> 
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int ESR_erase_all_unlocked_blocks(int *device_address, long *fallure_liflt) 

/* This procedure erases all the unlocked blocks on a 28F016SA. */ 

{ 

Int GSR; 

/* Return value will contain GSR in both top and bottom byte. */ 

/* 32 bit long pointed to by failure_list is used to return map */ 

/* of block failures, each bit representing one block's status. */ 

/* device_address points to base of chip. */ 

int block; 

/* block is used to hold block count for loop through blocks. */ 

long power * 1; 

*failure_list * 0; 

/* Initialize all 32 bits of failure list long to 0. */ 

*device_address ■ 0X7171; 

/* Read Extended Status Registers */ 

while (BIT_3 & * (device.address + 1)); 

/* Poll BSR until BSR.3 of target address = 0 (queue available). */ 

*device_addrese ■ 0XA7A7; 

/* Full -chip erase command */ 

*device_address ■ 0XD0D0; 

/* Confirm command */ 

*device_address = 0X7171; 

/* Read Extended Status Registers command */ 

while (!(BIT_7 & * (device_address + 2))); 

/* Poll GSR until GSR. 7 = 1 (WSM ready) , */ 

for (block « 0; block < 0X0020; block++) 

{ 

/* Go through blocks, looking at each BSR. 5 for operation failure */ 
/* and setting appropriate bit in long pointed to by failure list. */ 

if ( BIT__5 & * (device_addresB + block * 0X8000 + 1)) 

/* Multiply block by 32K words to get to the base of each block. */ 

*failure_list +« power; 

. /* If the block failed, set that bit in the failure list. */ 

power « power << 1; 

/* Increment to next power of two to access next bit. */ 

> 

GSR b * (device_address + 2); 

*device_addrese b 0X5050; 

/* Clear Status Registers command */ 

*device_address b OxPPPP; 

/* Write FFH after last operation to reset device to read array mode. */ 

return (GSR) ; 

} 
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int ESR_suspend_to_read_array (int * address, int *result) 

/* This procedure suspends an erase on the 28F016SA. */ 

{ 

/* Address is assumed to point to location to be read. */ 

/* result is used to hold read value until procedure is complete. */ 

int ESR; 

/* ESR variable is used to return contents of GSR and BSR. */ 

int *block_base a base (address) ; 

♦address = 0X7171; 

/* Read Extended Status Registers command */ 

while ( 1 (BIT_7 & * (block_base + 1))); 

/* Poll BSR until BSR. 7 of target address = 1 (block ready). */ 

/* BSR is 1 word above base of target block in ESR space. */ 

♦address = 0XB0B0 ; 

/* Operation Suspend command */ 

♦address a 0X7171; 

/* Read Extended Status Registers command */ 

while ( ! (BIT__7 & *(block_base + 2))); 

/* Poll GSR until GSR. 7 = 1 (WSM ready) . */ 

if <BIT_6 & * (block_base + 2)) { 

/* GSR. 6 = 1 indicates an operation was suspended on this device, */ 

♦address « OXFFFF; 

/* Read Flash Array command */ 

♦result a * address; 

/* Read the data. */ 

♦address a 0XD0D0; 

/* Resume the operation. */ 

> else { 

♦address a OXFFFF; 

/* Read Flash Array command */ 

♦result a ♦address; 

/* Read the data. */ 

> 

♦address a 0x7171; 

/* Read Extended Status Registers command */ 

ESR a (*(block_base + 2) « 8) + (♦ (block_base + 1) & LOW_BYTE) ; 

/* Put GSR in top byte and BSR in bottom byte of return value. */ 

♦address a 0X5050; 

/* Clear Status Registers command */ 

return (ESR) ; 

> 
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int ESR_autamatic_erase_suspend_to_write ( int *write_address, int 
*erase_address, int data) 

/* This procedure writes to one block while another is erasing. */ 

int ESR; 

/* ESR variable is used to return contents of GSR and BSR. */ 

int * block_base ■ base (erase_address) ; 

/* Find pointer to base of block being erased. ★ / 

*erase_address - 0X7171; 

/* Read Extended Status Register command */ 

while ( BIT_3 & * (block_base + 1)); 

/* Poll BSR until BSR. 3 of target address = 0 (queue available). */ 

/* BSR is 1 word above base of target block in ESR space. */ 

*erase_addres8 « 0X2020; 

/* Erase Block command */ 

*erase_address - 0XD0D0; 

/* Confirm command */ 

*erase_address » 0X7171; 

/* Read Extended Status Register command */ 

while ( BIT__3 & *(block_base + 1)); 

/* Poll BSR until BSR. 3 of target address = 0 (queue available) . */ 

/* BSR is 1 word above base of target block in ESR space. */ 

*write_address ■ 0X4040; 

/* Word Write command ★/ 

*write_address ■ data; 

/* Write actual data. * / 

/* Erase suspends, write takes place, then erase resumes. */ 

*erase_address « 0X7171; 

/* Read Extended Status Registers command */ 

while (1(BIT_7 & * (block_base +1))); 

/* Poll BSR until BSR. 7 of erase address = 1 (block ready). */ 

/* BSR is 1 word above base of target block in status reg space. */ 

ESR * (*(block_base +2) << 8) + (* (block_base + 1) & LOW_BYTE) ; 

/* Put GSR in top byte and BSR in bottom byte of return value. */ 

*block_base * 0X5050; 

/* Clear Status Registers command */ 

*block_base » OxFFFF; 

/* Write FFH after last operation to reset device to read array mode. */ 

return (ESR); 

> 
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int ESR_full_status_check_for_data_write(int *device_address) 
{ 

int errorcode; 


*device_address ■ 0x7171; 

/* Read Extended Status Resisters command */ 

while ( ! (BIT_7 & * (device_addresB + 2))) ; 

/* Poll GSR until GSR. 7 = 1 (WSM ready) */ 

/* to make sure data is valid */ 

if (* (device_address + 1) & BIT_2) errorcode ■ VPP_LOW; 

/* BSR.2 = 1 indicates a Vpp Low Detect V 

else if (* (device_address + 1) & BIT_4) errorcode « OP_ABORTED; 

/* BSR.4 = 1 indicates an Operation Abort */ 

else if (get_pin(WPB) =» low) errorcode » NO_ERROR; 

else if (* (device_addrees + 1) & BIT_6) errorcode * BLOCK_LOCKED; 

/* BSR.6 = 1 indicates the Block was locked */ 

else errorcode s NO_ERROR; 

while ( 1 (BIT_7 & *(device_address +2))) ; 

/* Poll GSR until GSR. 7 = 1 (WSM ready) */ 

/* make sure chip is ready to accept command * / 

*device_address = 0x5050; 

/* Clear Status Registers */ 


return errorcode; 

> 
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int ESR_full_status_check_for_erase(int *device_address) 
{ 

int errorcode = NO_ERROR| 


*device_address ■ 0x7171; 

/* Read Extended Status Resisters command */ 

while (!(BIT_7 & * (device_address + 2))); 

/* Poll GSR until GSR. 7 = 1 (WSM ready) */ 

/* make sure command completed */ 

if (* (device_address + 1) & BIT_2) errorcode ■ VPP_LOW; 

/* BSR.2 = 1 indicates a Vpp Low Detect */ 

else if (*(device_address + 1) & BIT_4) errorcode « OP_ABORTED; 

/* BSR.4 = 1 indicates an Operation Abort */ 

else if (get_pin(WPB) =■ LOW && ! (* (device_address + 1) & BIT_6)) 
errorcode ■ BLOCK_LOCKED; 

/* BSR.6 = 0 indicates the Block was locked */ 

if (errorcode «» NO_ERROR) { 

*device_address =« 0x7070; 

/* Read Compatible Status Register */ 

if ( (*device_address & BIT_4) && (*device_address & BIT_5)) 

/* CSR.4 and CSR.5 ==' 1 indicate a command sequence error */ 

errorcode ■ COMMAND_SEQ_ERROR ; 

> 

while (!(BIT_7 & * (device_address +2))) ; 

/* Poll GSR until GSR. 7 = 1 (WSM ready) */ 

/* make sure device is ready * / 

*device_address - 0x5050; 

/* Clear Status Registers command */ 


return errorcode; 

} 
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void single_load_to_pagebuf f er ( int *device_address, char *address, int data) 


/* This procedure loads a single byte or word to a page buffer. */ 

/* device_address points to base of chip. */ 

{ 

*device_addrese = 0X7171; 

/* Read Extended Status Registers command */ 

while ( ! (BIT_2 & * (device_addresB + 2))); 

/* Poll GSR until GSR. 2 = 1 (page buffer available) */ 

*device_address = 0X7474; 

/* Single Load to Page Buffer command */ 

* address = data; 

/* Actual write to page buffer */ 

/* This routine does not affect status registers. */ 

♦address * OxFFFF ; 

/* Write FFH after last operation to reset device to read array mode. */ 

) 
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void sequent ial_load_to_pagebuffer (int *device_address, char *start_address. 


int word_count, int* data) 

/* This procedure loads multiple words to a page buffer. */ 

/* device_address points to base of chip. */ 

{ 

/* Low byte of word_count must be 127 or fewer, high must be 0. */ 

/* word_count is zero-based counting, i.e word_count == 0 loads 1 word, */ 

/* word_count == 1 loads 2 words etc. */ 

/* High byte of word_count exists for future Page Buffer expandability. */ 

char counter; 

/* counter is used to keep track of words written. */ 

*device_address = 0X7171; 

/* Read Extended Status Registers command */ 

while (BIT_2 & * (device_address + 2)); 

/* Poll GSR until GSR. 2 = 0 (page buffer available). */ 

*device_address ■ 0XE0E0; 

/* Sequential Page Buffer Load command */ 

*start_address « word_ count; 

*start_address = 0; 

/* Automatically loads high byte of count register */ 

for (counter a 0; counter <= word_count; counter++) 

* (start_address + counter) = data [counter] ; 

/* Loop through data, writing to page buffer. */ 

/* This routine does not affect status registers. */ 

*device_address ■ OxPPPF; 

/* Write FFH after last operation to reset device to read array mode. */ 

> 
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int upload_device__information(int *address) 

/* This procedure uploads the device revision number to the variable DRC . */ 

/* This implementation differs in that it does not loop as in the */ 

/* algorithm. This is so the calling routine can have a chance to do */ 

/* error checking instead of looping forever waiting for the device */ 

/* complete the operation. */ 

{ 

int DRC = 0; 

/* DRC variable is used to return device revision status. */ 

int *block_base = base (address) ; 

/* Find pointer to base of 32K word block. */ 

♦address = 0X7171; 

/* Read Extended Status Registers command */ 

while ( ( BIT_3 & ♦(block_base +2)) && (!(BIT_7 & *(block_base + 2)))); 

/* Poll GSR until GSR. 3 = 0 (queue available) and GSR. 7 =1 */ 

/* (WSM available) . */ 

♦address - 0X9999; 

/* Device information Upload command */ 

♦address = 0XD0D0; 

/* Confirmation command */ 

♦address = 0X7171; 

/* Read Extended Status Registers command */ 

while (!(BIT_7 & *(block_base + 2))); 

/* Poll GSR until GSR. 7 = 1 (WSM not busy) */ 

if ( BIT_5 & * (block_base+2) ) return ( (* (block_base+2 ) & HIGH_BYTE ) << 8); 

/* if GSR. 5 = 1 operation was unsuccessful. Return GSR and 0 in DRC */ 

♦address = 0X7272; 

/* Swap page buffer to bring buffer with status information to top. */ 

♦address =* 0X7575; 

/* Read Page Buffer command */ 

DRC » ( ♦ (block_base + 2) & 0XPF00 « 8) + (* (block_base + 3) & LOW_BYTE); 

/* Put GSR in top byte of return value. */ 

/* User should check GSR for operation success */ 

/* Put- device revision code in bottom byte of return value. */ 

/* Note that device revision code was read from word 3 in page buffer. ; */ 

♦address = 0x5050; 

/* Clear Status registers command */ 

♦address = OxFFFF; 

/* Write FFH after last operation to reset device to read array mode. */ 

return (DRC) ; 

> 

292126-20 


3-691 



AP-377 


iny 

int RYBY_reconf igure ( int *address, int mode) 

{ 

/* this procedure changes the RY/BY# configuration mode to the given mode */ 


int GSR; 

/* the GSR variable is used to return the value of the GSR */ 

♦address = 0x7171; 

/* Read Extended Registers command */ 

while (BITJ3 & * (address+2) ) ; 

/* Poll GSR until GSR. 3 = 0 (queue available) */ 

♦address *» 0x9696; 

/* Enable RY/BY# configuration, next command configures RY/BY# */ 

switch (mode) { 

case RYBY_ENABLE_TO_LEVEL : 

♦address * 0x0101; 

/* Enable RY/BY# to level mode */ 

break; 


case RYBY_PULSE_ON_WRITEs 
♦address = 0x0202; 

/* Enable RY/BY# to pulse on write */ 

break; 

case RYBY_PULSE__ON_ERASE s 
♦address = 0x0303; 

/* Enable RY/BY# to pulse on erase */ 

break; 


case RYBY_DI SABLE : 
defaults 

♦address s 0x0404; 

/* Enable RY/BY# to disable */ 

break; 

} 

♦address = 0X7171; 

/* Read Extended Status Registers command */ 

while (!(BIT_7 & ♦(address + 2))) ; 

/* Poll GSR until GSR. 7 = 1 (WSM ready) */ 

GSR = * (address+2) & LOWJBYTE; 

/* put GSR into low, byte of return value */ 

♦address = 0x5050; 

/* Clear Status registers command */ 

♦address = OxFFFF; 

/* Write FFH after last operation to reset device to read array mode. */ 

return (GSR); 

} 


292126-21 


3-692 



“e 1 


AP-377 


int page_buf fer__swap(int * address) 

{ 

/* This routine attempts to swap the page buffers/ returning the value of 
/* the GSR before the operation in the upper byte and the value of the GSR 
/* after the operation in the lower byte for comparison 
/* For operation to be successful, the following must be true : 

/* (before) GSR.O = (after) 1GSR.0 
/* (after) GSR. 5 = 0 
int GSR; 

/* GSR variable is used to return contents of GSR before and after 
/* operation 

* address = 0x7171; 

/* Read Extended Registers command 

GSR a * (address +2) << 8; 

/* Put GSR into upper byte before page buffer swap 

♦address = 0x7272; 

/* write Page Buffer Swap command 

GSR I a (* (address+2) & LOW_BYTE) ; 

/ * Put GSR after operation into low byte for comparison 

♦address a 0x5050; 

/* Clear Status registers command 

♦address a OxFFFF; 

/* Write FFH after last operation to reset device to read array mode. 

return (GSR) ; 

> 
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ASM86 ASSEMBLY LANGUAGE DRIVERS 


Copyright Intel Corporation, 1993 

EXAMPLE ASM86 Drivers for the 28F016SA Flash memory component 
Original Author : Patrick Killelea, Intel Corporation 
Revised By : Taylor Gautier 

Revision 2.0, September 26, 1994 

NOTE : 

The code assumes 32-bit flat model protected mode for simplicity, 
i.e. ES contains 0 and EDI accesses the entire memory space. 


TEXT segment byte public 'CODE' 
assume cs:TEXT 


; Following is the structure by which all parameters are passed. 

params STRUCT 


erase_addr 

DD 

? 

write_addr 

DD 

? 

write_base 

DD 

? 

read_addr 

DD 

? 

read__base 

DD 

? 

lock_addr 

DD 

? 

data_addr 

DD 

? 

data 

DW 

? 

pagebuf f er_s tart_addr 

DB 

? 

word__count 

DW 

? 


base of block or device to 
erase 

address to write to 

base address of block written 

to 

address to read from 
base address of block read from 
base address of block to lock 
address of data to write 
data word to write 
start address in page buffer 
number of words for a multiple 
read/write 


params ENDS 


Defines 


; 


Error Codes 


NO_ERROR 

DW 

0 

VPP_LOW 

DW 

1 

OP_ABORTED 

DW 

2 

BLOCKJLOCKED 

DW 

3 

COMMAND_SEQ_ERROR 

DW 

4 

WP_LOW 

DW 

5 


Error Codes 


RYBY_ENABLE_TO_LEVEL 

DW 

1 

RYBY_PULSE_ON_WRITE 

DW 

2 

RYBY_PULSE_ON_ERASE 

DW 

3 

RYBY_DI SABLE 

DW 

4 


MACRO set_pin 

This macro pushes parameters needed for the set_pin routine, calls 
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set_pin, and then pops those parameters. set_pin is an implementation- 
dependent function which sets a given pin on the standard 28F016SA 
pinout HIGH = 1 or LOW = 0 . 

Data needed at the beginning of this macro: 
pin: 28F016SA pin number 

level: level to set pin 

Trashes : CX 


MACRO set_pin pin, level 


push 

pin 

; Push pin number 

push 

level 

; Push logic level of pin 

call 

near ptr set_pin 

; Call set_pin 

pop 

CX 

; Pop off parameters 

pop 

CX 



MACRO BSROFF 

This macro takes a pointer and increments it by two bytes. Use this 
macro for obtaining the offset to the BSR from a block base address 


MACRO BSROFF pointer 

add pointer, 2 

ENDM 


MACRO GSROFF 

This macro takes a pointer and increments it by four bytes. Use this 
macro for obtaining the offset to the GSR from a block base address 


MACRO GSROFF pointer 

add pointer, 4 ; GSR is 4 bytes above base 

; address 

ENDM 


MACRO GSRBSROFF 

This macro takes a pointer and increments it by two bytes. Use this 
macro for obtaining the offset to the GSR from the BSR 


MACRO GSRBSROFF pointer 

add pointer, 2 ; GSR is 2 bytes from BSR 

ENDM 


MACRO BSRGSROFF 

This macro takes a pointer and subtracts it by two bytes. Use this 
macro for obtaining the offset to the BSR from the GSR 


MACRO BSRGSROFF pointer 

sub pointer, 2 ; BSR is 2 bytes below GSR 


; BSR is 2 bytes above base 
; address 


ENDM 
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; PROCEDURE C S R_wo r d_by t e_wr i t e s 

; This procedure writes a byte to the 28F016SA. It also works with a the 
28F008SA. 

; Param fields needed: 

; params.data: data word to be written 

; params . writ e_addr: offset of 28F016SA address to write 

; Output: BX: CSR, duplicated in both high and low bytes 


CSR_word_byte_writes proc near 

mov EDI , params . write_addr 

mov ES : [EDI] , 1010H 

mov ES : [ EDI ] , params . data 

; Write data to 28F016SA. 


Write To Flash command 


WSM_busyl : 

mov AX,ES: [EDI] ; Read CSR 

test AX,80H ; Look at CSR. 7. 

jz short WSM_busyl ; Loop while CSR. 7 = 0. 

; Poll CSR until CSR. 7 = 1, indicat ingthat WSM is ready. 


mov BX # AX 

mov ES: [EDI]/5050H 

mov ES : [EDI ] , PFPPH 

ret 

CSR_word_byte_writes endp 


Return CSR in BX. 

Clear Status Registers command 
Reset device to read array mode 
Return to calling routine. 
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PROCEDURE CSR_block_erase 

This procedure erases a 64K byte block on the 28F016SA. 

It also works with a pair of 28F008SAS. 

Param fields needed: 

erase_address : offset of base of 28F016SA block to erase 
Output AX: CSR, duplicated in both high and low bytes 


CSR_block_erase proc near 


mov 

EDI , params . erase_addr 


mov 

ES: [EDI] ,2020H 

; Block Erase command 

mov 

ES: [EDI] , D0D0H 

; Erase Confirm command 

mov 

ES: [EDI] ,D0D0H 

; Resume Command per latest 
; errata update 


; Note that it is not strictly necessary to write an erase command to 
; the base of a block; any address within the block will do. 


WSM_busy2 : 

mov AX, ES: CEDI] 

test AX, 80H 

; System may issue an erase 
; different block 
j z short WSM_busy2 

* ; Poll CSR until CSR. 7 = 1, 


; Read CSR . 

; If CSR. 7 = 0, test sets ZF. 
suspend command here to read data from a 

; Loop while ZF is set. 
indicating that WSM is ready. 


mov ES: [EDI] , 5050H 
mov ES: [EDI] ,FFFFH 
ret 


; Clear Status Registers command 
; Reset device to read array mode 
; Return to calling routine 
; CSR is already in AX 


CSR_block_erase endp 
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; PROCEDURE CSR_erase_suspend_to__read 

; This procedure suspends an erase operation to do a read. 

; It also works with a pair of 28F008SAs. 

; It assumes that erase is underway. 

; Par am fields needed: 

; params .erase_addr : offset of 28F016SA block to erase 

; params . read_addr : offset of 28F016SA address to read 

; Output: BX: CSR, duplicated in both high and low bytes 

; CX: data read from the address in params. read_addr 

CSR_erase_su8pend_to_read proc near 
mov EDI , params . erase_addr 

mov ESs [EDI] , BOBOH 


AX/ ES : [EDI] ; Read CSR from any address. 

AX,80H 

short WSM_Jbusy3 

CSR until CSR. 7 ='l, indicating that WSM is ready. 


WSMjbusy3 : 
mov 
test 

jz 

; Poll 


; Set up offset of erase address. 
; Erase Suspend command 


test AX/ 4 OH 

pushf 

mov EDI, params. read_addr 

mov ES s [EDI ] , PPPPH 

mov CX, ES: [EDI] 

; Arbitrary number of reads can be 

popf 

j z short no_re sume_command 

mov ES: [EDI] ,D0D0H 

no_re sume_command : 

mov ES: [EDI] ,7 07 OH 

mov BX, ES : [EDI] 

ret 

CSR_erase_suspend_to_read endp 


7 test CSR. 6 

; save result for action later 

; Set up offset of read address. 
; Read Flash command 
; Do actual read; put result in 
? CX. 

done here . 

; get back the result of CSR. 6 
; only resume if operation 
; suspended 

; Erase Resume command 


; Read CSR command 
; Read CSR from any address. 

; Return CSR in BX. 

; Return to calling routine. 
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PROCEDURE lock_block 

This procedure locks a block on the 28F016SA. 

Param fields needed: 

params. lock_addr : offset of base of 28F016SA block to lock 
Output: BX: GSR in high byte and BSR in low byte 

AX, DX: trash 


lock_block 


proc near 


mov EDI , params . lock_addr 

mov ES: [EDI] ,7171H 

GSROFF EDI 


Set up offset of address. 
Read ESR command 
Point EDI to GSR 


(^unavailable : 

mov AX, ES : [EDI] 

test AX, 08H 

jnz short q_unavailable 

; Poll GSR while GSR. 3 = 1, indicating queue unavailable. 


set_pin 56,1 
set_pin 15,1 

; Wait for ramp if necessary. 

mov ES: [EDI] ,7777H 
mov ES: [EDI] ,D0D0H 
mov ES: [EDI] ,7171H 


Disable write protection. 
Enable Vpp 

Lock Block command 
Confirmation command 
Read ESR command 


WSM_busy4 : 


AX, ES : [EDI] 

AX, 80H 

short WSM_busy4 


Read GSR 


Poll GSR while GSR. 7 = 0, indicating WSM_busy. 


3V BH, AH ; Store GSR 

Look at BSR. 6 to. see if block successfully locked. 


mov 

ret 

lock_block 


BSRGSROFF EDI 

mov AX, ES : [EDI] 
mov BL, AL 

mov ES: [EDI] ,5050H 

mov ES : [EDI ] , FFFFH 


Point EDI to BSR from GSR 
Read BSR 
Store BSR 

Clear Status Registers command 
Reset device to read array mode 
Return to calling routine. 
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PROCEDURE lock_status_upload_to__BSR 

This procedure uploads status information into the ESR from non-volatile 
status bits. 

Param fields needed: 

params . lock_addr: offset of 28F016SA device 
Output: BX: GSR in high byte and BSR in low byte 

AX, CX, DX: trash 


lock_status_upload_to_BSR proc 

mov EDI , params . 1 ock_addr 

mov ES: [EDI],7171H 

GSROFF EDI 


Read ESR command. 
Point EDI to GSR 


q_unavailablel s 

mov AX, ES : [EDI] ; Read GSR 

test AX,08H 

jnz short a_unavailablel 

; Poll GSR while GSR. 3 = 1, indicating queue unavailable. 


ES: [EDI] , 9797H 
ES: [EDI] ,D0D0H 
ES: [EDI] ,7171H 


Lock-status Upload command 
Confirmation command 
Read ESR command 


WSM_busy5 : 


AX, ES : [EDI] 

AX, 80H 

short WSM_busy5 


Read GSR 


Poll GSR while GSR. 7 = 0, indicating WSM_busy 


mov AX, ES: [EDI] 

mov BH, AL 

BSRGSROFF EDI 

mov AX, ES : [EDI] 

mov BL, AL 

mov ES: [EDI] , 5050H 

mov ES : [ EDI ] , FFFFH 

ret 

lock_status_upload_to_BSR endp 


Read GSR 

Store in high byte of BX 
Point EDI to BSR from GSR 
Read BSR 
Store BSR 

Clear Status Registers command 
Reset device to read array mode 
Return to calling routine. 
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■ 

PROCEDURE 

ESR_word_write 




■ 

This procedure writes a word to the 28F016SA. 


■ 

Param fields 

needed: 




m 


params .writ e_base: offset 

of 

base of 28F016SA block to write 1 

■ 


params.data: data word to 

write 




params . writ e_addr: offset 

of 

28F016SA address to write 

■ 

Output : 

BX: GSR in high byte and BSR 

in 

low byte 

■ 


AX, BX, CX, : trash 





2SR word write 

proc near 




push 

SI 




mov 

EDI , params . write_addr 


7 

Set up offset of write address. 

mov 

ES : [EDI] , 7171H 


7 

Read Extended Status Registers 




7 

command 

mov 

EBX, params .write_base 


7 

Get base of block to write 

BSROFP 

EDI 




mov 

CX, params. word_count 




mov 

SI, params.data 


; 

params.data should be a pointer 




7 

to an array of data to write to 




; 

the flash array 

q_unava i 1 ab 1 e 2 





mov 

AX, ES : [EBX] 


; 

Read BSR 

test 

AX, 08H 




jne 

short q_unavailable2 




;Loop while BSR.3 of target address 

= 

1, meaning queue full. 

mov 

ES : [EDI] , 1010H 


7 

Write Byte command 

movsw 



7 

write data and increment EDI, 




§ 

SI 

loop 

q__unavailable2 


9 

loop until CX = 0 

mov 

EDI , params . write_base 


7 

Set up offset of block base 




7 

in case we wrote to the end of 




/ 

the device, in which case EDI 




7 

will now be 2 bytes past the 




7 

device 

mov 

ESs [EDI] ,7171H 


/ 

Read ESR command 

BSROFF 

EDI 


7 

Point EDI to BSR 

block__busy: 





mov 

AX, ES : [EDI] 


; 

Read BSR 

test 

AX, 0080H 




jz 

short block_busy 




;Poll BSR while BSR.7 of target address 

is 0, meaning block busy 

mov 

BL, AL 


/ 

Store BSR in BL 

6SRBSR0FF EDI 


7 

Point EDI to GSR from BSR 

mov 

BH, ES : [EDI] 


7 

Read GSR and store in BH 

mov 

ES:[EDI],5050H 


7 

Clear Status Registers command 

mov 

ES : [EDI] , OFFFFH 


7 

Reset device to read array mode 

pop 

SI 




ret 



7 

Return to calling routine. 

ESR_word_wr i t e 

endp 
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PROCEDURE two_byte_write 

This routine is used when BYTE# is low, i.e. the 28F016SA 
is in byte mode, to emulate a word write. 

Param fields needed: (assume existence of byte fields data_high and 
data low) 

params .write_base: offset of base of 28F016SA block to write 
params .data_high: high data byte to write 
params .data_low: low data byte to write 
params . writ e_addr: offset of 28F016SA address to write 
Output: BX: GSR in high byte and BSR in low byte 

AX, CX, DX: trash 


two_by t e_wr i t e proc 


mov EDI , params . write_base 

mov ESs [EDI] , 0071H 

BSROFP EDI 

mov CX, params. word_count 


; Set up offset of address. 

; Read ESR command 
; Point EDI to BSR 
; use word_count as byte_count 


QL_unava liable 3 s 

mov AX,ES: [EDI] ; Read BSR 

test AX, 08H 

jnz short q_unavailable3 

; Loop while BSR. 3 of target address is 1, meaning queue full. 


mov ES : [EDI] , OOFBH 

; Write low byte of data word 

mov EDI , params • wr i te_addr 

mov ES : [EDI ] , params . data_high 

mov ES : [ EDI ] , params . data_low 


; Two-byte write command 
; Set up offset of address. 


; 28F016SA automatically loads alternate byte of data register and 
; initiates write. Now we check for successful completion. 


mov ESs [EDI] , 7171H 

mov EDI, params. writejbase 

BSROFF EDI 


; Read ESR command 


Point EDI to BSR 


block_busy2 s 

mov AX, ESs [EDI] ; Read BSR 

test AX, 80H 

jz short block Jbusy2 

; Poll BSR while BSR. 7 of target address is 0, meaning block busy. 


mov BH, ESs [EDI] 

GSRBSROFF EDI 

mov BL, ESs [EDI] 

mov ESs [EDI] ,5050H 

ret 

two_byte_write endp 


Read BSR 

Point EDI to GSR from BSR 
Read and store GSR 
Clear Status Registers command 
Return to calling routine. 
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PROCEDURE ESR_pagebuf f er_write 

This procedure writes from page buffer to flash. 

Param fields needed: 

params .write_base: offset of base of 28F016SA block to write 
params .pagebuf f er_word_count : number of words to write to flash 
params . writ e_addr: offset of 28F016SA address to write 
Output: BX: GSR in high byte and BSR in low byte of BX 

AX, CX, DX: trash 


ESR __pagebuf fer_write proc near 

push SI ; Save old SI. 

mov SI,params.word_count ; Use SI to count words. 

; Address is where in 28F016SA flash array to begin write. The lowest 
; byte of this must be identical to the start address in the page buffer. 

; Low byte of byte_count must be 256 or fewer, high must be 0. 

; High byte exists for future Page Buffer expandability. 

mov EDI,params.write_base ; Offset of block base address, 

mov ESs [EDI] ,7171H ; Read ESR command 

BSROFF EDI 

q_unavailable4 : 

mov AX, ES : [EDI] ; Read BSR 

test AX, 8 

jne short q_unavailable4 

; Loop while BSR. 3 of target address is 1, meaning queue full. 


mov ES: [EDI] , 0C0CH ; Page Buffer Write command 

mov ES: [EDI] , SI ; Write count k 

;Only AO valid here; low or high byte loaded depending on AO. 

mov ES : [EDI] , 0 

;A0 internally complemented; alternate byte loads; write starts. 

mov ES: [EDI] ,7171H ; Read ESR command 


block_Jbusy3 : 

mov AX,ES: [EDI] 

test AX, 80H 

j z short block__busy3 

; Loop while BSR. 7 of target address is 


Read BSR 

0, meaning block busy. 


mov BL, ES : [EDI] 

GSRBSROFF EDI 

mov BH,ES: [EDI] 

mov ES: [EDI] ,5050H 

mov ES : [EDI] , OFFFFH 

pop SI 

ret 

ESR_pagebuf fer_write endp 


Read BSR 

point EDI to GSR from BSR 
Read GSR 

Clear Status Registers command 
Reset device to read array mode 
Retrieve old SI . 

Return to calling routine. 
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■ 


1 

PROCEDURE 

ESR_block_erase 

— 

m 

This procedure erases a block on the 28F016SA. j 

■ 

Par am fields 

needed : 


■ 


params .erase_addr : offset of 

base of 28F016SA block to erase 

■ 

Output : 

BX: GSR in high byte and BSR 

in low byte 

1 


AX, DX: trash 


] 

2SR_block_erase proc near 


mov 

EDI , params . erase_addr 

; Set up offset of address. 

mov 

ES: [EDI] , 7171H 

; Read ESR command 

BSROPP 

EDI 

; point EDI to BSR 

ci_junavailable5 

• 


mov 

AX, ES : [EDI] 

; Read BSR 

test 

AX, 08H 


jne 

short q_unavailable5 


; Loop while BSR.3 of target address 

is 1, meaning queue full. 

mov 

ES: [EDI] , 2020H 

; Block Erase command 

mov 

ES: [EDI] ,D0D0H 

; Confirm command 

mov 

ES: [EDI] , DODOH 

; Resume command, per latest 



; errata update 

mov 

ES: [EDI] ,7171H 

; Read ESR command 

;Note that EDI still points to BSR 


block_busy4 : 



mov 

AX,ES: [EDI] 

; Read BSR 

test 

AX, 80H 


jz 

short block_busy4 


; Loop while BSR. 7 of target address 

= 0, i.e. block busy. 

mov 

BL, AL 

; Store BSR in BL. 

GSRBSROPF EDI 

; point EDI to GSR from BSR 

mov 

BH, ES : [EDI] 

; Read GSR, store in BH 

mov 

ES: [EDI] , 5050H 

; Clear Status Registers command 

mov 

ES : [EDI] , OPPPPH 

; Reset device to read array mode 

ret 


; Return to calling routine. 

ESRjblock_erase endp 
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PROCEDURE ESR_erase_all_unlocked_blocks 

This procedure erases all the unlocked blocks on a 28F016SA. 

params . erase_addr : offset of base of device to erase 
Output: CX: GSR in both high byte and low byte 

BX: Failure list 
AX, DX: trash 


ESR_erase_all_unlocked_blocks proc 
push SI 

mov EDI , params . erase_addr 

mov ES: [EDI] ,7171H 

BSROFF EDI 


near 

; Save old SI. 

; erase_addr should be set to 
; the device address 
; Read ESR command 
; point EDI to BSR 


q_unavailable6 s 

mov AX, ES : [EDI] ; Read BSR 

test AX, 08H 

jnz short (^unavailable 6 

; Poll BSR while BSR. 3 of target address is 1, meaning queue full. 


mov ES s [EDI ] , A7A7H 
mov ES: [EDI] ,D0D0H 
mov ES: [EDI] ,7171H 
GSRBSROFF EDI 


Full -chip Erase command 
Confirm command 
Read ESR command 
Point EDI to GSR from BSR 


WSM_busy6 : 
mov 
test 
jz 

; loop 


AX, ES : [EDI] ; Read GSR 

AX, 80H 

short WSM_busy6 

until GSR. 7 indicates WSM is ready 


mov AX,ES: [EDI] ; Read GSR for operation success 

test AX, 20H 

jz short operation_successful 


; if 
7 go 

xor 

xor 

mov 

mov 


GSR. 5 = 1, meaning that the operation was unsuccessful, 
through blocks, looking for the ones which didn't erase. 


SI, SI 
EBX, EBX 
EDX, 1 

EDI, params. erase_addr 


Clear SI. 

Clear EBX for failure list 
use EDX as mask to set failures 
start at the beginning of the 


mov CX, 32 
BSRGSROFF EDI 


device 

32 blocks in 28F016SA 
point EDI to BSR from GSR 


look_f or Jbad_erase : 

; Looking at each BSR. 3 for operation success. 

mov AX,ES: [EDI] ; Read BSR 

test AX, OSH 

j z short ok_erased 


; record number of bad block here 

or EBX, EDX 

ok__erased: 

shl EDX 
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add 

EDI, 10000H 

; Increment EDI to next block 

loop 

look_for_bad_erase 




operation_successful : 




mov 

EDI , params . erase_address 

; reset 

EDI to 

device address 

GSROFF 

EDI 

; point 

EDI to 

GSR 

mov 

BX, ES: [EDI] 




mov 

ES: [EDI] , 5050H 

; Clear 

Status 

Registers command 

mov 

ES : [EDI] , OFFFFH 

; Reset 

device 

to read array mode 

pop 

SI 



lV 

ret 


; Return to calling routine. 

ESR_eraee_al 1_ 

unlocked_blocks endp 
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■ 

PROCEDURE 

ESR_suspend_to_read_array 



This procedure suspends an erase on the 28F016SA. 

■ 

Param fields 

needed : 


■ 


params . erase_addr : offset of 

base of erasing 28F016SA block 

■ 


params . read_addr : offset of 28F016SA address to read 

■ 

Output : 

BX: GSR in high byte and BSR 

in low byte (of erase block) 

■ 


CX: data read from flash 


■ 


AX, DX: trash 



2SR_suspend_to_ 

_read_array proc near 


mov 

EDI , params . erase_addr 


BSROFF 

EDI 

; point EDI to BSR 

mov 

ES: [EDI] , 7171H 

; Read ESR command 

block_busy5 s 



mov 

AX, ES : [EDI] 

; Read BSR 

test 

AX, 80H 


jz 

block__busy5 


; Loop 

if BSR. 7 of target address is 

0, meaning block busy. 

mov 

ES: [EDI] ,0B0B0H 

; Operation Suspend command 

GSRBSROFF EDI 

; Point EDI to GSR from BSR 

WSM_busy7 : 



mov 

AX, ES : [EDI] 

; Read GSR 

test 

AX, 80H 


jz 

short WSH_busy7 


; Poll 

GSR until GSR. 7 indicates WSM 

is ready. 

test 

AX, 40H 


pushf 


; store result for later 

mov 

EDI , params . read__addr 

; Set up offset of read address. 

mov 

ES: [EDI] ,FFFFH 

; Write Read Flash Array command 

mov 

CX, ES : [EDI] 

; Read the data 

mov 

EDI , params . erase_addr 

; Set up offset of erase address. 

popf 



jz 

short nothing_suspended 


; If GSR. 6 indicates an operation was suspended on this device, j 

; then 

resume the operation. 


mov 

ES: [EDI] ,0D0D0H 

; Resume command 

nothing_suspended : 


mov 

BH, AH 

; Store GSR in BH. 

sub 

EDI, 2 

; Move EDI down to read BSR. 

mov 

BL, ES: [EDI] 

; Read BSR and store in BL 

mov 

ES: [EDI] , 5050H 

; Clear Status Registers command 

mov 

ES: [EDI] ,0FFFFH 

; Reset device to read array mode 

ret 


; Return to calling routine. 

ESR_suspend_to. 

_read_array endp 
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PROCEDURE ESR_automatic_erase_suspend_to_write 

This procedure writes to one block while another is erasing. 

Param fields needed: 

params.data: data word to write to 28F016SA 



par ams . eras e_addr : offset of 

28F016SA address to erase 


params.write_addr : offset of 

28F016SA address to write 

; Output : 

BX: GSR in high byte and BSR 
AX, DX: trash 

in low byte 

ESR_automat ic_ 

erase_8uspend_to_write proc 

near 

mov 

EDI , paraxns . erase_addr 

; Set up offset of address. 

mov 

ES: [EDI] ,7171H 

; Read ESR command 

BSROFF 

EDI 

; point EDI to BSR 

<X_unavailable7 

• 


mov 

AX,ES: [EDI] 

; Read BSR 

teat 

AX, 08H 


jnz 

short a_unavailable6 


; Loop while BSR.3 of target address 

is 1, meaning queue full. 

mov 

ES: [EDI] ,2020H 

; Write Erase Block command 

mov 

ES: [EDI] ,D0D0H 

; Erase Confirm command 

mov 

EDI , params . write_addr 

; Set up offset of address. 

mov 

ES: [EDI] ,4040H 

; Write Word command 

mov 

ES : [EDI ] , params . data 

; Write actual data 

; Erase will suspend, write will take place, 

then erase resumes. 

mov 

EDI , params . erase_addr 

; Set up offset of address. 

mov 

ES: [EDI] , 7171H 

; Read ESR command 

BSROFF 

EDI 

; point EDI to BSR 

block_busy6 : 



mov 

AX, ES: [EDI] 


test 

AX, 80H 


jz 

short block_busy6 


; Loop 

while BSR. 7 of target address 

is 0, meaning block busy. 

mov 

BH, ES: [EDI] 

; Read BSR 

GSRBSROFF EDI 


mov 

BL, ES: [EDI] 

; Read and store GSR 

mov 

ES: [EDI] ,5050H 

; Clear Status Registers command 

mov 

ES : [EDI] , OFFFFH 

; Reset device to read array mode 

ret 


; Return to calling routine. 

ESR__automat ic_ 

erase_suspend_to_write endp 
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PROCEDURE 

ESR_ful l_status_check_f or_data_ 

_write 


This procedure performs a full 

status check 

of the Extended Status 


Register 





Param fields 

needed: 





par ams .writ e_ba s e 

offset of base of device 


Output : 

CX : errorcode 





AX/ BX: trash 




2SR_full_status_check_for_data_write proc near 

mov 

EDI, params. write. 

_base 


mov 

ES2[EDI], 7171H 


Read ESR command 

GSROFF 

EDI 


Point EDI to GSR 

WSM_busy8 : 




mov 

AX,ES2 [EDI] 


Read GSR 

test 

AX, 80H 



jz 

short WSM_busy8 



; Poll 

GSR while GSR. 7 = 

0/ indicating WSM busy. 

BSRGSROFF EDI 


Point EDI to BSR from GSR 

mov 

AX, ES 2 [EDI] 



test 

AX, 04H 


BSR.2 = 1 indicates VPP_LOW 

jz 

vpp_high 



mov 

CX, VPP_LOW 



jmp 

cont 



vpp_high : 




test 

AX, 10H 


BSR. 4 = 1 indicates operation 

jz 

op_not_aborted 


was aborted 

mov 

CX, OP_ABORTED 



jmp 

cont 



op_not_aborted 

• 



get_pin WPB 


get_pin returns output in BX 

cmp 

BX, 00H 



je 

wpb_high 


no error if WPB is low 

jmp 

no_error 



wpb_high: 




test 

AX, 4 OH 


; BSR. 6 indicates BLOCK_LOCKED 

jz 

no_error 



mov 

CX, BLOCK_LOCKED 



jmp 

cont 



no_error s 




mov 

CX, NO_ERROR 



cont s 




GSRBSROFF EDI 


; Point EDI to GSR from BSR 

WSM_busy9 2 




mov 

AX, ES2[EDI] 
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test AX, 80H 

jz WSM_busy9 

; Poll GSR while GSR. 7 = 0, indicating WSM busy. 


mov ES: [EDI] ,5050H 
ret 

ESR_full_status_check_for__data_write endp 


Clear Status Registers command 
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PROCEDURE ESR_full_status_check_for_erase 

This procedure performs a full status check of the Extended Status 
Register 

Param fields needed: 

params .write_base: offset of base of device 
Output: CX : errorcode 

AX, BX: trash 


ESR_full_status_check_for_eraBe proc near 


mov 

CX, NO_ERROR 


mov 

EDI, params .writ e_base 


mov 

ES : [EDI] , 7171H 

Read ESR command 

GSROFF 

EDI 

Point EDI to GSR 

WSM_busylO : 

mov 

AX, ES : [EDI] 

Read GSR 

test 

AX, 80H 


jz 

short WSM_busylO 


; Poll 

GSR while GSR. 7 = 0, indicating 

WSM busy. 

BSRGSROFF EDI 

Point EDI to BSR from GSR 

mov 

AX,ES: [EDI] 


test 

AX, 04H 

BSR.2 = 1 indicates VPP_LOW 

jz 

vpp_high 


mov 

CX, VPP_LOW 


jmp 

cont 


vpp_high : 

test 

AX, 10H 

BSR. 4 = 1 indicates operation 

jz 

op_not_aborted ; 

was aborted 

mov 

CX, OP_ABORTED 


jmp 

cont 


op_not_aborted 

• 


£ret_pin WPB ; 

get_pin returns output in BX 

cmp 

BX, 00H 


jne 

no_error ; 

BSR. 6 and WPB LOW indicates 

test 

AX, 40H 

BLOCK.LOCKED 

jz 

no__error 


mov 

CX, BLOCK_LOCKED 


jmp 

cont 


no_error : 

mov 

ES : [EDI] , 7070H 

Read CSR command 

mov 

AX, ES : [EDI] 


test 

AX, 10H 

CSR.4 and CSR. 5 indicate 

jz 

cont ; 

command sequence error 

test 

AX, 20H 


jz 

cont 


mov 

CX, COMMAND_SEQ_ERROR 


cont : 

mov 

ES: [EDI] , 7171H 

Read ESR command 
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; EDI still points to GSR 
WSM_busyll: 

mov AX, ES: [EDI] ; Read GSR 

test AX, 80H 

jz short WSM_busyll 

; Poll GSR while GSR. 7 = 0, indicating WSM busy. 


mov ES : [EDI] , 50 5 OH 

ret 

ESR_full_status_check_for_erase endp 


Clear Status Registers command 
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PROC EDURE s equen t i a 1_1 oad_t o_pagebu f f er 

This procedure loads the page buffer. 

Param fields needed: 


; params .write_addr : offset of origin of device 

; params .data_addr: pointer to data to be written to pg buffer 

; params .pagebuff er__word_count : number of words to write to pg 

buffer 

; params .pagebuff er_start_addr: starting pb address of data to 

write 

; Output: AX, BX, DX: trash 


sequential_load_to_pagebuffer proc near 


sub 

SP, 2 

; Set aside room for counter. 

mov 

byte ptr [BP-1],0 

; Clear high byte of counter 
; word . 

push 

SI 

; Save old SI. 

mov 

SI , word_count 

;Put # of words to write in SI 

; SP+6 

must be 128 or fewer. 

SP+7 must be 0 . 

; High byte exists for future 

Page Buffer expandability. 

mov 

EDI , params . write_addr 

; Set up offset of device 
; address. 

mov 

ES: [EDI] ,7171H 

; Read ESR command 


; Commands to control entire 28F016SA do not need to be written to any 
; particular address. 

GSROFF EDI ; point EDI to GSR 

wait_f or_pb2 s 

mov AX, ES: [EDI] ; Read GSR 

test AX, 4 

jz short wait_for_pb2 

; Poll GSR until GSR. 2 indicates that a page buffer is available. 

mov ES: [EDI] ,E0E0H ; Sequential Page Buffer Load 

; cmd . 

; Loads high or low byte of count register, depending on AO. 

mov ES: [EDI] ,SI ; Write 

; Automatically loads alternate byte of count register. 

mov ES: [EDI] ,SI ; Write 

; Loop through data, writing to page buffer. 

mov byte ptr [BP-1],0 ; Load counter, 

jmp short compare 

not_done : 

mov 

mov 
cbw 
add 
cwd 
mov 

mov 
mov 
mov 
add 


DX,word ptr [BP-2] ; Put current val . of counter in 

; DX. 

AL, params. pagebuff er_start_addr ; Get starting address in pb. 

; Convert it to a word. 

AX, DX ; Add to get abs. address in pb. 

. ; Convert AX to a double word. 
BP+12,DX ; Store segment of pb address 

; ( 0 ). 

BP +10, AX ; Store offset of pb address. 

AX, word ptr [BP-2] ; Get current value of counter. 

EBX,params.data_addr ; Get address of where data is. 

EBX, AX ; Add value of counter to it. 
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PROCEDURE upload_device_information 

This procedure uploads the device revision code into the page buffer. 
Param fields needed: 

params.write_base: offset of 28F016SA device 
Output: DX: Device revision number 

AX, CX: trash 


upload_device_information proc near 
xnov EDI , params . write_base 

mov ES: [EDI] /7171H 

inc EDI 

inc EDI 


Read ESR command. 
Move EDI up to GSR. 


<I_unavailable8 : 

mov AX,ES: [EDI] ; Read GSR 

test AX, 8 

jne short q_unavailable8 

; Poll GSR while GSR. 3 = 1, indicating queue unavailable. 


WSM_busyl2: 

mov AX, ES : [EDI] ; Read GSR 

test AX, 80H 

je short WSM_busyl2 

; Poll GSR while GSR. 7 = 0, indicating WSM busy. 


mov ES: [EDI] , 9999H 

mov ES: [EDI] ,D0D0H 

mov ES: [EDI],7171H 

WSM_busyl3 : 

mov AX, ES: [EDI] 

test AX, 80H 

jz short WSM_busyl3 

; Poll GSR while GSR. 7 = 0, 


; Lock-status Upload command 
; Confirmation command 
; Read ESR command 

; Read GSR 

indicating WSM__busy 


mov ES: [EDI] ,7272H ; Swap Page Buffer command 

mov ES: [EDI] ,7575H ; Read Page Buffer command 

mov DX, [params .write_base+3] ; Put revision number in DX 

; Revision number is 3 words above write_base in page buffer space. 

; GSR. 5 should be checked for operation success before using revision 
; number . 

ret ; Return to calling routine. 

upload_device_information endp 
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PROCEDURE RYBY_reconf iguration 

This procedure reconfigures the RY/BY# output mode 
Param fields needed: 

params .write_base: offset of 28F016SA device 
params.data: reconfiguration define 
Output : AX : GSR 


RYBY_reconfiguration proc near 


mov 

EDI, params .write_base 


mov 

ES : [EDI] , 7171H 

; Read ESR command 

GSROFF 

EDI 

; Point EDI to GSR 

Q_unavai lable9 

• 


mov 

AX, ES : [EDI] 

; Read GSR 

test 

AX, 8 

; test bit 3 

jne 

short q_unavailable9 


mov 

ES : [EDI] , 9696H 

; RY/BY# reconfiguration code 

cmp 

params.data, 01 


jne 

switchl 


mov 

ES : [EDI] , 0101H 

; Enable RY/BY# to level mode 

jmp 

break 


switchl : 

cmp 

params.data, 02 


jne 

switch2 


mov 

ES: [EDI] , 0202H 

; Enable RY/BY# to pulse on write 

jmp 

break 


switch2 : 

cmp 

params.data, 03 


jne 

default 


mov 

ES : [EDI] , 0303H 

; Enable RY/BY# to pulse on erase 

jmp 

break 


default j 

mov 

ES : [EDI] , 0404H 

; Enable RY/BY# to disable 

break: 

mov 

ES : [EDI] , 7171H 

; Read ESR command 

WSM_busyl4 : 

. mov 

AX, ES : [EDI] 

; Read GSR (EDI already points to 

test 

AX, 80H 

; GSR) 

jz 

short WSM_busyl4 


mov 

ES: [EDI] , 5050H 

; Clear Status Registers command 

mov 

ES: [EDI] ,0FFFFH 

; Reset device to read array mode 

RYBY_reconf iguration endp 
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; PROCEDURE page_buf f er_swap 

; This procedure swaps the page buffers. 

; Param fields needed: 

; params.write_base: offset of 28F016SA device 

; Output: AX : GSR before operation in high byte, GSR in low 

; byte after operation 

page_buffer_swap proc near 


mov 

EDI, params .write_base 


mov 

ES: [EDI] , 7171H 

; Read ESR command 

GSROFF 

EDI 

; Point EDI to GSR 

mov 

AH,ES: [EDI] 

; Read GSR and store in AH 

mov 

ES : [EDI] , 7272H 

; Page Buffer Swap command 

mov 

AL,ES: [EDI] 

; Read GSR and store in AL 

mov 

ES: [EDI] , 5050H 

; Clear Status Registers command 

mov 

ES: [EDI] ,0FFFFH 

; Reset device to read array mode 


page_buffer_ewap endp 
TEXT ends 
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APPENDIX A 
FUNCTION CHANGES 


OLD FUNCTION NAME 

NEW FUNCTION NAME 

compatible_block erase 

CSR_block erase 

compatible suspend to read 

CSR_erase_suspend_to_read 

compatible_byte_write 

CSR word_byte_writes 

ESR block erase 

N/C 

ESR_status check after erase * 

ESR_full__status_check for___erase 

ESR status check after__write * 

ESR f u 1 1 status check for data write 

ESR_suspend to read 

ESR_suspend_to read_array 

ESR word write 

N/C 

erase all unlocked blocks 

ESR erase all unlocked blocks 

lock_block 

N/C 

status upload 

lock status upload to BSR 

pagebuffer write to flash 

ESR_pagebuffer write 

sequential_pagebuffer load 

sequential load to pagebuffer 

single__pagebuffer_Joad 

single load to pagebuffer 

two byte write 

N/C 

write during erase 

ESR automatic erase suspend to write 


NOTE: 

*code added in Rev 2.0. 
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APPENDIX B 
Glossary of Terms 


BSR: 

CSR: 

EDI: 

ESR: 

GSR: 

RY/BY#: 

Vpp: 

WSM: 


Block Status Register. Each BSR reflects the status of its 64KB block. 

Compatible Status Register. The CSR reflects the status of the entire device and is identical in format 
to the Status Register of the 28F008SA. 

Extended Data Index register on 80386 and higher CPUs. 

Extended Status Registers. The GSR and BSRs. 

Global Status Register. The GSR provides additional information about entire device status. 

Output pin from the 28F016SA indicating status of current operation. 

Voltage necessary to program the 28F016SA (12V). 

Write State Machine. On-board processor automating write, erase and other functions. 


3-720 



AP-377 


iny 


APPENDIX C 


ADDITIONAL INFORMATION 


Order Number 

Document 

290489 

28F016SA Datasheet 

292124 

AP-375 Upgrade Considerations from the 28F008SA to the 28F016SA 

297372 

28F016SA User’s Manual 

292127 

AP-378 System Optimization Using the Enhanced Features of the 28F016SA 

294016 

ER-33 Flash Memory Technology ETOX IV 

290528 

28F016SV Datasheet 

292144 

AP-393 28F01 6SV Compatibility with 28F01 6SA 


REVISION HISTORY 


Number 

Description 

001 

Original Version 

002 

Updated Version of C and ASM code, compatible with 28F016SV/XS/XD 
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1.0 INTRODUCTION 


1.1 Overview of Enhanced Features 

The Intel family of flash memory components has a 
new member: the 28F016SA 16-Mbit FlashFile™ 
memory. The 28F016SA provides superior write per- 
formance and ultra high density, malting possible fast- 
er, smaller form-factor flash memory sub-systems than 
ever before. Flash memory cards and flash drives will 
reach higher levels of performance with the 28F016SA, 
while new applications will arise to take advantage 


of special 28F016SA features, such as low power opera- 
tion, data security, and flexibility of use. 

This application note describes in detail the new fea- 
tures of the 28F016SA and the benefits of these features 
to the system designer and system end-user. Readers 
wishing technical specifications are referred to the 
28F016SA data sheet; readers wishing usage guidelines 
are referred to the 28F016SA User’s Manual. 

The following table summarizes the enhanced features 
and advantages of the 28F016SA: 


Table 1. Feature vs Value Summary 


Feature of 28F016SA 

Advantage to System Designer 

Advantage to End-User 

Faster Writes, 
Approaching Hard 
Disk Write 
Performance 

• Wider Range of Applications 

• Faster Installation of Embedded Code 

• Quicker Code Update in the Field over a 
Modem Line 

• Faster Write to Flash Cards, 
Flash Drives 

• Faster Formatting of Cards, 
Drives 

Higher Density, 
Enabling High 
Capacity Solid State 
Mass Storage 

• New Products Possible 

• Increased Data Acquisition Capacity 

• Higher Capacity Cards, Drives, Resident 
Flash Array (RFA) 

• Fewer Parts = Better Manufacturability 
and Reliability 

• Smaller Systems, Lower 
Weight, Lower Power 
Consumption 

• More Room for User Data on 
Flash Cards and RFAs 

Low Power . 
Consumption 

• Optimized System Poer Budget 

• Longer Battery Life 

• Smaller Batteries 

• Less Weight 

Code/ Data Protection 

• Opportunity to Ship Device Drivers and 
Application Code Bundled with Cards, 
RFAs and Embedded Systems 

• User is Safe From Accidental 
Modification or OS or 
Application Code 

• Data File Security 

Flexible System 
Interface 

• More Compact Systems 

• Optimal Bus Loading 

• More Detailed Status Information 

• 28F01 6SA— -Based Cards Can 
Be Used to Transfer Data 
between 3.3V Portable and 
5.0V Desktop PCs 
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1 .2 Glossary of T erms 

APS: Automatic Power Savings feature of 28F016SA. 

CSR: Compatible Status Register. The CSR reflects the 
status of the entire device and is identical in format to 
the Status Register of the 28F008SA. 

ESR: Extended Status Registers. The GSR and BSRs. 

GSR: Global Storage Register. The GSR provides addi- 
tional information about entire device status. 

BSR: Block Status Register. Each BSR reflects the 
status of its 64 KB block. 

CEq#: Chip Enable 0. CEq# and CEi# both need to 
be asserted to activate the 28F016SA. 

CUI: Command User Interface. Interface between the 
microprocessor and the internal memory operation. 

FFS: FlashFile System. Software providing file struc- 
ture and maintenance for mass storage with flash. 

OE#: Output Enable pin. 

RFA: Resident Flash Array. Array of flash compo- 
nents permanently resident on a motherboard. 

RFX: Resident Flash XIP. 

RFD: Resident Flash Disk. 

RP#: Reset Power-Down pin. Master enable switch 
for the 28F016SA. Formerly called PWD# on 
28F008SA. 

RY/BY#: Configurable Ready/Busy pin, giving status 
of pending operations. 

WE#: Write Enable pin. 

WP# : Write Protect pin. Can be used to override block 
lock status bit in BSRs. 

WSM: Write State Machine. On-board “processor” au- 
tomating Write, Erase, Lock and other functions. 

XIP: Execute in Place. 


2.0 INNOVATIVE ARCHITECTURAL 
ENHANCEMENTS 

While the 28F016SA is compatible with the 28F008SA, 
the 28F016SA includes hardware enhancements which 
provide the basis for the features described in the fol- 
lowing sections of this document. 

The hardware enhancements include: 

• An improved Command User interface 
® Two Page Buffers 

• Queue Registers 

• Extended Status Registers 

• Several new pins, implementing new functions. 


The Command User interface (CUI) of the 28F016SA 
understands 17 new commands which simplify usage or 
provide access to entirely new functions. The CUI is, 
however, still accessed in the same manner as with the 
28F008SA and all of the 28F008SA commands are val- 
id for the 28F016SA. 

Two page buffers of 256-bytes each greatly increase the 
effective write speed. The page buffers are written at 
SRAM speeds. Writes from full page buffers to the 
flash array can be initiated with a single command and 
will complete independently, freeing the CPU for other 
tasks. 



The Queue Registers can accept up to two (2) addition- 
al commands while the current command is executing. 
This allows a short sequence of commands to be issued 
quickly, regardless of whether the internal Write State 
Machine (WSM) is actually ready to process a com- 
mand. The WSM will automatically fetch the next 
command from the queue when it is ready. 


The Extended Status Registers provide more detailed 
information about the state of the 28F016SA, such as 
the state of the queue and which page buffer is selected. 
A Global Status Register and a set of thirty-two (32) 
Block Status Registers give the system designer the 
ability to use each 64-Kbyte block as an independent 
memory. 
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Architectural evolution is indicated with shaded functional blocks. 
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Figure 1. 28F016SA Block Diagram 
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3.0 ENHANCED WRITE 

The write performance of the 28F016SA is far superior 
to that of previous flash components. For a direct write 
to flash, the 28F016SA has a 6 jus average word write 
time, a 33% improvement over the 28F008SA. Much 
more significant, however are the on-board page buffers 
and Auto Erase Suspend capability, which boost write 
performance much more by reducing system overhead. 

3.1 Page Buffer Writes to Flash 

The 28F016SA incorporates two page buffers of 256- 
bytes each. The page buffers can be wrirten with 
SRAM-like timings and will program the flash array 
without any CPU overhead, providing greatly increased 
write efficiencies for both short and long writes. 


For example, the 28F008SA writes a byte typically in 
9.2 jus/byte, giving a device pair an effective byte write 
speed of 4.6 jus since 9.2 juts per byte/2 devices = 
4.6 /x s per byte/device. 

The 28F016SA, however, can write a word typically in 
3.8 jus from page buffer to flash memory, giving a de- 
vice pair an effective byte write speed of 0.95 jlls since 
3.8 jus per word/2 devices = 1.9 jus per word/device 
= 0.95 jus per byte/device. 

This feature improves system write performance by up 
to 4.8 times over previous flash memory devices. When 
interfacing four (4) 16-Mbit devices in parallel in a 
32-bit system, the sustained write speed approaches 
2 MBytes/sec. 



Figure 2. Page Buffer Increases Write Performance 
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For relatively short writes (less than 512 bytes), the 
CPU is free after the page buffers are loaded and the 
command to write to flash is issued. The 28F016SA 
will take care of completing the Page Buffer Write to 
Flash Operation. This limited form of parallel process- 
ing allows the host system to treat flash almost exactly 
as it would treat SRAM for short writes. For writes of 
less than four (4) bytes, however, it is not efficient to 
use the page buffers because the queue can hold three 
(3) simple Write commands. 

For writes of more than 512 bytes, the two page buffers 
can be used to even greater advantage. The system can 
fill one buffer, issue the Write command, and then im- 
mediately begin to fill the other buffer, continuing to 
alternate in this way until the entire write is complete. 
This sort of large block writing, known as “interleaved 


page mode write”, is efficient because the overhead 
needed to set up a write from the buffers to flash is 
incurred only once. Also note that the write from the 
buffers to flash is itself faster than a write directly from 
the system to the flash array. 

The load on the CPU is also dramatically reduced using 
page mode writes. While a write without the page buff- 
er requires one setup command for every byte or word 
written, only 6 commands total need to be issued to set 
up the write of 256 bytes to a page buffer and from the 
page buffer to flash. While the actual write speed to the 
flash array is approximately 35% faster from the page 
buffer, there is also the benefit of huge reduction in 
processor overhead, with page buffer writes more than 
40 times (256 commands vs. 6 commands) less of a 
burden on the CPU. 



292127-4 292127-5 

The two phases in the interleaved page mode write cycle. 


Figure 3. Interleaved Page Mode Write 
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3.2 Command Queuing 

While the 28F008SA requires an operation to complete 
before the next operation could be requested, the 
28F016SA allows queuing of up to two (2) additional 
operations while the memory executes the current oper- 
ation. As a general rule, the 28F016SA has a 3 -deep 
command queue. This eliminates system overhead 
when writing several bytes in a row to the array or 
erasing several blocks at the same time. A subset of the 
command-set can be queued, while the rest of the com- 
mands are executed immediately. 

There is, however, an exception to the 3 -deep command 
queue rule, which has to do with multiple Block Erase 
commands, if Single Block Erase commands are the 
only queued operations, the queue then becomes virtu- 
ally 32-commands deep. This allows the user to stack 
many Block Erase operations very fast before a Single 
Block Erase operation completes. Consult the 
28F016SA User’s Manual. 



Figure 4. Command Prioritization 


3.3 Command Prioritization 

Within the 28F016SA command queue, Write com- 
mands have higher priority than Erase commands and 
are executed by the WSM first, regardless of the com- 
mand order. This feature helps insure that valuable 
data can be captured as it arrives in real time. The 
28F016SA will not, however, put a write to a block 
ahead of an erase to the same block. 

In addition, the 28F016SA prioritizes multiple Block 
Erase commands when queued in conjunction with 
Write commands. The CUI decodes the Write com- 
mands and if those commands affect a block which is in 
the queue for erasing, it will prioritize the Block Erase 
ahead of other Block Erase operations. This method 
allows a complete block modification to occur as fast as 
possible. 
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3.4 Extended Status Registers 

The 28F016SA includes a Compatible Status Register 
(CSR) which is identical to the status register on the 
28F008SA, a Global Status Register (GSR), which re- 
flects the overall device status, and 32 Block Status 
Registers (BSRs), which are similar to the GSR except 
that they contain information specific to their corre- 
sponding blocks, i.e., each block has its own BSR. The 
value of the BSR is that it allows each block to operate 
essentially as an independent memory device. 

Since the CPU does not have to control and monitor 
the details of writing a word/byte and erasing a block, 
it is free to perform higher priority tasks. 


3.6 Block Validity and Data Integrity 

If a particular block becomes corrupted because of an 
interrupted Erase operation, due to an Abort com- 
mand, RP# reset action or the power supply turning 
off, both the Block Operation Status (BOS) and Device 
Operations Status (DOS) bits will be set to “1”, indicat- 
ing an invalid Block. This combination of status bit 
setting can be detected when normal operating condi- 
tions are restored and after issuing a Status Upload 
command, which updates certain status bits in the GSR 
and BSRs. If this condition occurs (BOS = DOS = 1), 
the user must re-issue a Block Erase command and in- 
sure successful erasure of the block by checking the 
appropriate GSR and BSR bits. 


3.5 Automatic Erase Suspend to 
Write 

Write performance is also enhanced by an erase sus- 
pend mode which is automatically invoked when a 
Write command to a block is issued during the erase of 
a different block. Since the erase of a block typically 
takes 600 ms to complete, suspending an erase to write 
to a different block can dramatically increase write per- 
formance. 

Automatic Erase Suspend to Write is important to 
Microsoft’s FlashFiling System (FFS) for flash memory 
cards. FFS needs to perform occasional background 
erases to maintain efficiency. These erases are much 
less noticeable when they can be suspended whenever 
the user desires access to the flash card. 


3.7 Erase All Unlocked Blocks 

All 32 blocks of the 28F016SA can be erased using a 
single command, the Erase All Unlocked Blocks com- 
mand. When this command and the Confirm command 
are issued, then all of the unlocked blocks will be erased 
in sequence. Locked blocks will be skipped and no error 
code will be returned. The BSR Block Operation Status 
bit can then be checked for each block to determine 
which block failed to properly erase and the user can 
re-issue single Erase commands to those particular 
blocks. This method improves overall system write per- 
formance in large flash memory configurations when 
extensive data cleanup or card formatting are required. 



Figure 5. Automatic Erase Suspend to Write 
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4.0 LOW POWER CONSUMPTION 


4.1 3.3 V Operation 

For Read operations, the 28F016SA uses about 50% 
less energy in the 3.3V configuration than in the 5.0V 
configuration, making the 28F016SA an ideal choice 


for mobile computing applications as well as some pow- 
er-sensitive embedded applications which use the device 
for infrequently updatable code storage. 

For Write/Erase operations such as in Resident Flash 
Disk applications, the 28F016SA in 3.3V mode saves 
20%/40% energy respectively, versus the 5.0V mode. 
See Table 2 for detailed calculations. 


Table 2. 28F016SA Typical* Power Consumption and Energy Comparison 


3.3V Operation 
f = 4 MHz 

Ice (mA) 

Ipp (mA) 

Power (mW) 

Ice x 3.3V + Ipp x Vpp 

Energy (m.W.sec) 
Power x Time 

Read Current 

15 

65 jitA 

49.7 

0.41 mW. sec/Block 

Write Current 

8 

10 

146.4 

32.38 mW. sec/Block 

Erase Current 

6 

4 

67.8 

54.24 mW. sec/Block 


5.0V Operation 
f = 10 MHz 

ice ( m A) 

Ipp (mA) 

Power (mW) 

Ice x 5.0V + Ipp x Vpp 

Energy (m.W.sec) 
Power x Time 

Read Current 

50 

65 jllA 

250 

0.82 mW. sec/Block 

Write Current 

25 

7 

209 

41.09 mW. sec/Block 

Erase Current 

18 

5 

150 

90 mW. sec/Block 


These numbers are based on preliminary characterization data. 

Block Size = 64 KB = 32 KW 

Typical word write speeds: 6 jus (5.0V); 6.75 jus (3.3V) 

Typical block erase speeds: 600 ms (5.0V); 800 ms (3.3V) 


Table 3. 3.3V to 12.0 V Converter 


Manufacturer 

Part 

Number 

Input (V) 

Current 

Output 

Total 

Components 

Needed 

Est. Cost* 

Maxim 

MAX732 

1.8 to 5.0 

30 mA 

13 

$4.80 

Linear Technology 

1 109CS8-12 

2.5 to 11.0 

30 mA 

5 

$4.00 


•These cost estimates are based on published pricing at the time this Application Note was written. 


NOTE: 

This list is intended for example only, and in no way represents all companies that produce 12.0V conversion solutions. 
Since this industry develops many new solutions each year, Intel recommends that the designer contact the vendors for 
their latest products. Intel will continue to work with vendors to develop optimum solutions. Intel Corporation assumes no 
responsibility for circuitry others than circuitry embodied in Intel products. 

At present, there are at least two manufacturers of 3.3V to 12.0V converters. Their solutions are described in Table 3. These 
solutions are given only for reference and may not be suitable for use in every system. Readers wishing additional informa- 
tion on DC to DC converters are referred to Intel’s AP-357, “Power Supply Solutions for Flash Memory”. 


4.2 Page Buffer Write Operation 

In addition to providing dramatically faster writes, the 
page buffers also save power. While the actual power 
saved depends on the size of the write from the page 
buffer, savings are typically 35% of the energy it takes 
to write without the page buffer, since page buffer 
writes are intrinsically about 35% faster while current 
consumption is the same. 


4.3 Automatic Power Savings 

Automatic Power Savings (APS) is a low power feature 
valid during active mode of operation. The 28F016SA 
incorporates “Power Reduction Control” circuitry 
which allows the device to put itself into a low current 
state when addresses are not switching (in other words, 
accessing the same memory location). After data is read 
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from the memory array, the Power Reduction Control 
logic controls the device’s power consumption by enter- 
ing APS mode, where the typical Ice current is 1 mA 
at 5.0V and 0.8 mA at 3.3V. CPUs with a slowed clock 
can take advantage of this feature which is entirely au- 
tomatic and transparent to the user. 

4.4 Deep Power-Down Mode 

The deep power-down mode is activated by the RP# 
pin transitioning low, which turns off all device circuit- 
ry. The only current consumed is diffusion leakage, 
transistor sub-threshold conduction, input leakage, and 
output leakage, totaling 1 juA. However, all register 
contents are lost and the current operation terminates 
upon entering deep power-down mode. 

The deep power-down feature, along with the sleep 
command (following section), gives the 28F016SA the 
ability to increase power savings dramatically by taking 
advantage of the fact that any one flash device is ac- 
cessed only occasionally. When the device is not in use, 
it can be turned off so that scarce battery power is con- 
sumed only as needed. These power-saving functions 
can be implemented in ways entirely transparent to the 
end-user. The only change the user will notice is that 
batteries last much longer with a 28F016SA-based sys- 
tem. 


4.5 Sleep 

The Sleep command is new with the 28F016SA. Unlike 
deep power-down mode, during sleep mode, the status 
registers, page buffers, and signature ID codes can still 
be read. Once in sleep mode and with applied CMOS 
input levels, the power of the device is reduced to deep 
power-down current levels. The Sleep command allows 
the device to complete any current or pending com- 
mands before going into sleep mode. The Device Sleep 
Status (DSS) bit in the GSR will indicate that the de- 
vice is in sleep mode. Writing the Read Array com- 
mand wakes up the device out of sleep mode. 


4.6 Standby 

With CEq# or CEj# high, the memory will be in 
standby mode. This mode turns off much of the de- 
vice’s circuitry and reduces device power consumption. 
The outputs are in a high-impedance state independent 


intel. 

of the state of OE# pin. If the WSM is executing a 
command when the device is disabled, the operation is 
allowed to continue. During this time the power 
consumption remains at the non-standby level until the 
operation completes. The output buffers and most of 
the input buffers on the chip are disabled during stand- 
by mode. 


5.0 DENSITY IMPROVEMENT/SPACE 
SAVINGS 

The 28F016SA is twice as dense as the 28F008SA, al- 
lowing smaller systems, lower weight, and lower power 
consumption than ever before — crucial selling points in 
the highly competitive mobile PC market. Flash densi- 
ties are now on a par with DRAM densities, an impor- 
tant step toward the use of flash as non-volatile execut- 
able memory (Resident Flash Array), which provides 
“instant on’’ boot capability and instant access to appli- 
cations and data stored in flash. RFAs also reduce the 
amount of necessary system DRAM. 

In the removable storage market, the density of the 
28F016SA will make conversion to flash the most at- 
tractive option when considered along with the proper- 
ties which set flash apart from other storage media, 
such as non-volatility, low power consumption, and 
ruggedness. Flash-based data and code storage media 
such as PCMCIA memory cards are already on the 
shelf, along with PCMCIA- AT A flash drives. 
PCMCIA cards in particular will open new distribution 
channels for software since cards based on the 
28F016SA now have sufficient capacity for most large 
commercial programs. While cost/megabyte is not yet 
competitive with magnetic media, the XIP or “eXecute 
In Place’’ ability of flash cards provides software dis- 
tributors and end-users with a compelling reason to 
consider flash cards. 

The density of the 28F016SA is also driving entirely 
new applications, such as solid-state digital photogra- 
phy and audio recording, which require memory capac- 
ities which were not previously economical in flash. 

The point to remember is that two (2) megabytes of 
70 ns randomly accessible code or data can now be 
stored in a rewritable nonvolatile medium of less than 
three (3) square centimeters — a 30% improvement over 
the 28F008SA. 
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Figure 6. 28F016SA vs 28F008SA Area Comparison 



6.0 FLEXIBLE SYSTEM INTERFACE 


6.1 Dual Chip Enables 

The 28F016SA implements a dual chip-enable function 
with two input pins, CEq# and CEj#, which together 
have exactly the same functionality as the regular chip- 
enable pin on the 28F008SA. The 28F016SA uses the 
logical combination of these two signals to enable or 
disable the entire chip. Both CEq# and CEj # must be 
active to enable the device. If either one becomes inac- 
tive, the chip will be disabled. This feature allows the 
system designer to reduce the number of decoding pins 
used in a large array of 16-Mbit devices. For square 
arrays, it can be seen that the number of lines needed to 
control nXn chips is 2 times n. For example, in a square 
array of sixteen 28F016SAs, only 8 lines are needed 
instead of 16 (see Figure 7). For larger memory arrays, 
the reduction in decoding signals increases significant- 
ly. 


6.2 Dual 3.3V/5.0V Operation 

The portable PC market demands that components be 
able to operate at 3.3V. On the other hand, most desk- 
top systems operate at 5.0V. The 28F016SA resolves 
this conflict with a dual operating voltage capability. A 
3/5# input pin makes it possible to use the 28F016SA 
in both 3.3V and 5.0V systems interchangeably. The 
3/5# signal pin from the system informs the device 
about the supply voltage being used. This information 
is used by the 28F016SA to optimize itself for the input 
supply voltage. Data written using one supply voltage 
will always be valid using the other supply voltage. A 
28F016SA-based flash memory card is thus able to 
transfer data from a 3.3V notebook or handheld PC to 
a 5.0V desktop PC as is illustrated by Figure 8. 
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Dual chip selects reduce the total number of select lines needed. 

Figure 7. Dual Chip Selects in a Bank Configuration 
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Figure 8. Dual Voltage Operation Allows Inter-Operability 


6.3 User-Selectable x16/x8 Bus Width 

While the 28F008SA’s interface to the system bus is 
strictly x8, the 28F016SA’s BYTE# pin allows either a 
x8 or xl6 bus interface. The system designer now has a 
choice between three (3) different configurations in 
both 16-Bit and 32-Bit systems, allowing optimization 
of the effective block granularity, the space required, 
and the minimum memory configuration. See Table 4 
for details. 

Note that the smallest block granularity is obtained 
with the 28F016SA in 16-bit mode in a xl6 system. 


The most efficient and smallest memory configuration 
is obtained with the 28F016SA in xl6 mode in a 32-bit 
system. 


6.4 Open Drain RY/BY# 

The RY/BY # pin is an open drain output pin to allow 
the designer to Wire-OR multiple RY/BY # pins in a 
large memory array, saving on the number of control 
pins which are dedicated to this function. 


3-735 




AP-378 


iny 


Table 4. Configuration Options 


System 

Bandwidth 

Parameter 

28F008SA (x8 only) 

28F016SA, x8 

28F016SA, x16 

16-Bit 

System 

Effective Block size 

128 KB 

128 KB 

64 KB 

Minimum Configuration 

Two Devices: 2 MB 

Two Devices: 4 MB 

One Device: 2 MB 

32-Bit 

System 

Effective Block Size 

256 KB 

256 KB 

128 KB 

Minimum Configuration 

Four Devices: 4 MB 

Four Devices: 8 MB 

Two Devices: 4 MB 
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Open drain RY/BY# reduces this array’s interrupt lines to just one. 


Figure 9. Open Drain RY/BY# 
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Example of Pulsed Mode RY/BY# in an Array of Two Devices 


RY/BY# 
Device 0 


RY/BY# 
Device 1 


Array RY/BY# [ 


RY/BY# 
Device 0 


RY/BY# 
Device 1 


Array RY/BY# 


With devices in Level-Mode operation, this array’s output does 
not indicate exactly when device 0 has finished its operation. 


HiTt 


*R 




LI u 


tR = 250 ns typically 

With devices in Pulsed-Mode operation, this array’s output does 
indicate exactly when Device 0 has finished its operation. 
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Figure 10. Pulsed Mode RY/BY# 


6.5 RY/BY # Configuration Modes 
(Level and Pulsed) 

While the Level-Mode operation of the Ready /Busy in- 
dicator pin continuously reflects the device readiness, 
this type of signal will actually hinder the performance 
of an array of 28FQ16SAs if the array itself has only 
one ready/busy output line. This is because the array 
output will indicate busy when any one of its compo- 
nent 28F016SAs is busy, obscuring transitions to ready 
by any of the other devices and forcing the CPU to 
continuously poll the flash array to find ready devices. 


A more accurate indication of the array state is ob- 
tained when each 28F016SA gives a pulsed output sig- 
nal to the host system when it has finished its opera- 
tion. The host system can then examine the Global 
Status Register of each 28F016SA to find which one 
has become ready and issue a Read command, or any 
non-queueable command, to the ready device, in this 
way, multiple devices can operate in parallel without 
the burden of continuous polling to find which ones 
have finished their operations. 
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Tlie 28F016SA incorporates a RY/BY # pin which can 
be configured four ways: 

• Level Mode (Default) 

• Pulse-on-Write Only 

• Pulse-on-Erase Only 

• Disable 

Level mode is the default mode. In this configuration, 
the state of the WSM is continuously indicated by the 
RY/BY# pin, which is an open drain output pin 
pulled high through an external pull-up resistor when 
the WSM is ready. This feature allows the user to 
OR-tie RY/BY# pins of multiple devices together in 
flash memory arrays such as Resident Flash Array or 
flash drive applications, saving control logic and simpli- 
fying board design. 

Pulse-on-write mode will cause RY/BY # to pulse low 
at the completion of Page Buffer Write to Flash opera- 
tions only. This is useful for controlling interleaved 
page mode writes. 

Pulse-on-erase mode will cause RY/BY # to pulse low 
at the completion of Block Erase operations, including 
at the end of each Block Erase during an Erase All 
Unlocked Blocks operation. 

The RY/BY # pin can also be disabled so that it will 
always report a READY condition. Disabling the 
RY/BY # pin has no impact on the status registers. 


7.0 CODE AND DATA PROTECTION 

7.1 Selective Block Locking 

While the 28F008SA provides data security through 
the RP# pin (formerly PWD#) and the intrinsic non- 
volatility of flash, it does not have the ability to provide 
selective locking of some blocks while leaving others 
available for writing and erasing. The 28F016SA, how- 
ever, provides the ability to selectively lock any 
64-Kbyte block to protect critical code or data. Each 


block on the 28F016SA has an associated non-volatile 
lock-bit which determines the lock status of that block. 


7.2 Master Write Protect 

A WP# (Write Protect) pin activates the block lock- 
bits, preventing any Write or Erase of blocks which 
have their lock-bits set. When the WP# pin is asserted 
(low) and a block’s lock-bit is set, the user is safe from 
accidentally damaging or modifying the data in that 
block. 


7.3 Software Partitioning 

The greatest benefit of the 28F016SA’s block locking 
feature is that it is possible for OEMs and software 
developers to bundle applications or operating system 
code in flash memory cards or in RFAs, providing an 
entirely new medium for software distribution. Soft- 
ware distributed in this way is safe from accidental user 
overwrites, and yet capable of in-system updates to ac- 
commodate new versions. When 28F016SA-bundled 
code or data needs to be updated, raising WP# high 
provides a temporary override of the block locking 
mechanism so that locked blocks on the device may be 
written to. 

The advantage of partitioning a 28F016SA-based mem- 
ory card into locked and unlocked sections is that a 
user can keep an application and the files created with 
that application together. For example, a spreadsheet 
program and all of the spreadsheets a user has created 
with that program can be stored on one flash card. 
Such an arrangement gives the user a new kind of por- 
tability, one which allows him or her to carry all of the 
work in his or her pocket with instant access to the 
application and files anywhere a compatible PC is avail- 
able. Hence, the data locking features of the 28F016SA 
complements its ability to act as executable system 
memory, providing the end- user with a solution which 
provides portability, safety, convenience, low power 
and high speed of access which no other medium can 
claim. 
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7.4 Reset Capability 

The 28F016SA provides complete protection of flash 
contents through the Reset/Power-down (RP#) pin. 
RP# locks the flash array from spurious writes and 
places the outputs in a high impedance state. If asserted 
during write/erase modes, RP# low aborts the current 
operation in progress, cancels all pending WSM com- 
mands, flushes the command queue and clears the 
status registers. 


8.0 SUMMARY 

This application note discusses the key features and 
benefits of the revolutionary 16-Mbit device architec- 
ture and their impact on system and software designs. 
End-user benefits from these enhanced features are 
brought to light with respect to the wide range of new 
applications enabled by the 28F016SA chip and 
28F016SA-based system products. 


RP# is used both as a power conservation feature and 
as a data protection feature. An example of when RP# 
is useful for data protection is during power-up, when 
other inputs to the 28F016SA may be in an indetermi- 
nate state. Holding RP# low until the power supplies 
reach operating levels and all input signals become sta- 
ble, guarantees maximum protection for the device. 
The use of RP # for power conservation is discussed in 
Section 4.4. The reader wishing more detail on the use 
of the RP# pin is referred to the 28F016SA User’s 
Manual. 
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APPENDIX A 

28F016SA COMMAND LISTINGS 



Command 
Codes (Hex) 

Device Mode 


00H 

Invalid/Reserved 


10H 

Word /Byte Write 


20H 

. 

Single Block Erase 


40H 

Word/ Byte Write 

28F008SA- 

Compatible 

Commands 

50H 

Clear Status Registers 

70H 

Read CSR 


90H 

Read ID Codes 


BOH 

Erase Suspend 


DOH 

Confirm/Resume 


FFH 

Read Flash Array 


OCH 

Page Buffer Write to Flash 


71H 

Read GSR or BSRs 


72H 

Page Buffer Swap 


74H 

Single Load to Page Buffer 


75H 

Read Page Buffer 


77H 

Lock Block 


80H 

Abort 

28F016SA- 

Performance- 

96H 

RY/BY# Reconfigurations 

01 H 

RY/BY# Enable to Level Mode 

Enhancement 

Commands 

02H 

Pulse-On-Write 

03H 

Pulse-On-Erase 


04H 

RY/BY# Disable 


97H 

Upload Status Bits 


99H 

Upload Device Information 


A7H 

Erase All Unlocked Blocks 


EOH 

Sequential Load to Page Buffer 


FOH 

Sleep 


FBH 

Two-Byte Write 
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1.0 INTRODUCTION 

As personal computers migrate to platforms that are 
easily held with one hand, a revolutionary system archi- 
tecture is required to meet space and power require- 
ments. 

• An architecture that is not bound by what has been 
done before with existing memory architecture, but 
free to meet the demanding requirements of mobile 
end-users. 

• An architecture free to adapt and accommodate new 
technological advances in software and hardware, 
while protecting end-users initial base hardware in- 
vestment. 

Implementing this new system architecture requires 
traditional PC storage media such as ROM, DRAM, 
floppy disk and hard disk to move aside and make 
room for the latest in memory storage, Intel’s 
FlashFile™ memory (see architecture comparison in 
Figure 1). 



Data 

Code 

File & Code 

Application 

Manipulation 

Execution 

Storage 


DRAM 

DRAM/ROM 

FDD/HDD 

Desktops 




]■] 

Portables 

DRAM 

FLASH 

FLASH 

- Resident Disk 

- Flash Card 

- Flash Drive 
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Figure 1. Architecture Comparison 

By combining FlashFile memory with new system ar- 
chitecture, completely new types of computers are now 
possible that fit in the palm of your hand and replace or 
integrate many of the code or storage functions of older 
memory types. Moreover, FlashFile memory enables 
hand-held computers to last many hours on just a cou- 
ple of AA batteries. FlashFile memory can be used for 
storing eXecute-In-Place (XIP) code in the system’s 
memory map, while additionally functioning like a disk 
for file and program storage. Since this type of design 
features FlashFile memory resident on the PC’s moth- 
erboard and is typically arranged in an array, it is 


described as a Resident Flash Array (or RFA). To fur- 
ther differentiate the two tasks of an RFA, the file store 
task is called a Resident Flash Disk (RFD), while the 
XIP task is called Resident Flash for XIP (or RFX) 
code storage. 

The FlashFile memory is also used in card form as 
specified by the Personal Computer Memory Card In- 
ternational Association (PCMCIA). Flash memory 
cards provide file and program storage similar to an 
RFD, but add the feature of removability, increasing or 
adding to ease-of-use for the end-user. The PCMCIA 
specification addresses both the memory and I/O 
card’s physical, electrical and mechanical characteris- 
tics, while leaving the host PC implementation relative- 
ly free for interpretation. Enhancing the PCMCIA 
specification, Intel developed the Exchangeable Card 
Architecture (ExCA™ standard), which defines the 
host PC system card interface. ExCA standard archi- 
tecture further refines the PCMCIA specification and 
provides for card exchangeability and inter-operability 
for both memory and I/O cards. 

Memory and I/O cards complement this new mobile 
architecture by integrating many of the common, but 
functionally separate, tasks used by today’s mobile pro- 
fessional in either electronic or paper form. Some of 
these tasks are schedule keepers, phones, address 
books, checkbooks, credit cards, fax, pagers, personal 
voice storage, task managers/schedulers, paperless 
form reports, scratch pads, and notepads. 


1 . 1 Why a New Memory Architecture? 

The ideal hand-held memory system is: 

• Power Conscious (prolongs battery life and reduces 
heat) 

° Dense (stores lots of code and data in a small 
amount of space but weighs very little) 

« Updateable (allows in-situ code enhancements) 

° Fast (lets you read and write data quickly) 

• Inexpensive (low cost-per-megabyte) 

• Reliable (retains data when exposed to extreme tem- 
perature and mechanical shock) 

Since the PC’s introduction over 10 years ago, design- 
ers have grappled with how to construct memory sys- 
tems that meet the above criteria. Portable computing 
makes the system design even tougher with more strin- 
gent requirements for low power, low volume and less 
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weight. The best combination available for portable de- 
signs in their infancy was the same as used for the desk- 
top; solid-state memory and magnetic storage, i.e., 
SRAMs, DRAMS plus magnetic hard disks. DRAMs 
are dense and inexpensive, yet slower than the proces- 
sors they serve, and they are volatile. SRAMs, although 
fast enough to keep pace with processors, are relegated 
to caching schemes (compensating for DRAM’s slow- 
ness) due to low density and high cost while also being 
volatile. Magnetic hard disks, the nonvolatile append- 
age to DRAM and SRAM, are dense, inexpensive on a 
cost-per-megabyte basis and nonvolatile, but are slow, 
power hungry, take up a sizable amount of volume and 
are susceptible to damage from physical shock. 

Mobile computing designs cannot depend on hard 
drives as do portable notebook PCs. Volume (4" x 8" x 
0.5" or less), power (two A A batteries), and shock con- 
straints preclude using even the 1.3" hard drives avail- 
able today. Furthermore, vitally important data such as 
credit card numbers or transactions, signatures, or 
checkbook information demands reliability of the high- 
est order. 

1.2 The Flash Memory Alternative 

High Density 

Intel’s ETOX™ III Flash Memory Cell is 30% smaller 
than equivalent DRAM cells; therefore it will closely 
track DRAM density. Intel’s 28F016SV FlashFile 
memory can store 16 megabits, or two megabytes, of 
data. Flash memory is more scaleable than DRAM be- 
cause the flash storage cell is not sensitive to soft error 
failure; therefore it can have a more simple cell struc- 
ture. Thus as density increases and process lithography 
continues to shrink, flash memory will pace, and ulti- 
mately overtake, the DRAM technology treadmill. 

SmartVoltage Technology 

The 28F016SV incorporates Intel’s SmartVoltage tech- 
nology, providing Vcc operation at both 3.3V and 5.0V 
and program and erase capability at Vpp = 12.0V or 
5.0V. Operating at V CC = 3.3V, the 28F016SV con- 
sumes approximately one-third the power consumption 
at 5.0V Vcc* while 5.0V Vcc provides the highest read 
performance. Vpp = 5.0V operation eliminates the 
need for a separate 12.0V converter, while Vpp = 
12.0V maximizes write/erase performance In addition 
to the flexible program and erase voltages, the dedicat- 
ed Vpp gives complete code protection with Vpp ^ 
VppLK- 


intgl. 

Internal 3.3V or 5.0V Vcc detection automatically con- 
figures the device for optimized 3.3V or 5.0V Read/ 
Write operation. 

Updateable 

ROMs and EPROMs may offer lower device costs, but 
if time to market or servicing the customer or end-user 
is important to an OEM, overall system cost must be 
factored in. Although ROMs and EPROMs are non- 
volatile, changing the code within them is either very 
difficult (in the case of EPROMs), or entirely impossi- 
ble (in the case of ROMs). Whole inventories of ROMs 
could be lost in the event of a catastrophic bug, while 
an innovative design with FlashFile memory can be up- 
dated in the factory or by end-users via networks, OEM 
Bulletin Board Systems, or other memory cards. Up- 
dating systems could actually become a second source 
of income for OEMs and Independent Software Ven- 
dors (IS Vs), enhancing the quality of the product while 
increasing end-user satisfaction. 

Power Conscious 

Intel’s FlashFile memory provides a deep power-down 
mode, reducing power consumption to typically less 
than 0.2 jaA. Typical read current is only 20 mA, while 
typical standby current (flash memory not being ac- 
cessed with CE# high) is only 30 fxA. Additionally, 
FlashFile architecture devices operating at 3.3 Vcc are 
available for state-of-the-art low-power consumption 
designs. 

Fast 

Don’t be misled by technology-to-technology speed 
comparisons. Architecting a system around FlashFile 
memory bypasses the code/data bottleneck created by 
connecting slow mechanical serial memory (such as 
disks) to a high-performance, parallel-bussed processor 
system. For example, data seek time for a 1.8" magnet- 
ic hard disk is 20 ms, plus an 8 ms average rotational 
delay, while flash memory access time is less than 0.1 
ms. At the chip level, read speeds for FlashFile memory 
are about 85 ns. Therefore, either direct execution of 
code from flash memory or downloading to system 
RAM will dramatically enhance overall system per- 
formance. 

Nonvolatile 

Unlike DRAM or SRAM, FlashFile memory requires 
no battery back-up. Further, Intel’s flash devices retain 
data typically for over 100 years, well beyond the useful 
lifetime of even the most advanced computer. 
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Rugged and Reliable 

On average, today’s hard-disk drives can withstand up 
to 10 Gs of operating shock. Intel’s FlashFile memory 
can withstand as much as 1000 Gs. FlashFile compo- 
nents can operate beyond 70° C while magnetic drives 
are limited to 55°C. Intel’s FlashFile memory can be 
cycled at least 100,000 times per block or segment. 
Even beyond that cycle level, FlashFile architecture 
does not fail or lock up like EEPROM devices, it just 
tends to take longer to erase blocks and program bytes 
than the times specified in the data sheet. By employing 
wear-leveling techniques, a 10-KB file written every 5 
minutes, 24-hours a day to a 20-MB flash array takes 
1.2 million hours, or 136 years, before reaching the 
10,000 cycle level. 


1.3 The FLEXIogic Advantage 

The mobile processor market lacks the legacy that ex- 
ists in the other markets. As a result, standard chipsets 
are not available to help design products for the mobile 
market. This situation makes the job of mobile system 
designs more difficult than it might otherwise be. Many 
of the same subsystems need to be designed for mobile 
systems as for other markets, but no off-the-shelf com- 
ponents are available. 

Altera’s EPX780 FLEXIogic PLD allows the systems 
designer to quickly implement and test new mobile de- 
signs. Since the EPX780 is a programmable device, the 
design described in this application note provides a 
standard building block for mobile systems that allows 
customization for different memory subsystems, proc- 
essor variations and applications. The RFA memory 
controller requires only about 65% of the macrocells in 
the EPX780, thus allowing additional logic functions to 
be integrated with no additional space requirement. 

The EPX780 also satisfies the needs of mobile systems 
by providing: 

High Performance & Deterministic Timing 

The EPX780 offers a fast, deterministic 10 ns tpp> from 
any input or I/O to any I/O. It can be operated in-sys- 
tem at speeds of up to 80 MHz. Unlike other field pro- 
grammable gate array architectures, the FLEXIogic 
family offers very deterministic timing and may reduce 
the need for extensive design, simulation and timing 
analysis. 


High Density and Flexibility 

The EPX780 offers 80 macrocells of logic grouped into 
eight Configurable Function Blocks (CFBs). Each CFB 
can be independently configured as a 24V 10- type PLD 
or as a 128-deep x 10-bit-wide bank of SRAM. 

When configured as a 24V 10 logic, an identity compare 
of up to 12 bits can be performed in parallel to the SOP 
logic for each CFB. Each macrocell can implement reg- 
istered or combinatorial logic with a variety of clocking 
and control options, providing the system’s designer 
with greater flexibility. 

In-Circuit Reconfigurable and Programmable 

Although some simple PLDs offer re-programmability, 
changing the logic design in-circuit is either very diffi- 
cult or entirely impossible. In contrast, the EPX780 
offers in-circuit reconfiguration through an industry 
standard IEEE 1149.1 JTAG interface. This capability 
can significantly reduce the time required for proto-typ- 
ing new designs. 

Instead of carrying inventory of pre-programmed 
FPGAs, and incurring the risk that a device with the 
incorrect pattern will be inserted in a given location, 
blank FLEXIogic devices can be assembled in the de- 
sign. Then it can be configured or programmed in-cir- 
cuit. • 

Low Power, Mixed-Voltage 

The FLEXIogic PLDs provide reduced power con- 
sumption compared with simple PLDs or other FPGA 
devices. Typical operating current is only 1.5 mA/ 
MHz, while standby current for the EPX780Z is 1 mA. 
Additionally, the outputs of the EPX780 can be operat- 
ed at 5.0V levels or 3.3V levels. Inputs responds to 2.0V 
as a logic high, regardless of the output swing. This 
allows the EPX780 to be used in state-of-the-art 3.3V 
designs or mixed voltage environments commonly 
found today. 

High I/O 

To meet the high I/O demands of a 32-bit system, the 
132-pin PQFP EPX780 offers 80 I/Os and 22 dedicated 
inputs for a total of 102 I/Os. This satisfies the I/O 
demands of an RFA controller, and allows support for 
additional logic requirements. 
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1.4 Summary 

Many applications benefit from ROMed or XIP ver- 
sions of code, particularly hand-held personal comput- 
ers, vertical application pen-based clipboards, and in- 
dustrial control and data accumulation equipment. 
These applications pose system design constraints re- 
quiring small form factor, low-power consumption, and 
rugged construction due to active mobile users or harsh 
environments. Exposure to shock, vibration, or temper- 
ature extremes is common, precluding the use of rotat- 
ing media. Flash memory provides an excellent code 
storage choice for such system designs featuring thin 
TSOP packaging, low (deep power-down mode) or zero 
(capability to shut off power without losing data) power 
consumption, 1000 G shock resistance and extended 
temperature products. Additionally flash memory pro- 
vides remote or end-user update capability, allowing 
OEM’s to service their products more efficiently and 
add new software features and applications after the 
sale. 

The features of Intel’s FlashFile memory and Altera’s 
FLEXlogic PLDs truly enable new, compact and por- 
table system architectures. This application note dis- 
cusses implementing an Intel486™ SX CPU mobile 
design using the following components: Intel’s boot 
block flash memory; Intel’s FlashFile components 
(28F016SV) for extended memory eXecute-In-Place 
(XIP) code store, disk-like functionality for file and 
program storage, and BIOS code storage; and Altera’s 
FLEXlogic PLD (EPX780) as a memory controller. 

Related Publications 

The following data books and reference manuals pro- 
vide valuable information for developing an RFA-based 
design: 

• Intel 28F016SV 16-Mbit (1 Mbit x 16, 2 Mbit x 8) 
FlashFile™ Memory Data Sheet, order number 
290528 

• Intel 28F016SA 16-Mbit FlashFile™ User’s Manu- 
al, order number 297372 

• Microsoft MS-DOS* 5.0 ROM Technical Specifica- 
tion and OEM Adaptation Kit (OAK) 

• Microsoft Flash Filing System OAK 

• Microsoft Windows* 3.1 ROM Technical Specifica- 
tion and OAK 

For additional information on flash memory and power 
supply solutions, see section 6.0. 


2.0 SOFTWARE DESIGN 

Software design is considered first for solid-state de- 
signs because the software functionality desired affects 
in large part how the hardware design is implemented. 
Many software products exist for solid-state systems: 

• DOS operating systems from Microsoft, Novell’s 
Palm DOS and Datalight’s ROM-DOS 

• A Graphical User Interface (GUI) operating system 
in Windows 3.1 ROM version 

• Application software from Microsoft such as Word, 
Excel and MS-Works and Lotus 1-2-3 Version 2.2. 

Because no standardization exists, implementation dif- 
fers from package to package or vendor to vendor. 
Therefore, this application note describes a system us- 
ing MS-DOS 5.0 ROM Version, MS Flash File System, 
Windows 3.1 ROM Version plus Pen extensions. All 
are readily available applications today and offer the 
highest inter-compatibility. However, the hardware and 
software design concepts presented here work just as 
well with Novell’s (formally DRI) Palm DOS. 


2.1 XIP Operating System 

The first decision one must make for a solid-state soft- 
ware design is the operating system. Many alternatives 
exist for small hand-held computer systems. Any solu- 
tion depends on what requirements are placed on desk- 
top compatibility, software compatibility, and ease of 
developing applications. In the pen-based market, DOS 
compatibility is not necessarily a requirement. This is 
evident by the multiple emerging entries of pen-based 
GUIs. However, data transfer using a medium such as 
memory cards between desktop systems and hand-held 
computers depends on an agreed file format. At least 
for now, DOS is still the major operating system of 
choice for the largest number of desktop systems. 
Therefore, DOS compatibility is still a necessity for 
many hand-held computing systems and is incorporat- 
ed in this design. 

To insure compatibility and easy system integration, 
MS-DOS 5.0 ROM Version is the easiest choice. With 
this version, an XIP DOS implementation can be con- 
figured to as small as 64 KB, using just the Runtime 
Kernel and a minimized command interpreter. If 
CONFIG.SYS and AUTOEXEC.BAT processing is re- 
quired, an additional 56 KB are required, plus a ROM 
DISK large enough to hold AUTOEXEC.BAT, 
CONFIG.SYS, and any drivers and files that are refer- 
enced by either file. 
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Microsoft provided the capability for additional XIP 
DOS applications to be added to an MS-DOS XIP im- 
plementation by supplying two new DOS functions, 
“Find First ROM Program” and “Find Next ROM 
Program.” This allows DOS-based XIP applications 
(such as OEM-specific utilities and applications or 
ROMed DOS applications) to easily be added to the 
MS-DOS 5.0 ROM build. 

Many different memory configurations of MS-DOS 
ROM are possible by distributing various software 
pieces (Microsoft refers to them as granules) between 
different ROM locations below and above the 1-MB 
address space. Certain restrictions exist on individual 
granules requiring them to appear below 1 MB. The 
granules and address location requirements are speci- 
fied in a table within the MS-DOS ROM 5.0 OAK. 
Approximately 43 KB of granules must be located be- 
low the first 1 MB of address space. Other granules can 
be located either below or above 1 MB. The total size of 
all granules in this design is approximately 128 KB. 

How MS-DOS ROM Boots Up 

For system startup and booting DOS without a disk, 
MS-DOS 5.0 ROM must intercept the INT 19h call 
made by the BIOS. This is accomplished by locating a 
granule as an adapter ROM within adapter space 
(COOOOh-EFFFFh). This granule contains the ROM 
scan identifier “55AAh” which must appear on a 2-KB 
boundary and identifies the module as a ROM to the 
BIOS during Power On Self-Test (POST), and also 
identifies the MS-DOS 5.0 ROM INT 19h interceptor. 
When the BIOS POST code identifies the ROM, con- 
trol is turned over to the ROM for its initialization. At 
this time, the MS-DOS 5.0 ROM redirects the INT 19h 
vector to the MS-DOS 5.0 ROM code and control re- 
turns back to the BIOS POST code. When the BIOS is 
completely finished testing and initializing, it issues 
INT 19h, and the MS-DOS 5.0 ROM INT 19h handler 
gains control. The handler loads the MS-DOS 5.0 
ROM bootstrap loader into RAM and passes control to 
it. If the bootstrap loader includes the “Multi-Boot” 
option, a list of menu boot options are presented to the 
user if an OEM-defined key is being pressed. The menu 
might look like Table 1: 


Table 1. Multi-Boot Menu 

Booting from a Disk 

1. Boot from floppy disk. 

2. Boot from hard disk. 

Booting from ROM: 

3. Floppy is default; process start-up files. 

4. Hard drive is default; process start-up files. 

5. Floppy is default; do not process start-up 
files. 

6. Hard drive is default; do not process start-up 
files. 

7. ROM drive is default; process start-up files. 


The menu is activated by pressing the ALT key during 
the system memory scan, which is the default provided 
in the OAK. Other types of keys may be selected by the 
OEM for their specific implementation. Selecting the 
options under “Booting from a Disk” will bypass the 
ROM system completely. Selecting the options under 
“Booting from ROM” will invoke MS-DOS 5.0 ROM 
and whatever the option specifies for processing the 
startup files, CONFIG.SYS and AUTOEXEC.BAT. 

If the Multi-Boot option is not available or is not acti- 
vated by the user, the MS-DOS 5.0 ROM bootstrap 
loader reads a byte from CMOS RAM to determine 
boot options. The byte is defined in Table 2. 

If the system is to boot from ROM by either selecting 
the Multi-Boot option or reading the CMOS byte, the 
MS-DOS 5.0 ROM bootstrap loader loads BIOS (note: 
not system BIOS, but the BIOS layer of MS-DOS) and 
DOS initialization granules into RAM, records the ad- 
dresses of the resident BIOS and DOS code granules in 
the BIOS data area, records boot options (default drive, 
CONFIG.SYS and AUTOEXEC.BAT processing) in 
the BIOS data area, and passes control to BIOS initiali- 
zation. Just before the end of BIOS initialization, con- 
trol is passed to SYSINIT which moves itself and DOS 
data and initialization code to high memory where both 
SYSINIT and DOS initialization takes place. Next 
SYSINIT then reads and processes the CONFIG.SYS 
file where installed drivers called in CONFIG.SYS and 
additional elements of the DPB chain will be placed in 
memory following the existing DOS structures as well 
as system buffers allocated. System bootstrap is finished 
and the command interpreter is started using the DOS 
call to execute ROM utilities. If a full command proces- 
sor is chosen, the user will now see “C:>” prompt. 
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Table 2. CMOS Byte Definitions 


Reserved 

Default Drive 

Default Drive 

ROM 

Default Boot 


if ROM Boot 

if ROM Boot 

CONFIG.SYS 





Processing 


7 to 4 

3 

2 

1 

0 


Default Boot Bit 0: 

0- Boot from ROM 

1 - Normal disk boot operation (first is drive 00, then drive 80) 


ROM Configuration Processing Bit 1 : 

0- Process CONFIG.SYS and AUTOEXEC.BAT from default drive 

1- Do NOT Process CONFIG.SYS or AUTOEXEC.BAT files 

Default Drive if ROM Boot Bits 2 & 3 

00- First Floppy Drive (Oh) 

01- First Hard Drive (80h) 

10- ROM Drive 


2.2 DOS in Flash Implementation 

For this particular implementation, a full version of 
MS-DOS with the full Command processor was cho- 
sen. This configuration uses 64 KB of adapter space 
(upper memory) at EOOOOh to EFFFFh for MS-DOS 
5.0 ROM, and a combination 32-KB XIP binary file 
and a 256-KB ROM Disk binary file located in extend- 
ed memory at FB8000h. See Figure 2. ROM DOS and 
ROM Disk Memory Maps. This location is just after 
the end of the XIP GUI code block. The XIP Binary 
contains the transient portion of COMMAND.COM 
and the DOS BIOS initialization and is created during 
the build of the MS-DOS 5.0 ROM system, while the 
256-KB ROM Drive contains the necessary files for 
bringing up the system and loading the flash file system 
drivers which are addressed in the next section. 

The EOOOOh segment was chosen because it happens to 
be free on the flash BIOS storage chip. Also, later on in 
this design we will be adding an RFD, which takes up 
16 KB of the DCOOOh segment, and the ExCA stan- 
dard architecture, which requires 16 KB of adapter 
space that we located at D4000h (see Figure 2 for a 


memory map). The ROM disk image location was cho- 
sen because there was room available in the extended 
XIP portion. The XIP portion is located at COOOOOh 
(12 MB). A copy of the ROM image description file is 
included in Appendix B. 

The following summarizes the steps taken for building 
a ROM version of DOS is taken from the MS-DOS 5.0 
ROM OAK. Please refer to the MS-DOS 5.0 ROM 
OAK for specific details. 

There are a set of compile options specified in the 
MS-DOS 5.0 ROM OAK that need to be defined by the 
OEM for their particular implementation and are con- 
tained in the OAK file named “VERSION.INC ” The 
compile options used for this example are listed as fol- 
lows: 

ROMDOS equ TRUE 
POWER equ FALSE 
ROMDRIVE equ TRUE 
CMOS equ TRUE 
CONFIGPROC equ TRUE 




AP-399 




0 - 1-MB ISA Address Map 


1 

16-MB ISA Address Map 



FFFFFh 


-n FFFFFFh 






AT BIOS 







] 

FOOOOh 


? 28F200BX-T 

J 


256-KB ROM Disk 
in Flash 




^////■\ romdos V+wy-: 





EOOOOh 

RFD WINDOW 

FCOOOOh 






DCOOOh 

D8000h 

D4000h 

C8000h 

XIP COMMAND.COM 



ROM Win Stub Window 

FB8000h 

ROM Windows Stub 


> 28F016SV 
x 4 

PCMCIA Window 

F98000h 





Free 



XIP GUI 




Video BIOS 






COOOOh 


COOOOOh 







Video hi AM 






BOOOOh 

Video RAM 

pnnnnnh 


User Flash Disk 


J 


AOOOOh 


ouuuuun 






00000 

640-KB User RAM 

lOOOOOh 











292149-2 




Figure 2. ROM DOS & ROM Disk Memory Maps 


For this application this means that for: 

“ROMDOS” - a ROMDOS build (as opposed to DISK 
build simulation) is used. 


in Appendix B. ROM binary files 1 and 2 can be com- 
bined into one 64-ICB binary image as follows: 

copy /b ROM 1. BIN + ROM2.BIN ROMDOS5.BIN 


“POWER” - the MS-DOS APM and power manage- 
ment are NOT used. 

“ROMDRIVE” - the compiler will use the internal 
ROMDRIVE drivers. 

“CMOS” - forces MS-DOS 5.0 ROM to look at the 
CMOS byte if the Multi-Boot option is not chosen. 

“CONFIGPROC” - normal CONFIG.SYS and 
AUTOEXEC.BAT processing will be used. 

Since we are planning to use a ROM DRIVE, MS-DOS 
5.0 ROM needs to know where the ROM DRIVE ex- 
ists. To set the ROM drive base address, the MS-DOS 
5.0 ROM OAK file ROMRDHI.ASM must be modi- 
fied. Edit the file and set the ROMDRIVERBASE 

LO equal to OOOOh and the ROMDRIVERBASE HI 

equal to OF Ah, or 64 KB above the base address of the 
extended memory XIP module. 

Now the MS-DOS ROM binaries are ready for build- 
ing. Using the NMK utility, 3 separate binary files are 
compiled based on the requirements and addresses 
specified in the MS-DOS ROM Image Description file 


Once the XIP binaries are built, the rest of the ROM 
disk needs to be built. First, specify a RAM Drive with- 
in your build or development PC using the MS-DOS 
RAMDRIVE.SYS device driver as follows: 

device = RAMDRIVE.SYS 256 /e 

After rebooting your PC, copy the files needed for your 
particular application. For an example of CON- 
FIG.SYS and AUTOEXEC.BAT files, see Appendix 
C. Change the drive label as per the MS-DOS 5.0 OAK 
instructions and then use the MS-DOS IMGET utility 
to capture the image of the RAM drive into a binary 
file. Next, concatenate the ROM3.BIN binary image 
created by the NMK with the ROM Disk image cap- 
tured from the RAM drive by using the MS-DOS Copy 
command as stated earlier: 

copy /b ROM3.BIN + RDISK.BIN ROMDSK.BIN 

This will create a 327-KB binary file with both XIP 
DOS code and the ROM Disk code for a single load 
into flash memory. 
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Loading the ROMDOS5.BIN file into the system’s 
flash BIOS chip requires the use of a BIOS Independent 
Software Vendor’s (ISV) Flash Update Utility. Most 
major BIOS IS Vs now offer such utilities. If your par- 
ticular system design uses a BIOS developed internally, 
refer to Intel’s AP-341 “Designing an Updateable BIOS 
Using Flash Memory” (order number 292077) for more 
information on flash BIOS designs and related soft- 
ware. Loading the ROMDISK.BIN file requires devel- 
oping a DOS-based utility to access flash memory in 
“protected mode.” Creating this utility is discussed un- 
der Section 4.0, Software Utilities, Subsection 4.2, Bina- 
ry Loader. 


2.3 Resident Flash Disk 

Once a DOS-based, XIP operating system is in place, 
the next area to work on is file storage for flash memo- 
ry. File storage is possible with either FlashFile compo- 
nents or FlashFile memory-based cards, since they ap- 
pear the same to file system software. However, the 
characteristics of flash memory are very unlike magnet- 
ic storage media characteristics. 

File Allocation Table (FAT)-based systems rely on the 
fact that the operating system has unrestricted Write 
capability and/or access to the media, particularly 
when updating the FAT for a file creation, update or 
deletion. Flash memory on the other hand, does not 
necessarily allow write access 100% of the time. When 
the flash memory media is completely erased (all 
FFh’s), writing data to the media can occur at any time 
and at any location. Additional data writes within the 
same block but at different locations can also occur. 
However, once a bit is written to a zero (Ob), erasure of 
the whole block is required (taking the bits to a Logic 1 
condition) before allowing that particular bit to change 
back to zero. This asymmetrical characteristic of flash 
memory prevents using a straight implementation of 
the FAT-based file architecture and requires an alterna- 
tive file system implementation. 

2.3.1 MICROSOFT’S FLASH FILE SYSTEM 

To enhance the use of flash memory as a disk, Micro- 
soft created the flash file system. This file system oper- 
ates as a list of linked lists while keeping track of indi- 
vidual block erasure and file deletions, using minimal 
system overhead. File allocation structures use indirect- 
ly linked lists, allowing the file system to update files 
and data within the files without first requiring the area 
where the file is located to be erased and then updated. 
During file deletion, a file’s header structure is written 
to mark the file as deleted, removing the file from the 
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file allocation listing. Once a block contains a majority 
of deleted files, the file system performs a (background) 
clean-up operation and copies good files out to a free 
block and erases the block with all the deleted files. 
This achieves the goal of user being able to use flash 
memory the same as they would use any other mass 
storage media without doing anything different. 

Three distinct parts comprise the file system organiza- 
tion and implementation: 

— A File System Redirector, whose job is to intercept 
the disk operations passed to MS-DOS by an appli- 
cation and translate them into generic file opera- 
tions, passing them on to the File System Driver. 

— A File System Driver, which accepts generic file 
operations passed to it from the File System Redi- 
rector, implements the architecture and logic of the 
Microsoft flash file system, and passes low-level 
commands such as Read, Write, Copy, and Erase to 
the device driver. 

— A Device Driver, which accepts low-level com- 
mands from the File System Driver and interfaces 
to the host system hardware implementation. 

The File System Redirector performs a task analogous 
to a network redirector for LAN (Local Area Network) 
systems and appends itself to MS-DOS. Applications 
then think they are running from a networked drive. 
Some classes of applications and utilities will not oper- 
ate via this interface. Specifically, those applications 
that issue the INT 13h disk BIOS I/O call, INT 25h 
DosAbsRead, or INT 26h DosAbsWrite calls will not 
work properly with the flash file system, just as they 
would not work over a network LAN. The File System 
Driver treats the flash media as a collection of large 
blocks, all identical in size. Individual block statistics 
are kept within a variable length structure at the top of 
the block with the remainder of the space available for 
directory, file control structures and file data storage. 
The File System Driver also determines when deallo- 
cated space (deleted files or directories) within a block 
is reclaimed for re-use. 

The device driver portion is OEM-modifiable and needs 
to be written for the specific hardware used. The only 
MS flash file system hardware requirement is a single 
window available per socket in a system’s adapter space 
that addresses all the flash memory to be used. Window 
size and base address are left to the system designer to 
decide, based on system design requirements. 
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Hardware Guidelines: 

• Window size of either 8, 16, or 32 KB 

• Base address in adapter space (COOOOh to DFFFFh) 

For more detailed information on Microsoft’s flash file 
system, consult the Microsoft flash file system OAK. 


2.4 Resident Flash Disk (RFD) and the 
ExCA Standard Architecture 

Many systems which use an RFA will also want to 
incorporate PCMCIA memory and I/O cards. If an 
RFD uses the same software architecture used for 
PCMCIA cards, less software duplication is present in 
systems containing both cards and RFDs. This section 
discusses the ExCA standard architecture as it applies 
to an RFD and a flash file system. 

Most of this section was excerpted from the “ExCA 
Standard Specification.” The reader is encouraged to 
obtain that document for more details not revealed in 
this discussion. Also refer to “PCMCIA PC Card Stan- 
dard, Release 2.1,” “PCMCIA Card Services Interface 
Specification,” and “PCMCIA Socket Services Inter- 
face Specification, Release 2.1.” 

The ExCA standard architecture specifies a standard 
host system hardware and software interface for 68-pin, 
PCMCIA/JEIDA memory and I/O cards. The “ExCA 
Standard Specification” defines the minimum hardware 
and software interfaces that card and system designers 
can rely on for basic compatibility across PC Cards, 
systems, and related software. By defining these inter- 
faces, the ExCA standard architecture makes the 
PCMCIA goal of PC Card inter-operability a reality. 


2.4.1 ExCA STANDARD ARCHITECTURE 
SOFTWARE INTERFACE 

The primary purpose of the ExCA standard architec- 
ture software interface is to explicitly define a minimal 
set of socket control and resource access functions upon 
which higher-level PC Card Client device drivers can 
rely. A PCMCIA implementor may incorporate a 
range of functions beyond the basic Memory Card In- 
terface specified in PCMCIA 1.0. For PCMCIA 2.1, 
three primary functional extensions to the specification 
exist. They are: I/O devices, L-XIP-mapped memory 
(“L” stands for LIM or Lotus, Intel, Microsoft), and 
E-XIP-mapped memory (“E” stands for Extended or 
protected mode memory). While basic memory require- 
ments can be met with a single, small memory-mapped 
window or even via an I/O approach, both XIP modes 
require direct-mapping interface capability, with very 
specific boundaries in the L-XIP mode. Without an 
ExCA standard architecture-like hardware and soft- 
ware support for direct-mapped memory, XlP-format- 
ted cards cannot function. The ExCA standard archi- 
tecture socket hardware and software specifications de- 
fine basic, clear compatibility definitions for PC cards, 
software drivers, and host systems. 

ExCA standard architecture allows PC Cards and 
sockets to be accessed by multiple PCMCIA-aware de- 
vice drivers, configuration utilities and applications, 
with efficient and non-conflicting use of system re- 
sources. An architectural diagram of ExCA standard 
architecture functionality is shown in Figure 3. The pri- 
mary components of the software interface are Socket 
Services, Card Services, and Memory Technology Driv- 
ers (MTDs). Socket Services provide the lowest-level 
function set for socket hardware adapter control. Card 
Services allocates resources and coordinates PC Card- 
related activities for higher-level client device drivers. 
MTDs provide basic program/erase algorithms. 
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Figure 3. MS FFS and ExCAtm standard Architecture 
Adding an RFD Requires only one Software Addition - RFD Socket Services 


ExCA Standard Architecture Socket Services 

ExCA standard architecture Socket Services is the low- 
est-level software interface that directly controls PC 
Card sockets. Socket Services defines a software inter- 
face to manipulate socket adapter hardware in a way 
that is independent of hardware implementation. Sock- 
et Services defines several abstract resources which can 
be manipulated. An Adapter is the hardware that sup- 
ports connecting one or more 68-pin PCMCIA Sockets 
to a host system, or in the case of a resident flash disk, 
the hardware that supports a memory interface only. A 
Socket is the hardware that supports a single 68-pin 
PCMCIA connector. A Window is the hardware that 
supports mapping a region of system memory or I/O 
address space to a region of card memory or I/O ad- 
dress space. A Card is a PCMCIA card that is inserted 
into a socket. Example functions are: configure a socket 
for an I/O or memory interface, control socket power 
voltages and make callbacks for PC Card insertion and 
status changes. 


Socket Services code size is small, enabling it to fit 
within a ROM-BIOS. The Socket Services interface can 
be used during POST, and must be ROM-resident to 
support booting from a PC Card. The interface is ac- 
cessed via an 8086-compatible register-based protocol, 
and invoked through software interrupt lAh, with 
functions starting at 80h. This interrupt is shared with 
the real-time CMOS Clock Driver. The Socket Services 
software interrupt is called with the proper settings in 
the host processor’s registers. The functions returns 
status via the Carry flag and registers specific to the 
function invoked. 

Multiple hardware socket adapter interfaces can be 
supported by chaining multiple Socket Services han- 
dlers. This includes providing Socket Services support 
for motherboard-resident flash memory arrays by treat- 
ing the control circuitry and memory array as if it were 
a PC Card single socket/card combination. 
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ExCA Standard Architecture Card Services 

Card Services is the interface used to manipulate ExCA 
standard architecture-related system resources. Card 
Services is sub-divided into five functional categories: 
Client Services, Resource Management, Client Utilities, 
Bulk Memory Services, and Advanced Client Services. 
Client Services provide for client initialization and the 
callback registration of clients. Resource Management 
provides basic access to available system resources, 
combining knowledge of the current status of system 
resources with the underlying Socket Services adapter 
control functions. Client Utilities perform common 
tasks required by clients so that functions, such as CIS 
(Card Information Structure) tuple access, do not need 
to be duplicated in each of the client device drivers. 
Bulk Memory Services provide read, write, copy, and 
erase memory functions for use by file systems or other 
generic memory clients that need to be isolated from 
memory hardware details. Advanced Client Services 
provide specific functions for clients with special needs. 

Card Services provide a packet-based request interface 
(i.e., uses a block of RAM for passing inputs and out- 
puts between the caller and the interface) which pro- 
vides a standard protocol for PC Card client device 
drivers to access cards and their required system re- 
sources. It provides separate registration and callbacks 
for card insertion and card status change event notifica- 
tions, allowing associated client device drivers to take 
the appropriate actions. For file system Read, Write, 
Erase and Copy operations, a special interface is pro- 
vided for Memory Technology Drivers (MTDs) which 
can handle the details of different memory technolo- 
gies. 

Resource Management provides a protocol for sharing 
resources within an environment, where previously the 
end-user was responsible for resolving resource con- 
flicts. Resource Management resolves resource conten- 
tions without end-user interaction. 

Advanced Client Services contains a RetumSSEntry 
function which is essentially a direct bypass to Socket 
Services. Card Services require Socket Services to ma- 
nipulate PC Cards and socket hardware. ExCA stan- 
dard architecture client drivers should typically inter- 
act directly with Card Services and not Socket Services. 


Card Services is typically implemented as a device driv- 
er. Card Services provides function number AFh in the 
Socket Services interrupt lAh interface for real-mode 
operation. During initialization, Card Services deter- 
mines the state of the host environment. This includes 
determining available system memory, available I/O 
ports, IRQ assignments, installed PC Cards and socket 
state. How this is performed is implementation-specific. 

Memory Technology Driver 

\ 

The PCMCIA standard supports many types of memo- 
ry devices used in PC cards. While all PC memory 
cards can be read from, writing or erasing memory 
cards may require special programming algorithms. 
Card Services hides these details of writing or erasing 
various memory cards from Client Device drivers, like 
Microsoft’s Flash File System, by using a Memory 
Technology Driver (MTD). Each MTD contains the 
specific algorithms required by the memory card manu- 
facturer for programming or erasing their cards. Imple- 
mentation of MTD support in Card Services is recom- 
mended. It is not required for ExCA standard architec- 
ture compliance at this time. 

2.4.2 RFD SOCKET SERVICES 

RFD “Socket Services” functions similar to ExCA 
standard architecture Socket Services in that the soft- 
ware interface to manipulate socket adapter hardware 
is preserved, but an RFD Socket Services does not con- 
trol any sockets or cards or respond to card removal 
and insertion events. RFD Socket Services allows a res- 
ident flash disk implementation, through chip-set logic 
or additional external logic, to appear to ExCA stan- 
dard architecture software and the system as another 
Adapter using a single Window mechanism, accessing 
permanently installed flash memory on a motherboard. 
All the rest of ExCA standard architecture Socket Serv- 
ices functions are kept as they relate to this definition. 
An example of a non-working RFD Socket Services 
function is using it to configure an I/O card. If request- 
ed to complete such an operation, RFA Socket Services 
will respond with “Function not supported.” 

For more information on the specific hardware design 
used for a Resident Flash Disk, refer to Section 3.0. 
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2.5 XIP Graphical Users Interface 
(GUI) Overview 

Many GUIs exist today, but not all are configured to 
run in a minimized XIP mode for portables. Some de- 
signs may implement a simple DOS-based pen interface 
on top of an XIP DOS, like Communications Intelli- 
gence Corporation’s PenDOS*, and add a single appli- 
cation like a forms recorder. Other designs may not use 
XIP DOS at all and the system design revolves around 
the XIP GUI requirements alone. 

Microsoft leads the rest of the software industry in XIP 
GUI development, releasing the Windows 3.1 ROM 
Development Kit in September of 1992 and, recently, 
the Modular Windows Development Kit in January of 
1993. Both are XIP GUI implementations of the Win- 
dows GUI Operating System and are fully modularized 
for OEM configuration. Modularization assists OEMs 
by simplifying the streamlining of an O/S’s suitability 
to task by allowing the OEM to choose which functions 
are important and required for a particular design and 
which functions can be left out. Benefits to the OEM 
are: 

— Preserved API for using existing Windows applica- v 
tions or new application development 

— Reduced development time and costs by using stan- 
dard Windows application development tools and a 
wide choice of Windows software developers 

— Ease of use for end-user 
Modular Windows 

Microsoft’s Modular Windows Operating System uses a 
subset of the Windows 3.1 Operating System and in- 
cludes extensions supporting TV-based multimedia 
players. Target market is home entertainment, but 
could easily be adapted for machine control on factory 
floors. The differences between Modular Windows and 
Windows 3.1 ROM are summarized below: 

— Reduced support for the Windows 3.1 application 
programming interface (API) 

— Reduced support for Windows 3.1 extension librar- 
ies 

— New user-interface controls (instead of pull-down 
menus) 

— New support for hand-control input devices 

Software Requirements: 

• MS-DOS 5.0 in XIP form 


System Requirements: 

• 80286 or greater CPU 

• 1-MB RAM minimum 

• 1 MB of XIP memory (flash, EPROM, or ROM) 

Since the focus of this application note is personal com- 
puters, sub-notebooks and below, Modular Windows 
implementations will not be discussed. However, many 
of the principles of putting Modular Windows code in 
flash memory (memory maps, software tools, flash up- 
dateability, etc.) are the same here as the Windows 3.1 
ROM example which is discussed later in this section. 

Windows 3.1 ROM Version 

Computers running Windows in ROM or XIP mode 
are very similar to standard PC running disk-based 
Windows. The only major exception is the presence of a 
large amount of XIP code storage in extended memory 
from which Windows executes, and a smaller amount 
of XIP code storage in adapter space. For the rest of 
this discussion, the Windows XIP code stored in ex- 
tended memory is referred to as HIROM.BIN and the 
small amount of Windows XIP code stored in real 
mode space is referred to as LOROM.BIN. 

Two modes of operation are possible for XIP Windows; 
“standard and enhanced,” just as on disk-based PCs. 
However, each require different system resources for 
the XIP Windows version. 

For standard mode, Windows executes fully in ROM, 
leaving almost all the system RAM available for user 
programs. This means that all Windows “core code” 
including DOSX.EXE, USER.EXE, GDI, the Win- 
dows kernel and all drivers run from XIP storage 
space. Also, all shell programs, applets, fonts and other 
Windows resources are stored in and run from XIP 
storage space without being loaded into RAM. 

Enhanced mode Windows must execute partially from 
RAM. enhanced mode components such as 
WIN386.EXE and VxDs (virtual device drivers) must 
be loaded into RAM from some type of disk (a flash 
disk, ROM disk, or flash card) for execution, as their 
code writes back to their execution location from time 
to time and creates errors if loaded into XIP code stor- 
age such as flash memory. Components shared between 
modes, specifically USER.EXE, GDI, the kernel and 
drivers, continue to run from their stored locations in 
XIP address space. 
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Additionally, for either standard or enhanced modes, 
all Windows 3.1 features are supported in XIP Win- 
dows. The only limiting factors are the amounts of 
available RAM, XIP storage and, in the case of en- 
hanced mode, disk space. 

Adding Applications 

The Windows 3.1 ROM Development Kit (RDK) can 
add any Windows executable program or application 
into the main XIP binary image file HIROM.BIN. The 
application must conform to the XIP application re- 
quirements specified in the Windows 3.1 Technical 
Specification. Microsoft is capable of supplying XIP 
versions of Word for Windows, Excel, Microsoft Mail 
and Microsoft Works but must be developed between 
an OEM and Microsoft on a platform-by-platform ba- 
sis. 

Once the O/S and application functionality is deter- 
mined and the build script CONTENTS.ROM edited, 
the RDK produces two binary images: the large HI- 
ROM.BIN extended mode image containing O/S and 
application code, and the small “real mode’’ LO- 
ROM.BIN image containing the listing of all the XIP 
code contained in HIROM.BIN. After both XIP Win- 
dows binary files are loaded into flash memory and the 
system is up and running, clicking on an application 
causes the XIP Windows kernel to search its internal 
listing (LOROM.BIN) for an XIP image module first. 
If the image is not found within the XIP listing, the 
Windows kernel then searches the file paths present at 
runtime to try and load the application from its current 
file directories. If the program is not found within file 
directories, XIP Windows returns “Application miss- 
ing, file not found.” Additions of other extensions to 
the XIP image such as multimedia support and Pen 
Windows are added in a similar manner. 


2.6 XIP GUI Implementation 

As mentioned earlier, XIP Windows requires two mod- 
ules; a small amount of XIP storage in device adapter 
space called LOROM.BIN, and a larger amount of XIP 
storage called HIROM.BIN in extended memory 
space. The LOROM.BIN file contains information 
about the modules loaded in the HIROM.BIN XIP (see 
Figure 4) image and must be accessed in real mode by 
three modules, WIN.COM, RSWAP.EXE, and 
WIN386.EXE. Additionally, portions of the DOS ex- 
tender (DOSX.EXE) must be able to run in real mode 
and are therefore located in the LOROM.BIN XIP 
image. The information the three modules look for is 


contained in the ROM Table Of Contents (ROMTOC), 
also located in LOROM.BIN and contains general in- 
formation about both XIP images (small and large), 
entry point addresses for initialization, and a list of the 
executables stored in the large XIP image. 

The extended memory XIP image contains the bulk of 
the system’s code and data segments, EXE headers, and 
a prototype Local Descriptor Table (LDT) which is a 
data structure defining the addresses, sizes and types of 
segments used by 80286, Intel386TM, 0 r Intel486 proc- 
essors. For more information on a Windows 3.1 XIP- 
based system, please refer to the Microsoft Windows 
3.1 ROM Development Kit. 



Software Requirements: 

• MS-DOS 5.0 or equivalent in XIP mode 

• Software Utility to load both small and large XIP 
images into flash memory 

• For enhanced mode disk space requirements, MS 
Flash File System 2.0 combined with ExCA stan- 
dard architecture software for a Resident Flash 
Disk. 
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System Requirements: 

• 80286 CPU or greater 

• RAM: Minimum of 1 MB for standard mode or 

2 MB for enhanced mode 

• XIP Store: Minimum of 2 MB for standard mode, 

3 + MB for enhanced mode 

• Flash Disk Store: Zero for standard mode, 2 MB for 
enhanced mode 

For this particular design example, enhanced mode 
functionality is used to show a full implementation of 
Windows. An RFD is used to load WIN386.EXE, 
VxDs and all the "'.INI and *.GRP files. A complete 
listing of the CONTENTS.ROM file used by the Win- 
dows ROM Image Builder utility to create an XIP 
Windows system is shown in Appendix C. The Win- 
dows RDK Enhanced Full sample CONTENTS.ROM 
file is used as a template and edited to locate the 
LOROM.BIN file at D8000h and is a total of 16 KB. 
The HIROM.BIN file is located at COOOOOh and is a 
total of 3.7 MB. 


2.7 Pen Extensions 

Microsoft’s Windows for Pen Computing is an exten- 
sion to Microsoft Windows version 3.1 and has its own 
SDK. Pen Windows Extensions do not require any 
changes to existing Windows 3.1 applications and a se- 
lection of pen recognizer drivers come bundled in the 
SDK provide for fast development of a pen-based sys- 
tem. In particular, the Wacom PL-100V pen tablet and 
VGA graphics card can be added to an ISA bus slot for 
early debug and pen software development. 

All the Pen Windows extensions are directly executable 
within the HIROM XIP image and can be added to the 
CONTENTS.ROM listing. 


3.0 HARDWARE 

This section describes the general hardware require- 
ments for an RFA design, then discusses a specific im- 
plementation using the Intel486 SX, FlashFile Memory 
(28F016SV) and an EPX780 PLD architecture as an 
example. 


3.1 Resident Flash Disk 
Implementation 

As stated in Section 2.3, the MS flash file system re- 
quires a hardware mapping window in adapter space 
that interfaces directly to flash memory. This window is 
similar in function to an EMS mapping window, but 
unlike EMS this window is configured via a Sliding 
Window Address Register located in the I/O space and 
has a fixed base address of DCOOOh and a fixed size of 
16 KB. By setting the correct address in the register, 
the full 16-MB ISA memory address space is viewable 
in 16-KB increments. 

The hardware requirements for the Flash Disk imple- 
mentation are simply: 

1. A Window base address that appears in real mode 
memory somewhere in adapter space (COOOOh to 
DFFFFh). 

2. A Window size that is either 4, 8, 16, or 32 KB. 

These two options provide a level of flexibility for an 
OEM’s system implementation and reduces the memo- 
ry footprint in adapter space. 

The flash disk address mapping in Figure 5 shows the 
flash disk and ISA bus address maps together. The im- 
plemented sliding window scheme allows 16-KB blocks 
of the flash disk address space to be mapped into the 
real mode area from DCOOOh to DFFFFh for access by 
the MS flash file system. 

For some ideas on how to implement an external logic 
flash disk implementation, see Intel Application Note- 
343, “Solutions for High Density Applications Using 
Flash Memory,” order number 292079. The application 
note describes a complete design for an ISA Bus add-in 
card. A local bus design can be derived from the ISA 
Bus implementation or from design given in the Sche- 
matic Overview section. 
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Figure 5. Flash Disk Mapping 


3.2 XI P DOS Implementation 

As stated in Section 2.2, DOS in Flash Implementation, 
MS-DOS 5.0 ROM Version is built assuming the 
EOOOOh segment location and also consists of a ROM 
Disk located in extended memory at FCOOOOh. 

ROM DOS Storage 

This design example uses Intel’s 2 Mb, 28F200BX-T 
boot block flash memory. This device is organized with 
varying sized blocks starting with a 16-KB hardware 
locked boot block at the top of the device, followed by 
two 8 KB, separately erasable Parameter Blocks, then a 
separately erasable 96-KB block followed by a 128 KB 
code block. All the blocks except the boot block are 
erasable/programmable when Vpp is high. The boot 


block is unlocked by applying a second 12.0V input (in 
addition to Vpp) to the RP# pin, which allows pro- 
gramming and erasure within the boot block. The sec- 
ond 12.0V input guarantees hardware protection of the 
boot block code against unwanted or inadvertent pro- 
gramming or erasure. The benefit of using the boot 
block architecture is, that in the event something hap- 
pens during a BIOS code update, the system can recov- 
er using the code within the locked boot block to bring 
up the system and initiate a BIOS code recovery from 
either the floppy drive, serial port or parallel port. 

Using the 2-Mb (256-KB) device enables the design to 
use a single memory chip for four, separate code mod- 
ules: a standard AT compatibility BIOS (64 KB), MS 
DOS 5.0 ROM (64 KB), Video BIOS (32 KB) and 
Power Management Code (16-32 KB). However, the 
sum of all four modules is greater than 128 KB, and if 
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mapped straight down from the top of the 1-MB DOS 
address space, would cover the BIOS space and all 
available adapter space, leaving no room for any addi- 
tional upper memory space. Additionally, ROM DOS 
must be placed within adapter space at boot time so it 
can be scanned as an adapter ROM by the BIOS, and 
hook the INT 19h system boot call. To accommodate a 
2-Mbit BIOS, this design physically places the 
28F200BX-T at the top of the 1-MB ISA address map, 
and uses a paging mechanism created by using an XOR 
gate tied to the highest address bit of the 28F200BX-T. 
The other XOR gate input is a general purpose I/O line 
(GPIO) named FLIP#. 

At system boot time, the FLIP# signal is defaulted to 
the Boot recovery mode (logic 0) placing the boot block 
at the top of the 1-MB address map shown in Figure 6, 
under Boot Recovery Configuration. The Boot recov- 
ery code first checks for valid video BIOS code by look- 
ing for a Video BIOS checksum. If the Video BIOS is 
valid, it is copied or shadowed to DRAM at COOOOh to 
C7FFFh. If the Video BIOS is invalid, the Boot recov- 
ery code will initiate a Video BIOS update. The same 
scenario works for the power management code, it just 
gets copied to a different location in memory. 

Next, to determine if a valid Basic AT BIOS is present, 
the Boot recovery code copies itself into DRAM, sets 
the FLIP# bit high placing the device in the Operating 
Configuration shown in Figure 6 with the Basic AT 
BIOS and MS-DOS ROM on top in the EOOOOh to 
FFFFFh memory map and the boot block positioned 
out of the EOOOOh-FFFFFh memory map. The recov- 
ery code then proceeds to check the Basic AT BIOS 
and ROM DOS code checksums. If valid, the recovery 
code starts the normal AT BIOS boot process and 
ROM DOS is scanned in as an adapter ROM during 
the Power-On Self Test or POST. If the Basic AT BIOS 
code is invalid, the BIOS recovery code indicates a 
BIOS update by beeping or some other OEM defined 
way. Next the recovery code determines if the ROM 
DOS code is valid. If it is not, the BIOS recovery code 
erases the whole block and initiates a BIOS plus ROM 
DOS update from either the serial port or parallel port 
and loads the BIOS code into the rest of the block. If 
the ROM DOS code is valid, the recovery code copies it 
into DRAM, erases the 128-KB block, copies the ROM 
DOS code back in and initiates a BIOS update just as 
before. 

By taking advantage of the boot block’s locked block 
architecture, a solid-state design can always accomo- 
date a BIOS or ROM DOS code update without fear of 
making the system totally inoperable. 


ROM Disk Storage 

As stated earler, the ROM disk portion of MS-DOS 5.0 
ROM Version uses some of the XIP GUI storage area 
consisting of Intel’s 28F016SV FlashFile memory locat- 
ed at FCOOOOh (Figure 2). The ROM Disk portion re- 
quired is about 256 Kbytes, and consists of CON- 
FIG.SYS and AUTOEXEC.BAT files, and all the 
PCMCIA software drivers. For a listing of contents of 
CONFIG.SYS and AUTOEXEC.BAT see Appendix 
C. The hardware needed to implement this is the same 
listed in Section 3.3, XIP GUI Implementation. 


3.3 XIP GUI Implementation 

As stated earlier, Windows 3.1 ROM Version takes 
up about 3.6 MB of extended address space 
(HIROM.BIN) and 16 KB of real mode adapter ad- 
dress space (LOROM.BIN). HIROM.BIN can be lo- 
cated anywhere above 1 MB and should probably be 
high enough above the DRAM address space to allow 
additional DRAM to be added to the system by the 
end-user. Ideally, the system design should be able to 
cache the area where the Windows HIROM XIP code 
is located. This allows the system to take advantage of 
XIP code locality since XIP code should produce a 
very high cache hit ratio. Since the 28F016SV FlashFile 
memory is a xl6 device, x32 access is accomplished by 
pairing two devices for a LOW Word/HIGH Word 
configuration. This creates an erasable block size of 
128 KB. 

The LOROM.BIN file has a couple of implementation 
options. One method is to use a spare block out of the 
extended memory XIP region. This method requires 
external logic to decode the specific adapter space ad- 
dress dedicated to the LOROM function, and generate 
a chipselect to the last block of flash memory. Since the 
LOROM.BIN file size is only 16 KB and the smallest 
erasable block size is 128 KB, 112 KB of the block is 
left unused. Given that the HIROM and LOROM files 
are updated together, the HIROM file could feasibly 
use the extra space if necessary. 
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Another option for the LOROM file is to use some free getting the system’s BIOS code to copy the file before 
storage space within the 2-Mb boot block flash memory or during POST, 
chip. The file could then be copied to the correct adapt- 
er space shadow RAM location at boot time. Copying Either option is possible. The choice is dependent on 

the LOROM.BIN file can occur at the same time that determining which is easier, modifying hardware or 

Video BIOS and Power Management code are copied. modifying a BIOS boot-up process. 

This method provides update capability while reducing 
external logic requirements. The only hinge factor is 



Figure 6. Boot Block Mapping 
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3.4 RFA Control Logic Overview 

This section describes the logic design for the RFA 
controller. Timing analysis is also provided to draw 
special attention to some of the difficulties and their 
resolutions. Lastly, a discussion of possible future en- 
hancements is presented. 

As shown in the block diagram, Figure 7, the EPX780 
provides the interface between the CPU and the flash 
memory. The following components are utilized in this 
sub-system design: 


• 25 MHz 3.3V 486 SX CPU 

• Altera’s EPX780-132 PLD 

• 4 28F016SV-75 1M x 16-bit flash memory devices 

• 32-bit Transceiver 

(4 x 8-bit or 2 x 16-bit, tpp> <15 ns) 

The signal names used in the diagrams are described in 
Table 3 


486SX-RFA Sub-System Design 
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Figure 7. RFA Block Diagram 
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Table 3. Signal Name Descriptions 


Signal name 

Signal Description 

CLK 

Clock input to the subsystem, assumed 25 MHz 

ADS# 

Address Strobe from the CPU 


Write/Read# signal from CPU 

M/i/o# 

Memory/i/o# signal from CPU 

D/C# 

Data/Code# signal from CPU 

WE# 

Write Enable# signal from EPX780 to flash memory 

OE# 

Output Enable # signal from EPX780 to flash memory 

RDY# 

Ready# signal from EPX780 to CPU 

KEN# 

Cache Enable# signal from EPX780 to CPU 

DT/R# 

Data Transmit/ Receive# signal from EPX780 to transceiver 

ABUSi 

Address Bus, A23-2 from CPU to EPX780 

ABUSo 

Address Bus, A21-2 from EPX780 to flash memory 

BSEL# 

Byte Enable# signals, BEO-3# from CPU to EPX780 


Chip Enable# signals, CEHO-1 # & CELO-1 from EPX780 to flash memory 

DBUS 

Data Bus, D31-0 from CPU to EPX780 and transceiver 

FLASH DBUS 

Data Bus, D31-0 from transceiver to flash memory 

ADSWREG 

Sliding Window Register select 

ADS1..4 

Address Strobe delay flip-flop chain 

SWREG 

Sliding Window Register 


NOTE: 

A “#” after the name means inverted or active low. 

Logic Design Sliding Window Address Register Interface 



The logic design (see Figure 8) for the EPX780 RFA 
controller was split into the following three subdivi- 
sions from a design standpoint: 

• Sliding Window Address Register interface 

• ROM Stub Window mapping function 

• Chip enable logic for memory devices 


The necessary address decoding for the actual loading 
of the Sliding Window Address Register with the base 
address of the window on the data bus is done using a 
simple AND function. Similarly, allowing the address 
bits to propagate out of the register to the address bus 
upon access to the window is done using a 2x1 mux for 
each bit with the address decode as the select. 
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ROM Stub Window Mapping Function 

This function is also implemented using 2x1 muxes. 
Here, one of the inputs to the mux is tied to the destina- 
tion address. Since the two muxes are in series, they are 
combined into a single set of equations. These equations 
are minimized taking into account the constant address 
input to the second mux. 

Chip Enable Logic 

The chip enable logic and other control signals to the 
flash devices are first implemented simply from a func- 
tional perspective. The timing accuracy for this logic is 
derived via a flip-flop chain transferring the ADS# 
pulse for three clocks, thus allowing for the four clock 
read cycle. The equations for the KEN# and the 
RDY# are generated after determining the timing of 
the other signals. 

Byte Writes 

In the current implementation, BYTE# is tied high, 
putting the 28F016SV into xl6 mode. In this mode, the 
flash devices will only accept word writes. Byte writes 
to the flash array requires software to write an [FFh] to 
the unused byte in order to prevent the corruption of 
data. When verifying the byte write it will then be nec- 
essary to ignore the unused byte after reading in the 
corresponding word. 

Timing Analysis 

All the signals are analyzed for timing accuracy. Since 
the flow of information is initiated by the ADS pulse, a 
three flip-flop chain is connected to the ADS line. This 
chain-stores the state of the machine. The state is then 
used in all the enable equations and in the two signals 
that talk to the CPU (KEN# and RDY#). The two 
signals, the KEN # and the RY/BY # require further 
attention. The KEN# is generated but only for code 
read access to the flash disk or XIP. The RY/BY # is 
actually not implemented in the EPX780. It is suggest- 
ed that the system designer simply tie the RY/BY # to 
an interrupt line on the CPU or poll the flash device for 
the status of the Write or the Erase operation. 


Timing diagrams for the resulting design are shown in 
Figures 9, 10 and 1 1 for the register load cycle, a flash 
read cycle and a flash write cycle. The register load 
cycle requires 2 clocks, the memory read requires 4 
clocks while the write cycle requires 4 clocks for com- 
mand plus 4 for each word written. The acknowledg- 
ment for the write from the flash device is in the form 
of an interrupt to the CPU via the RY/BY# line. 

Enhancing the Design 

The design is implemented to optimize the power usage 
and thus uses the 3.3V Intel486 SX CPU, a low power 
CMOS transceiver and the 28F016SV-75. For a higher 
performance design, a 5.0V Intel486 SX CPU and 
28F016SV-65 memory can be used. Similar 5.0V trans- 
ceivers are also available. The transceivers specified in 
the diagram are high speed devices with typical delays 
of about 5-6 ns; however, a 15 ns delay is allowed for in 
the design of the interface, so higher performance de- 
signs may be utilized. With 5.0V operation it is possible 
to eliminate one wait state during the read and write 
cycle. However, a complete timing analysis would be 
required. 

The EPX780 has 102 I/O and 2 clock pins of which 
81 are used by the current design. Also available are 
80 macrocells, of which 50 are utilized by the RFA 
design. 

Further enhancements to the design can easily be im- 
plemented using the remaining cells and I/Os in the 
EPX780. Possible improvements include making the 
window size, as well as the base address of the window 
in the lower 1-MB space user-definable. The ROM 
Windows Stub window can also be converted to a more 
flexible mapping. The remaining resources on the PLD 
allow the designer to customize the design to the need- 
ed requirements. 
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Figure 8. Logic Diagram 

The logic for the Sliding Window, the ROM Stub Window and the Chip Enable functions in the EPX780 RFA 
controller is shown here along with the flash configuration. 
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Figure 9. Sliding window Register Load Cycle 


The signals from the CPU transition between 3 ns and 20 ns after the clock. There is a 10 ns delay for the logic to 
propagate through the EPX780 to prepare for latching the data on D9-0 (DBUS). In the next clock, the ADS# is de- 
asserted by the CPU, and the RDY # is asserted by the EPX780. During the clock that the CPU latches the RDY # 
signal, the data is latched by the EPX780. Thus, RDY # is asserted before the EPX780 latches the data and the 
operation requires only two clock cycles. 

Note : Black areas indicate don’t care. Grey areas indicate propagation delay. 


3-766 






Figure 10. Flash Memory Read Cycle 


In this cycle, the flash memory will guarantee data on the flash data bus 75 ns after the control signals are presented. 
The control signals are guaranteed valid after 30 ns. Thus the data from the flash memory is guaranteed to be on the 
CPU’s data bus after 120 ns allowing for a 15 ns transceiver delay. Since this particular read cycle is a code memory 
read cycle, the KEN # is asserted during the third clock so the CPU can latch it in the fourth clock. The RDY # is 
asserted exactly one cycle after the KEN # , thus allowing for the CPU to latch the data on the rising edge of the fifth 
clock following the request. 






Figure 11. Flash Memory Write Cycle 


The write cycle is actually composed of two separate write requests. The first is a “write” command presented on the 
data bus while the WE# is asserted and the chip enable is valid. The second bus cycle transfers the actual address 
and data to be written. In the write cycle, the RDY # is latched on the risng edge of the fifth clock. The write 
completion is signaled by the RY/BY # output of the flash memory which should be connected to an interrupt line 
on the CPU. 
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4.0 SOFTWARE UTILITIES 

4.1 Diagnostic 

It is highly recommended that system designers develop 
simple diagnostic tools to test the hardware at a very 
low level (i.e., Write Byte, Write Word, Read Word, 
Erase Block). Such a tool proves invaluable when de- 
bugging new hardware and software designs and resolv- 
ing hardware and software conflicts. 


4.2 Binary Loader 

The RFA Binary files HIROM.BIN, LOROM.BIN, 
and ROM Disk must all be loaded into protected mode 
from real mode. This can be accomplished a number of 
ways: 

1. Use a DOS Extender. This provides a quick method 
to create a utility using the tools a DOS Extender 
provides. However, licensing may prove to be diffi- 
cult or expensive. 

2. Using BIOS-based extended memory calls. These 
actually worked quite nicely and reliably, but 
proved to be slow and doubled the time to erase and 
program HIROM.BIN. 

3. Use XMS Calls. This method depends on the exis- 
tence of the MS-DOS file HIMEM.SYS to access 
the XMS handler, and was the fastest of all. 

For lab testing, our binary loader used a simple file 
name plus command line parameters. A system for end- 
users would need a more elaborate user interface to 
guide them through the software update. Some basic 


software requirements outside of the basic file Read/ 
Write capabilities and command line parsing for the 
flash memory Binary Loader are: 

• Incorporate basic flash memory program and era- 
sure commands. These software drivers are available 
for both ASM86 and “C” in Intel’s Application 
Note-360, “28F016SA FlashFileTM Software Driv- 
ers,” order number 292095. This application note 
addresses things like read device identifier, Vpp 
ramp time, x8 and xl6 parallel programming and 
block erasure by providing proven, tested routines 
for each. 

® Choose a method of protected mode access that 
makes the most sense for you. 

• Allow for specific base addresses to be entered by 
the user, while within the program automatically de- 
termining what block and the number of blocks to 
be erased from the base address and binary file size. 


5.0 SUMMARY 

This application note discussed a new system architec- 
ture based on solid-state software and hardware design 
concepts. This new architecture is based on using flash 
memory for the following; BIOS + DOS code storage, 
a nonvolatile RAM disk or RFD, and as XIP GUI 
code storage or RFX. Specific flash memory compo- 
nent and PCMCIA card information is found in their 
respective data sheets. Contact your local Intel or dis- 
tribution sales office for more information or to obtain 
assistance in evaluating boot block or FlashFile memo- 
ry components, as well as Intel’s product line of 
PCMCIA flash memory cards. 
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6.0 ADDITIONAL INFORMATION 



Document 

292092 

AP-357 “Power Supply Solutions for Flash Memory” 

292094 

AP-359, “28F008SA Hardware Interfacing” 

292095 

AP-360, “28F008SA Software Drivers” 

292097 

AP-362, “Implementing Mobile PC Designs Using High Density FlashFileTM 
Components” 
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APPENDIX A 

MS-DOS ROM IMAGE DESCRIPTION 


## / / // mmmmmmmmmmmmmmmm m 11 # mwwvwmm m 

# RFA ROM DOS Description File # 

# ROM image description file for 64K of ROM space at # 

# EOOOO-EFFFF and one 256K ROMDISK module at F90000 # 

# Actual file sizes created: Three 32K modules 

ROMl=Int 19 hook and Resident DOS Code 

ROM 1 SIZE=8000 
ROM 1 M AX=7 FFF 
ROM 1 TYPE=SEG 
ROM 1 ADDR=E000 
ROM 1CHKSUM=YES 
ROM 1NUMBLOCKS=40 

ROMlFILES=..\romhead\romboot.bin ..\dos\resdos. 16 

ROM2=COMMAND ROM Hdr Res. BIOS Code Bootstrap loader Resident Command Code 

ROM2SIZE=8000 

ROM2MAX=7FFF 

ROM2TYPE=SEG 

ROM2ADDR=E800 

ROM2CHKSUM=YE S 

ROM2NUMBLOC KS=40 

ROM2FILESs..\cmd\command\romhead.bin ..\bios\resbio. 16 \ 

..\romload\romload.sys .Acmd\command\rescom.l6 ..\dos\romdos.sys 

ROM3=Command interpreter 
ROM3SIZE= 1 0000 
ROM3MAX=FFFF 
ROM3TYPE=BASE 
ROM3ADDR=F90000 

ROM3FILES=..\cmd\command\command. 16 ..\bios\rombio.sys 

292149-12 
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APPENDIX B 

ROMDISK CONFIG.SYS AND AUTOEXEC.BAT 


AUTOEXEC.BAT 


©echo off 
prompt $P$G 

set path=c:\;d:\rdklO\build\disk;d:\utils;d:\diags; 
c:\doskey 

doskey d=dir $1 $2 

d:\rdklO\build\disk\smartdrv.exe 1024 1024 

set TEMP=d:\ 

ver/r 

echo "MS-DOS ROM, Card & Flash Disk SS 2.0, MS FlashFile System 2," 
echo "and Windows 3.1 ROM " 


CONFIG.SYS 

DEVICE=c:\HIMEM.SYS 

break=on 

buffers=40 

files=40 

lastdrive=H 

DOS=HIGH,UMB 

REM ************************************************ 

REM FlashFile System Drivers 
Device=C:\rfaslss.sys 
Device=C:\ss365sl.exe 
Device=C Acs.exe 

Device=C:\csalloc.exe c:\csalloc.inc 
Device=C :\mtddrv.exe 
Device=C:\mti2p.exe 
Device=C:\ms-flash.sys 
Device=C Acardid.exe 

REM ************************************************** 

292149-13 
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APPENDIX C 

WINDOWS 3.1 CONTENTS.ROM 


NOTE: Semi-colons denote a commented-out line which is NOT added to the HIROM Binary file. 
.**************+*******************+****+**** 

; Windows 3.1 ROM Development Kit (RDK) 1.0 
; Sample ROM Description File 
; Copyright Microsoft Corporation, 1992 

; Enhanced Mode, Full 
; 10/20/92 Removed TT Fonts 


ROMS 

; Specifies length of ROMs and the linear addresses 
; at which they are to appear. 

; Name Address Length (max) 

L0ROMOC8OOO 004000 ; 16k 
HiROM C00000 390000 ; 3.7 MB 


TABLES 

; Specifies information for tables to reside in ROM. 


ROMTOC 100 LoROM 
NUMFILENT 14 
LDT 1024 HiROM 256 
; WINFLAGS 13 
WINFLAGS 15 
; SYSDIR system 

ROMVERSION 1000 


; ROMTOC entries 
; FILES entries 
; Local Descriptor Table 
; 286 version; Value is in HEX 
; 386 version; Value is in HEX 
; Windows directory on disk (optional) 

; 1 = masked ROM, 000 = OEM version 


MODULES 

; Specifies modules to be loaded into ROM. 
; Format is as follows: 

; Module SEG File ROM Flags Comments 
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; Kernel 



DOSX.EXE %ROMFILES%dosx.exe 

LoROM NOEXEHDR ; Std mode MS-DOS extender 

SEG 2 

HiROM ; DXDGROUP - Copy from ext with INT 15h 

SEG 3 

HiROM 

; DXPMCODE 

; KERNEL.EXE %ROMFILES%krnl286.exe 

HiROM 

; 286 kernel 

KERNEL.EXE %ROMFILES%krnl386.exe 

HiROM 

; 386 kernel (ROM version) 

; Drivers (Replaceable) 



SYSTEM. DRV %ROMFILES%system.drv 

HiROM 

; System 

KEYBOARD.DRV %ROMFILES%keyboard.drv HiROM 

; Keyboard 

SEG 10 COMP 


; Do not remove! 



; Display 

; VGAROM2.DRV %ROMFILES%vgarom2.drv 

HiROM 

; 286 VGA 

VGAROM3.DRV %ROMFILES%vgarom3.drv 

HiROM 

; 386 VGA 

; SVGAR2.DRV %ROMFILES%svgar2.drv 

HiROM 

; 286 SuperVGA 

; SVGAR3.DRV %ROMFILES%svgar3.drv 

HiROM 

; 386 SuperVGA 

MOUSE.DRV %ROMFILES%mouse.drv 

HiROM 

; Mouse 

SEG 2 RAM COMP NORELOC 


; Do not remove! 

; NOMOUSE.DRV %ROMFILES%nomouse.drv 

HiROM 

; No mouse 

COMM. DRV %ROMFILES%comm.drv 

HiROM 

; COM, LPT 

SEG 2 RAM COMP NORELOC 


; Do not remove! 

SEG 3 COMP 


; Do not remove! 

MMSOUND.DRV %ROMFILES%mmsound.drv HiROM 

; Sound 

; Core 

— 


GDI.EXE %ROMFILES %gdi.exe 

HiROM 

; ROM version 

USER.EXE %ROMFILES %user.exe 

HiROM 

; ROM version 

SEG 3 RAM COMP NORELOC 


; Do not remove! 

; Non-Replaceable System DLLs 



SHELL.DLL %ROMFILES%shell.dll 

HiROM 

; Shell APIs 

LZEXPAND.DLL %ROMFILES%lzexpand.dll 

HiROM 

; Expansion 

WIN87EM.DLL %ROMFILES%win87em.dll 

HiROM 

; Math emulator 

; Replaceable System DLLs 



COMMDLG.DLL %ROMFILES%commdlg.dll 

HiROM STUB 

; Common dialogs 

OLECLI.DLL %ROMFILES%olecli.dll 

HiROM STUB 

; OLE Client 

OLESVR.DLL %ROMFILES%olesvr.dll 

HiROM STUB 

; OLE Server 

TOOLHELP.DLL %ROMFILES%toolhelp.dll 

HiROM STUB 

; Tool Help DLL 

DDEML.DLL %ROMFILES%ddeml.dll 

HiROM STUB 

; DDE 

VER.DLL %ROMFILES%ver.dll 

HiROM STUB 

; Version DLL 

; Multimedia Extensions 



MMSYSTEM.DLL %ROMFILES%mmsy stem.dll HiROM STUB 

; Multimedia 

SND.CPL %RETAIL%snd.cpl 

HiROM 

; Sound icon 

MPLAYER.EXE %RETAIL%mplayer.exe 

HiROM 

; Media Player 

SOUNDREC.EXE %RETAIL%soundrec.exe 

HiROM 

; Sound Recorder 
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; Advanced Power Management (APM) 


POWER.DRV %RETAIL%power.drv 

HiROM 

APM driver 

Shell Programs - 

PROGMAN.EXE %RETAIL%progman.exe 

HiROM 

Program Mgr 

WINFILE.EXE %RETAIL%winfile.exe 

HiROM 

File Manager 

TASKMAN.EXE %RETAIL%taskman.exe 

HiROM 

Task Manager 

WINHELP.EXE %RETAIL%winhelp.exe 

HiROM 

Windows Help 

WINTUTOR.EXE %RETAIL%wintutor.exe 

HiROM 

Tutorial 

Control Panel 

D RIVERS. CPL %RETAIL%drivers.cpl 

HiROM 

Drivers icon 

MAIN.CPL %ROMFILES%main.cpl 

HiROM 

Main icons 

CONTROL.EXE %RETAIL%control.exe 

HiROM 

Control Panel 

Printing Support 

PRINTMAN.EXE %RETAIL%printman.exe 

HiROM 

Print Mgr 

UNIDRV.DLL %ROMFILES%unidrv.dll 

HiROM 

Uni driver 

DMCOLOR.DLL %ROMFILES%dmcolor.dll 

HiROM 

Uni driver 

System Fonts 

VGASYS.FON %RETAIL%vgasys.fon 

HiROM 

System (VGA) 

VGAFIX.FON %RETAIL%vgafix.fon 

HiROM 

Fixed pitch 

VGAOEM.FON %RETAIL%vgaoem.fon 

HiROM 

OEM 

Bitmap Fonts 



COURE.FON %RETAIL%coure.fon 

HiROM 

Courier (VGA) 

SERIFE.FON %RETAIL%serife.fon 

HiROM 

MS Serif (VGA) 

SMALLE.FON %RETAIL%smalle.fon 

HiROM 

Small (VGA) 

SSERIFE.FON %RETAIL%sserife.fon 

HiROM 

MS Sans Serif (VGA) 

SYMBOLE.FON %RETAIL%symbole.fon 

HiROM 

Symbol (VGA) 

Plotter Fonts 

MODERN.FON %RETAIL%modern.fon 

HiROM 

; Modern 

ROMAN.FON %RETAIL%roman.fon 

HiROM 

; Roman 

SCRIPT.FON %RETAIL%script.fon 

HiROM 

; Script 

TrueType Fonts 

ARIAL.FOT %RETAIL%arial.fot 

HiROM 

Arial 

ARIALBD.FOT %RETAIL%arialbd.fot 

HiROM 

Arial Bold 

ARIALBI.FOT %RETAIL%arialbi.fot 

HiROM 

Arial Bold Italic 

ARIALI.FOT %RETAIL%ariali.fot 

HiROM 

Arial Italic 

COUR.FOT %RETAIL%cour.fot 

HiROM 

Courier New 

COURBD.FOT %RETAIL%courbd.fot 

HiROM 

Courier New Bold 

COURBI.FOT %RETAIL%courbi.fot 

HiROM 

Courier New Bold Italic 

COURI.FOT %RETAIL%couri.fot 

HiROM 

Courier New Italic 

SYMBOL.FOT %RETAIL%symbol.fot 

HiROM 

Symbol 

TIMES. FOT %RETAIL%times.fot 

HiROM 

Times New Roman 

TIMESBD.FOT %RETAIL%timesbd.fot 

HiROM 

Times New Roman Bold 
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; TIMESBI.FOT %RETAIL%timesbi.fot 

HiROM 

Times New Roman Bold Italic 

; TIMESI.FOT %RETAIL%timesi.fot 

HiROM 

Times New Roman Italic 

WINGDING.FOT %RETAIL%wingding.fot 

HiROM 

WingDings 

; MS-DOS App Support 



VGA.3GR %RETAIL%vga.3gr 

HiROM 

Enh mode grabber 

WINOLDAP.MOD %RETAIL%winoldap.mod 

HiROM 

Std mode MS-DOS app support 

SEG 2 RAM COMP NORELOC 


; Do not remove! 

WINOA386.MOD %RETAIL%winoa386.mod 

HiROM 

Enh mode MS-DOS app support 

SEG 1 RAM COMP NORELOC 


; Do not remove! 

SEG 2 RAM COMP NORELOC 


; Do not remove! 

SEG 5 RAM COMP NORELOC 


; Do not remove! 

DOSAPP.FON %RETAIL%dosapp.fon 

HiROM 

MS-DOS app window fonts 

EGA80WOA.FON %RETAIL%ega80woa.fon 

HiROM 


EGA40WOA.FON %RETAIL%ega40woa.fon 

HiROM 


CGA80WOA.FON %RETAIL%ega80woa.fon 

HiROM 


CG A40WOA.FON %RETAIL%cga40woa.fon 

HiROM 


; Applets — 



CALC.EXE %RETAIL%calc.exe 

HiROM 

Calculator 

CALENDAR.EXE %RETAIL%calendar.exe 

HiROM 

Calendar 

CARDFILE.EXE %RETAIL%cardfile.exe 

HiROM 

Cardfile 

CHARMAP.EXE %RETAIL%charmap.exe 

HiROM 

Character Map 

CLIPBRD.EXE %RETAIL%clipbrd.exe 

HiROM 

Clipboard Viewer 

CLOCK.EXE % RETAIL %clock.exe 

HiROM 

Clock 

NOTEPAD.EXE %RETAIL%notepad.exe 

HiROM 

Notepad applet 

PACKAGER.EXE %RETAIL%packager.exe 

HiROM 

Packager applet 

PBRUSH.DLL %RETAIL%pbrush.dll 

HiROM 

for Paintbrush 

PBRUSH.EXE % RET AIL%pbrush .exe 

HiROM 

Paintbrush 

PIFEDIT.EXE %RETAIL%pifedit.eXe 

HiROM 

PIF Editor 

RECORDER.DLL %RETAIL%recorder.dll 

HiROM ; 

for RECORDER.EXE 

RECORDER.EXE %RETAIL%recorder.exe 

HiROM 

Recorder 

SOL.EXE %RETAIL%sol.exe 

HiROM 

Solitaire 

; TERMINAL.EXE %RETAIL%terminal.exe 

HiROM 

Terminal 

WINMINE.EXE %RETAIL%winmine.exe . 

HiROM 

WinMine 

WRITE.EXE %RETAIL%write.exe 

HiROM 

Write 





FILES 1 

; Specifies optional files to be installed into ROM. 



; TrueType TTF font files are specified in this section. 


; ROM Name Path ROM 

; TrueType Data 



ARIAL.TTF %RETAIL%arial.ttf 

HiROM 

Arial 

ARIALBD.TTF %RETAIL%arialbd.ttf 

HiROM 

Arial Bold 

ARIALBI.TTF %RETAIL%arialbi.ttf 

HiROM 

; Arial Bold Italic 
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ARIAU.TTF 

%RETAIL%ariali.ttf 

HiROM 

; Arial Italic 


COUR.TTF 

%RETAIL%cour.ttf 

HiROM 

; Courier New 


COURBD.TTF 

%RET AIL%courbd. ttf 

HiROM 

; Courier New Bold 


COURBI.TTF 

%RETAIL%courbi.ttf 

HiROM 

; Courier New Bold Italic 


COURI.TTF 

%RETAIL%couri.ttf 

HiROM 

; Courier New Italic 


SYMBOL.TTF 

%RET AIL% sy mbo 1 . ttf 

HiROM 

; Symbol 


TIMES. TTF 

%RETAIL%times.ttf 

HiROM 

; Times New Roman 


TIMESBD.TTF %RETAIL%timesbd.ttf 

HiROM 

; Times New Roman Bold 


TIMESBI.TTF 

%RETAIL%timesbi.ttf 

HiROM 

; Times New Roman Bold Italic 


TIMESI.TTF 

%RETAIL%timesi.ttf 

HiROM 

; Times New Roman Italic 

WINGDING.TTF %RETAIL%wingding.ttf 

HiROM 

; WingDings 
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APPENDIX D 
PLD EQUATIONS 


Included below are the equations for the EPX780. 
EPX780-10 PLD 


; Functional model for Simulation of Resident Flash Array design 
Title 486SX RFA design 
Pattern 1 


Revision 

4.0 


Author 

Rajiv Parikh 


Company 

Intel Corporation 


Date 

9/20/94 


OPTIONS DRIVE_LEVEL = 

3VOLT ; Default voltage is 3 Volts 

CHIP U1 NFX780_132 


; Pinlist 



; inputs 



PIN 

CLK 

; main clock (used by register) 

; Control 

signals from CPU 


PIN 

W R 

; Write/Read# from CPU 

PIN 

M 10 

; M/i/o# from CPU 

PIN 

/ADS 

; ADS# from CPU 

PIN 

D_C 

; D/C# from CPU 

PIN 

A[23:2] 

; Address lines from CPU, 0, 1 ,24-3 1 not used 

PIN 

/BE[3:0] 

; Byte Enable lines from CPU 

; Control 

signals from PLD to 

memory 

; outputs 



PIN 

B[23:2] 

; Address lines out of PLD to memory (23,22 N< 

PIN 

/CEH[1:0] 

; Chip enable out of PLD to memory high word 

PIN 

/CEL[1:0] 

; Chip enable out of PLD to memory low word 

PIN 

AVE 

; Write Enable# from PLD to memory 

PIN 

/OE 

; Output Enable# from PLD to memory 

; Other signals 


, input 

PIN 

ry_by 

; Ready/Busy# from memory to PLD/486 

; outputs 



PIN 

/RDY 

; Ready# from PLD to CPU 

PIN 

/KEN 

; Cache enable# from PLD to CPU 
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PIN DT_R ; DT/R# signal from PLD to Transceiver 


; Data signals - only 10 bits go into the PLD. 


; inputs 
PIN 

D[9:0] 

; Data bus from CPU to PLD 

NODE 

R[9:0] REGFBK 


NODE 

1017 ADSWREG 1 

;pin#s required for prioritizing in v3.1 

NODE 

1039 ADSWREG2 


NODE 

ADS1 REGFBK 

; Registers in the ads delay chain 

NODE 

ADS2 REGFBK 

NODE 

ADS3 REGFBK 


;STRING SUBSTITUTIONS 



STRING EN '((ADS+ADS l+ADS2+ADS3)*M_IO)' ; Memory access enable 

STRING WESW '( W_R * /M_IO * D_C 5)4 ADS1)' ; Write Enable for sliding window reg. 


STRING SWAD ’( /A23 * /A22 * /A21 * /A20 * 
/A19*/A18*/A17*/A16* 

A15 * A14*/A13* A12* 

All * A10 * /A9 * /A8 * 

/A7 * /A6 * /A5 * /A4 * 

/A3 * /A2 )’ 


SWAD shows address of sliding window's 
I/O register (not used in equations) 


STRING ADSWREG '(ADSWREG 1 * ADS WREG2)' ; Select sliding window register 


STRING OESW '( EN * 

/A23 * /A22 * /A21 * /A20 * 
A19 * A18*/A17* A16 * 
A15 * A14 )' 


; Output Enable for slidin g win dow reg. 
; address ODCOOOh - ODFFFFh 


STRING WSME '( EN * ; MS Windows Stub Window Enable 

/A23 * /A22 * /A21 * /A20 * ; address 0D8000h - ODBFFFh 

A19 * A18*/A17* A16 * 

A15 * /A14 )' 


EQUATIONS 


; Setup register 

; address decode logic - comparators 

ADSWREG 1 .CMP = [ A23, A22, A2 1 , A20, A 1 9, A 1 8, A 1 7, A 1 6, A 1 5, A 1 4, A 1 3, A 1 2] 
==[GND,GND,GND,GND,GND,GND,GND,GND,VCC,VCC,GND,VCC] 

ADSWREG2.CMP = [A 1 1,A10,A9, A8, A7, A6, A5, A4, A3, A2] 
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==[VCC.VCC,GND,GND,GND,GND,GND,GND,GND,GND] 

; Data bus feeds the register upon selection 


R[9:01.D := (ADSWREG *WESW) * D[9:0] + (/WESW+/ADSWREG) * R[9:0] | 

R[9:0].CLKF = CLK 


; Setup the ADS delay chain 
ADS1.D := ADS 


ADS 1 .CLKF = CLK 


ADS2.D := ADS1 * (OE + WE) 
ADS2.CLKF = CLK 


ADS3.D := ADS2 
ADS3.CLKF = CLK 


; Output address 

B23 = WSME + AVSME * (OESW * R9 + /OESW * A23) 

1 

B22 = WSME + AVSME * (OESW * R8 + /OESW * A22) 

1 

B21 = WSME + /WSME * (OESW * R7 + /OESW * A21) 

1 

B20 = WSME + AVSME * (OESW * R6 + /OESW * A20) 

1 

B19 = WSME + AVSME * (OESW * R5 + /OESW * A19) 

1 

B18 = /WSME * (OESW *R4 + /OESW *A1 8) 

0 

B 1 7 = AVSME * (OESW * R3 + /OESW * A 1 7) 

0 

B16 = WSME + /WSME * (OESW * R2 + /OESW * A16) 

1 

B15 = WSME + AVSME * (OESW * R1 + /OESW * A 15) 

1 

B14= AVSME* (OESW *R0 + /OESW * A14) 

0 

B[13:2] = A[13:2] 

; pass through 

; chip enable for each of four chips 
CEHO = EN * ( B23 * /B22) * (BE3 + BE2) 

; two pairs of high and 

CEH1 = EN * ( B23 * B22) * (BE3 + BE2) 

; low words 

CELO = EN * ( B23 * /B22) * (BE1 + BEO) 
CEL1 = EN * ( B23 * B22) * (BE1 + BEO) 


OE = EN * /W_R 

; OE# for mem 

WE = M JO * W_R * (ADS 1 + ADS2) 

; WE# for mem 


292149-21 


3-780 




AP-399 



DT_R = /M JO + W_R + /(ADS1 + ADS2 + ADS3) 


; Tranceiver signal 


RDY = WESW 

+ AV_R * M JO * ADS3 
+ W_R * M JO * ADS3 


; After reg loading 
; after reading 
; after writing 


KEN = /W_R * /D_C * M JO * ADS2 


; cache code reads only 


; Simulation section 
SIMULATION 


VECTOR DBUS := [ D9 D8 D7 D6 D5 D4 D3 D2 D1 DO ] 

VECTOR ABUSI:= [ A23 A22 A21 A20 A19 A18 A17 A16 A15 A14 A13 A12 All A10 A9 A8 A7 A6 
A5 A4 A3 A2 ] 

VECTOR ABUSO:= [ B23 B22 B21 B20 B19 B18 B17 B16 B15 B14 B13 B12 Bll BIO B9 B8 B7 B6 B5 
B4 B3 B2 ] 

VECTOR BSEL := [ BE3 BE2 BE1 BEO 1 
VECTOR CE := [ CEH1 CEHO CEL1 CELO ] 

VECTOR SWREG:= [ R9 R8 R7 R6 R5 R4 R3 R2 R1 RO ] 


; Specify signals to be traced. 

TRACE J)N CLK W_R M JO ADS D_C DBUS ABUSI ABUSO BSEL CE SWREG WE OE 
RYJJY RDY KEN DT_R ADSWREG 1 ADS WREG2 


initialize inputs 

SETF CLK W_R M JO /ADS D_C /RYJ1Y ABUSI := 0X00000 BSEL := 0X0 DBUS := 0X000 


PRLDF /R9 /R8 /R7 /R6 /R5 /R4 /R3 /R2 /R1 /R0 


; Idle clocks 
CLOCKF CLK 
CLOCKF CLK 


; Do a read from memory of two 32-bit words at 800000h 
FOR READ2 32 := 0x200000 TO 0x200001 DO 
BEGIN 

SETF ABUSI := READ2_32 /W_R ADS ; Validate Address 

CLOCKF CLK 

SETF /ADS ; Remove ADS 

CLOCKF CLK 

CLOCKF CLK 

CLOCKF CLK 

CLOCKF CLK 

END 
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; Sliding window load and read test: 


; Write address 0X800000 in swreg then try to read from window 


SETF DBUS := 0X200 ABUSI := 0X03700 

SETF/M_IOW_R ADS 

CLOCKFCLK 

SETF /ADS 

CLOCKF CLK 

CLOCKFCLK 

CLOCKF CLK 

CLOCKF CLK 

SETF M JO AVJR /D_C ADS ABUSI := 0X037000 

CLOCKFCLK 

SETF /ADS 

CLOCKF CLK 

CLOCKFCLK 

CLOCKF CLK 


; 0X0DC00 » 2 
; Validate Address 

; Remove ADS 


; set to memory CODE read 
; Remove ADS 


; read code! see cache line, etc 


; now test the win stub mapping 
SETF ABUSI := 0X36000 
SETF ADS /W_R BSEL := 0X0 
CLOCKF CLK 
SETF /ADS 
CLOCKF CLK 
CLOCKF CLK 


; 0X0D8000 » 2 
; Validate Address 

; Remove ADS 


; DONE!!! 
TRACE OFF 
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INTRODUCTION 

The ETOX III (EPROM tunnel oxide) 28F008SA is a 
high-density product offering from Intel’s second gen- 
eration of flash memory devices. This 1,048,576 x 8 
memory with its symmetrical blocking (16 blocks x 
64 Kbytes), very high cycling endurance, on-chip 
write/erase automation, and erase-suspend/resume ca- 
pability can be termed a block-alterable non-volatile 
RAM. In addition to selective block erasure, integrated 
Command User Interface (CUI), Write State Machine 
(WSM), Status Register, and deep power-down capabil- 
ity, the 28F008SA adds a dedicated READY/BUSY 
output (RY/BY #). This new feature provides immedi- 
ate hardware signaling of byte-write/block-erase com- 
pletion and erase-suspend/resume actuation. 

Flash memories combine inherent non-volatility with 
in-system alterability of device contents. Advances in 
process control have allowed development of a double- 
polysilicon single-transistor flash memory capable of 
100,000 write/erase cycles per block. The 28F008SA 
electrically erases all bits in a block via electron tunnel- 
ing. The EPROM programming mechanism of hot- 
electron injection is employed for high-performance 
electrical byte write as required for file and data storage 
applications. 

The Command User Interface and Status Register in- 
terface to power-up/down protection, address/data 
latches, and the Write State Machine (which in turn 
controls internal byte write, block erase, cell-margin 
circuits, and the dedicated READY/BUSY status out- 
put). These features augment prior flash memory cir- 
cuitry to optimize Intel’s 28F008SA for microproces- 
sor-controlled byte write and block erase. 

Read timing parameters are comparable to those of 
CMOS DRAMs, SRAMs, EPROMs, and EEPROMs. 
The 85 ns access time results from a memory cell-cur- 
rent of approximately 70 juA, low-resistance polysili- 
cide wordlines strapped with metal, advanced scaled 
periphery transistors, and an optimized data-out buffer. 

The dense one-transistor cell structure, coupled with 
high array efficiency, yields a one-megabyte die mea- 
suring 539 by 286 mils. 


TECHNOLOGY OVERVIEW 

Intel’s ETOX III flash memory technology incorpo- 
rates advances from ETOX I and ETOX II processes 
and leverages over two decades of EPROM manufac- 
turing experience. Using advanced 0.8 jam double-poly- 
silicon N-well/P-well CMOS technology, the 1,048,576 
x 8-bit flash memory employs a 2.5 jam x 2.9 jam sin- 
gle-transistor cell affording array density equivalent to 
comparable EPROM technology, and twice that of In- 
tel’s ETOX II process. The ETOX III flash memory 
cell is identical to EPROM, with an additional source 
implant which optimizes erase performance. Figure 1 
shows a cross-section of the flash memory cell. 

High-quality tunnel oxide under the single floating 
polysilicon gate promotes electrical erasure. All cells 
within the selected block are simultaneously erased via 
Fowler-Nordheim tunneling. Applying 12V to block 
source junctions and grounding the control gates erases 
all cells within that block. The internal WSM controls 
the automated block-erase algorithm, including pre- 
erase conditioning (i.e., pre-programming all block bits) 
and margin verification, in response to user requests 
relayed by the CUI. WSM-controlled block erasure, in- 
cluding pre-programming, typically requires 1.6 sec- 
onds. 

Byte write is accomplished with the standard EPROM 
mechanism of channel hot-electron injection from the 
cell drain junction to the floating gate. Bringing both 
the control gate and the cell drain to high voltage initi- 
ates programming. The WSM regulates the internal 
byte-write algorithm, including margin verification, af- 
ter the correct command sequence is written and de- 
coded. Byte write typically requires 9 jus. 



Figure 1. ETOX Flash Memory Cell 
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DEVICE ARCHITECTURE 
Array Organization 

The 28F008SA is a 1,048,576 x 8 memory comprised of 
2048 rows by 8192 columns. Array layout is segmented 
as four quadrants, each 1024 rows by 2048 columns. 
Access time is reduced by limiting column length to 
1024 cells. The polysilicon row is strapped in metal 
every 512 columns to reduce wordline delay. Two row 
decoders run vertically between quadrants, and column 
decoders run horizontally between quadrants. Figure 2 
shows block placement and array organization. A die 
photo of the chip is shown in Figure 30. 

Each quadrant is subdivided into four 64-Kbyte blocks. 
Each block source is electrically isolated from the 
source of other blocks. This allows individual block 
erase without altering data in the remaining 15 blocks. 

Each block is further subdivided into eight Input/Out- 
puts. Data for I/Oq is stored in the left-most 64 col- 
umns, with the next 64 storing data for I/O i, etc. 

Rows in the upper quadrants are numbered 0-1023 
from top to bottom; lower quadrant rows similarly 
1024-2047. 


Intel. 

Addresses A9-A0 select one of 1024 rows, while A19 
selects upper or lower decoder. Row address lines are 
decoded sequentially for selection. Row address bit- 
maps are listed in Table 3. 

Columns are numbered 0-8191 from left to right, top 
to bottom. Addresses A19-A16 select one of 16 blocks, 
while A15-A10 select eight of the 512 columns within 
that block. These ten address lines are also decoded 
sequentially to access all 8192 columns. Block address 
bitmaps are listed in Table 4; column address bitmaps 
are listed in Table 5. 


Write/Erase Automation 

Intel’s 28F008SA contains an on-chip Command User 
Interface, Write State Machine, Status Register, and 
address/data latches to dramatically simplify user in- 
terface. This combination of functional units reduces 
microprocessor control complexity of byte- write, block- 
erase, erase-suspend/resume, Status Register read/ 
clear, ID read, and array read operations. Figure 3 
shows the 28F008SA block diagram. 



Figure 2. 28F008SA Block Placement and Array Organization 
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Command User Interface (CUI) 

The CUI consists of a command decoder and command 
register. User requests are decoded and latched in a 
microprocessor write cycle controlled by Chip Enable 
(CE#) and Write Enable (WE#). Status Register 
read/clear, ID read, and array read commands are di- 
rectly handled by the CUI. The CUI also accepts byte- 
write, block-erase, and erase-suspend/resume com- 
mands. WE#’s rising edge latches address, command 
and data-in registers, and requests WSM initiation of 
the selected operation. These on-chip address, com- 
mand, and data latches controlled by the CUI minimize 
system interface logic, and free the system bus. 


Write State Machine (WSM) 

The WSM processes byte-write, block-erase, and erase- 
suspend/resume requests received from the CUI. The 
WSM rejects byte-write and block-erase requests if the 
WSM is currently busy, if Vpp is not at high voltage 
(12V), or if the Low Vpp Status Register flag is set (i.e., 
not cleared from a previous low- voltage condition). 


The WSM consists of an integrated oscillator and con- 
trol circuitry. It generates signals which control the 
byte-write, block-erase, erase-suspend/resume, and ver- 
ify circuits. It also receives feedback from these circuits 
allowing Status Register update. The WSM and associ- 
ated circuits perform the equivalent of first-generation 
flash memory program and bulk-erase algorithms auto- 
matically. This eliminates the need for system timers, 
and frees the microprocessor to service interrupts or 
perform other functions during device byte-write or 
block-erase operations. 

The WSM provides feedback to the CUI to determine 
when a given command is valid. Although nearly all 
commands are available when the WSM is inactive, 
only status read is valid while the WSM performs a 
byte-write operation. During block erase, only the read- 
status and erase-suspend commands are available. 
Read-array, read-status, and erase-resume commands 
are valid with the WSM in an erase-suspended state. 
Invalid operations are interpreted as the read-array 
command when the WSM is inactive or erase-suspend- 
ed, and as the read-status command when the WSM is 
active in byte write or block erase. 
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Status Register 

The internal Status Register contains a full complement 
of activity status bits. These bits and their meaning 
(1,0) are: 

SR.7: WSM status (READY/BUSY) 

SR.6: Erase-suspend status (ERASE SUSPENDED/ 
ERASE IN PROGRESS OR COMPLETED) 

SR.5: Block-erase status (ERROR/SUCCESS) 

SR.4: Byte-write status (ERROR/SUCCESS) 

SR.3: V PP status (LOW/OK) 

All bits are set by the WSM, and read via the CUI. The 
WSM can only set SR.3, SR.4, and SR.5; it cannot 
clear them. They remain set until the CUI processes a 
clear Status Register command. There are two reasons 
for operating in this fashion. 

First is synchronization; the WSM does not know when 
the host CPU has read the Status Register, therefore 
does not know when to clear it. 

Secondly, allowing system software to control reset 
adds flexibility to the way this device may be used. The 
CPU may write several bytes or erase several blocks 
back-to-back while monitoring RY/BY# or polling 
SR.7 to determine when the next byte-write or block- 
erase command can be given. When all bytes are writ- 
ten, or all blocks erased, the system polls the other 
status flags to determine if all operations were success- 
ful or if an error occurred. While other approaches re- 
quire the controlling microprocessor to watch for non- 
corhpletion of write or erase within a specified time to 
indicate an error, this implementation requires no ex- 
ternal system timers or software timing loops. As such, 
the system can reduce its polling overhead while still 
identifying any potential error conditions. 

Status Register contents are driven to device outputs on 
the falling edge of CE# or Output Enable (OE#), 
whichever occurs last in the read cycle. CE# or OE# 
must be toggled to update Status Register contents. 

Ready/Busy Indication (RY/BY#) 

A dedicated output pin, RY/BY#, provides additional 
indication of WSM activity. This capability allows both 
hardware signal of status and/or software polling to 
determine activation, completion, or suspension of in- 
ternal byte-write/block-erase operations. Hardware sig- 
naling minimizes both CPU overhead and system pow- 
er consumption. 


Internal Oscillator 

The WSM is designed using clocked logic circuits. An 
on-chip ring oscillator generates the clock signals. The 
frequency of a standard ring oscillator varies with pro- 
cessing, temperature and supply voltage. An improved 
design, used on the 28F001BX and 28F008SA, mini- 
mizes these variations. 

The switching current of each stage in the ring oscilla- 
tor is controlled by a current reference which varies 
linearly with Vcc- The trip point of each ring oscillator 
inverter also varies linearly with Vcc- These two effects 
offset each other, and the resulting oscillator period is 
proportional to RC with only a small dependence on 

Vcc* 

An on-chip resistor sets the value of R. The gate capac- 
itance of the inverters in the ring oscillator sets the 
value of C. Process variations in these values are re- 
duced by trimming the period of each oscillator during 
manufacturing. The resistor is the only source of tem- 
perature variation. 

Supply Voltage Sensing 

The LOWVcc and LOWVpp generation circuit is 
shown in Figure 4. Power supply voltages (Vcc anc * 
Vpp) are divided down and compared to a reference 
voltage. If Vref is greater than the divided power sup- 
ply voltage, the LOWVcc or LOWVpp signal is driven 
high. The generated Vref level is supply-voltage inde- 
pendent to the first order. 

Positive power to the circuit is supplied by Ml and M2. 
Ml and M2 sources are pulled up to the higher of (Vpp 
- Vta) or (Vcc - V tw ). Vt n is the threshold of an 
implanted N-channel device, about 0.9V. V tw is the 
threshold of a native N-channel device, about 0V. This 
scheme ensures that the circuit works regardless of the 
applied supply voltages. 
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The LOWVcc signal is used by the byte- write and 
block-erase circuits, as well as the CUI and WSM. If 
LOWVcc is active, the CUI will not accept user writes 
and resets to an array read condition. The WSM is 
similarly reset by LOWVcc- The LOWVpp signal is 
used by the WSM; if Vpp drops below the high-voltage 
detector trip point during byte write or block erase, the 
Status Register’s low Vpp bit is set and WSM operation 
halts. The system must clear the Status Register before 
any subsequent byte-write or block-erase operations 
can succeed. 


Reset/Power-Down 

The 28F008SA incorporates a deep power-down mode 
that reduces Ice and Ipp to typically 0.20 jllA and 
0.10 /xA respectively. RP# low selects deep power- 
down mode. When RP# is high, the device can be 
placed in an active or standby mode depending on 
CE#’s state. 

Deep power-down is similar to standby except that all 
circuits excluding the RP# buffer are turned off. This 
mode greatly reduces power consumption, but requires 
more time to transition the device into an active mode. 
A read wake-up time (tpHQv) is required from RP# 
switching high until output and sense circuitry become 
fully functional and data can be read from the part. 
Similarly, a write wake-up time Ophwl) ls needed be- 
fore the CUI recognizes writes. After this interval, nor- 
mal operation is restored; the CUI is reset to read-array 
mode and the Status Register is cleared to 80H. 

A diagram of the power-down circuit is shown in Fig- 
ure 5. The TTL buffer formed by Ml -M3 disables the 
low-power detect circuits, the redundancy-address flash 
bits, and the CE# TTL buffer formed by M4-M6. In 
previous Intel flash devices, these circuits were always 
enabled. Tum-on delays of these circuits determine 
RP# access time and write specifications. 

RP# functions properly with TTL-level inputs. How- 
ever, to attain lowest possible power consumption, full 
CMOS levels must be used. If the voltage on the gate of 
M3 rises above its 0.9V threshold M3 will turn on and 
draw current. Input voltages in the 0.7V-0.9V range 


could cause enough subthreshold conduction in M3 to 
exceed the Ice deep power-down current (Iccd) speci- 
fication. This is why RP#’s input voltage is specified as 
GND ±0.2V. 

RP# also functions as a hardware reset to the WSM 
and CUI. If RP# is driven active during byte-write, 
block-erase, or erase-suspend operation, that operation 
is aborted leaving the addressed memory locations in an 
unknown state. The Status Register is cleared, and CUI 
is set to array read. The aborted operation (byte write 
or block erase) must be repeated with RP# inactive to 
obtain a valid condition in the memory array. 

Reset using RP# should be restricted to system reset 
only (as in the case of power supply failure), and should 
not be used as a software means to terminate byte-write 
or block-erase operations. 



Figure 5. Power-Down and Reset Functions 
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Figure 6. Array Erase Blocking 


Block Erase 

Block erasure is achieved by a two-step write sequence. 
The erase-setup code is written to the CUI in the first 
cycle. Erase confirm is written in the second cycle. The 
address supplied with the erase-confirm command is 
latched and decoded internally by the 28F008SA; erase 
is subsequently enabled in that block. The second 
WE# rising edge initiates the operation (WE#- 
controlled write). 


pulls the source to ground. The high-voltage latch 
formed by M4-M7 converts the low-voltage ERASE 
signal to a high-voltage signal that controls Ml. 

The tunneling that occurs during block erase requires 
only a small amount of current. However, the initial 
current required to charge the block’s large source ca- 
pacitance to the erase voltage is significant. Ml is sized 
to limit this current yet still apply sufficient source volt- 
age to achieve fast block-erase time. 


The WSM triggers the high-voltage flash-erase switch 
connecting the 12V supply to the source of all bits in 
the specified block, while all wordlines are grounded. 
Figure 6 shows organization of the block source 
switches. Fowler-Nordheim tunneling results in simul- 
taneous erasure of all bits in the selected block. 

The block source switch controls the source voltage of 
all bits in a particular block. This circuit is shown in 
Figure 7. During block erase, M2 is off and Ml pulls 
the source to Vpp. When not in erase, Ml is off and M2 


The LOWVcc signal protects the array from erasure 
when Vpp is at a high voltage but Vcc is below the 
write/erase lockout voltage (Vlko)- When this occurs, 
M3 pulls the block source to ground. The high-voltage 
latch is forced by M8 into the state that turns Ml off. 

Vpp is continually monitored during all phases of the 
block-erase operation. If Vpp falls below the trip point 
of its high-voltage detect circuitry, erasure will not oc- 
cur (or halts) and Status Register Vpp status (SR. 3), 
block-erase status (SR. 5) and WSM status (SR. 7) bits 
are set to “1”. 
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If SR.3 (Low Vpp) is set, WSM operation is inhibited. 
The WSM will not execute further byte-write or block- 
erasure sequences until the Status Register has been 
reset by system software. Byte-write or block-erase re- 
quests with error flags SR.4 or SR. 5 set are not inhibit- 
ed, but the system loses the ability to determine success. 
The clear Status Register command resets these bits. 

After receiving the block-erase command sequence, the 
WSM automatically controls block pre-condition (pro- 
gramming all bytes to 00H within the chosen block), 
erase pulses and pulse repetition, timeout delays, and 
byte-by-byte verification of all block addresses (sequen- 
tially checked via the address counter) using an alterna- 
tive sensing reference to verify margin. The internal 
erase and verify operations continue until the entire 
block is erased. A read cycle applied to the part follow- 
ing the block-erase command sequence outputs Status 
Register contents; system software can poll the Status 
Register to determine when block erase is complete, 
and if it was successful. Alternately, the system can 
monitor RY/BY # until that output is driven high, and 
then poll the Status Register to determine success. Fol- 
lowing block erasure, the device remains in Status Reg- 
ister read mode; a read-array command must be written 
to the device to access array data. 

If the erase-setup command is followed with a com- 
mand other than erase confirm, the device will not 
erase. The WSM sets both byte- write status and block- 
erase status bits in the Status Register to indicate an 
invalid sequence. 


Erase Suspend/Resume 

Erase suspend allows the system to interrupt block 
erase to read data from another array block. The ability 
to suspend erase and read data from another block of- 
fers the flexibility required for file system applications. 
Upon receiving the erase-suspend command, the CUI 
requests that the WSM pause at one of several predeter- 
mined points in the algorithm. Upon reaching a sus- 
pend point, the WSM sets SR.6 (erase-suspend status) 
and SR.7 to “1”, and drives the RY/BY# pin high. 
The system must poll the Status Register to determine 
if the suspend has been processed or the block erase has 
actually completed. Block-erase completion is indicated 
by SR.6 cleared to “0” and SR.7 set to “1”. Read bus 
cycles default to Status Register read after issuing the 
erase-suspend command. 


Once suspended, the WSM asserts a signal to the CUI 
which allows response to the read-array, read-status, 
and erase-resume commands. The system can write the 
read-array command allowing read access to blocks 
other than that which is suspended. The WSM contin- 
ues to run idling in a suspended state, regardless of all 
control inputs except RP#. RP# driven low immedi- 
ately shuts down the WSM, aborting the suspended 
erase operation. 

The erase-resume command must be issued upon com- 
pletion of reads from other array blocks to continue 
block-erase operation. The WSM then clears SR.6 and 
SR.7, drives RY/BY # low, and resumes erase opera- 
tion from the suspension point. Read cycles following 
the erase-resume command output Status Register 
data. 


Byte Write 


Byte write follows a flow similar to block erase. The 
byte-write setup command is first written to the CUI. A 
second write cycle loads address and data latches. The 
rising edge of the second WE# pulse requests that the 
WSM initiate activity, applying high voltage to the 
gates and drains of all bits to be written. Unlike block 
erase, byte write will proceed regardless of what data is 
applied on the second CUI write cycle; however, apply- 
ing data FFH does not modify memory contents. 



Like block erase, the WSM controls program pulses 
and pulse repetition, timeout delays and byte verifica- 
tion. Byte write and verify (with alternate sensing refer- 
ence and internally-generated verify voltage) continue 
until the byte is written. Internal byte-write verify 
checks that all bits written to zero have been correctly 
modified; it does not check bits specified as one. Byte 
write cannot change existing zeros to ones; this can 
only be accomplished by erase. 


Read bus cycles following byte write operations output 
Status Register data. System software, polling the 
Status Register, is informed of status through bits SR.3, 
SR.4, and SR.7. The RY/BY # output can also be 
monitored to determine completion. The read-array 
command must be written to the CUI following byte 
write to access array data. 


In a scenario similar to that described under block era- 
sure, byte write does not occur (or halts) if Vpp is de- 
tected low. In such a case SR.3, SR.4, and SR.7 are set 
high, and no further writes can take place until the 
Status Register is cleared by the clear Status Register 
command. 
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DEVICE CHARACTERIZATION 
AC and DC Parameters 

Figures 9 through 24 show graphs of several device 
parameters as a function of temperature and supply 
voltage. The graphs illustrate that the 28F008SA has 
significant margin to data sheet specifications. 

In particular, note Figure 9 which shows typical read 
performance tAVQv (tACc) °f the 28F008SA as a func- 
tion of Vcc and ambient temperature. t£LQV (tcE) * n 
Figure 10 and tQLQV (Ioe) in Figure 11 are also of 
particular interest. Access times tAVQV, t£LQV> and 
toLQV are specified and tested with an output load of 
100 pF; additional output load capacitance slows device 
operation. 

Table 1 shows typical supply currents at room tempera- 
ture for several operating modes. 


Table 1. RMS Current Values 


Mode 

lec 

(Vcc = 5.0V, 
CMOS Inputs) 

ipp 

(Vpp = 12V) 

Read 

20 mA 

100 juA 

Byte Write 

10 mA 

12 mA 

Block Erase 

10 mA 

12 mA 

Standby 

40 juA 

100 juA 

Deep Power-Down 

0.20 jaA 

0.07 juA 


Energy/Power Consumption 

The system designer is primarily concerned with power 
consumption during block erase and byte write. Typical 
curves for Ice anc * Ipp during block erase are shown in 
Figure 25. Ice an d Ipp for byte write are illustrated in 
Figure 26. 


Byte-Write/Block-Erase Times 

The 28F008SA advances byte-write and block-erase 
performance compared to previous flash memories. The 
on-chip algorithm is improved over the 28F001BX to 
take advantage of process enhancements. This improve- 
ment is most apparent when compared to first-genera- 
tion flash parts with externally controlled algorithms. 
First-generation device times shown in Table 2 assume 
optimal system overhead, and as such are absolute best 
case. 


Table 2. Byte-Write and Block-Erase 
Performance vs Previous Devices 


Device 

Byte-Write 

Block-Erase 

Erase Time 


Time 

Time/# Bytes 

per Kbyte 

Second-Generation Flash Memory DevicesO) 

28F008SA 

9 jus 

1.5S/64K 

23 ms 

28F001BX 

18 jus 

3.8S/112K 

34 ms 



2.1S/8K 

256 ms 



2.1S/4K 

513 ms 

First-Generation Flash Memory Devices( 2 ) 

28F020 

16.5 jus 

6.8S/256K 

27 ms 

28F010 

16.5 jus 

3.9S/128K 

30 ms 

28F512 

16.5 jus 

2.4S/64K 

37 ms 

28F256A 

16.5 jus 

1.6S/32K 

51 ms 


NOTES: 

1. Typical measured time. 

2. Times calculated based on typical erase and precondi- 
tion pulse requirements, with minimum write timings. Calcu- 
lations are described in Figure 8. 

Figure 27 shows block-write and block-erase times at 
0°C and 70°C over cycling. 


DEVICE RELIABILITY 


Byte-Write/Block-Erase Cycling 

One of the most important reliability aspects of the 
28F008SA is its capability of 100,000 write/erase cycles 
per block. Destructive oxide breakdown has been a lim- 
iting factor in extended cycling of thin-oxide 
EEPROMs. Intel’s ETOX III flash memory technolo- 
gy extends cycling performance through: 

• Improved tunnel-oxide processing that increases 
charge-carrying capability tenfold. 

• Significantly reduced oxide area under stress that 
minimizes probability of oxide defects in the region. 

• Reduced oxide stress due to a lower peak electric 
field (lower erase voltage than EEPROM). 

Reliable byte- write/block-erase cycling requires proper 
selection of the maximum erase threshold voltage (V t ), 
and maintenance of a tight distribution. Maximum 
erase V t is set to 3.4V via the internal block-erase algo- 
rithm and verify circuits. Tight erase V t distribution 
gives an order of magnitude of erase-time margin to the 
fastest erasing cell, with virtually identical erase V t dis- 
tributions at 1 and 10,000 cycles (Figure 28). Program 
V t distribution is similarly consistent over cycling (Fig- 
ure 29). 
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28F008SA array architecture enhances cycling capabil- 
ity by reducing gate disturb conditions on cells in unre- 
lated blocks during byte write and erase pre-condition- 
ing. First, only one of the two row decoders is active at 
any time (selected by A 19 ). Rows in the other two 
quadrants are grounded. Secondly, two separate inter- 
nally-switched voltages supply the left and right quad- 
rants. Only one supply (selected by block address Ajg) 
is switched to programming voltages while the other 
remains at read voltages. This A 19 -A 18 row decoding 
ensures that during byte write, 12 of the 16 blocks have 
a gate voltage below that required for programming. 


Data Protection 

The 28F008SA offers protection against accidental 
block erasure or byte write during power transitions. 
Internal circuitry creates a device insensitive to Vpp/ 
Vcc supply power-up sequencing. Vpp ^ VppL locks 
out byte-write and block-erase circuits. Vcc ^ Vlkq 
disables CUI command writes, resets the CUI to array 
read mode, and holds the WSM inactive. The system 
designer must still guard against spurious command 
writes for Vcc ^ Vjjco when Vpp > V PPL- 

Several strategies are available to prevent data modifi- 
cation in the 28F008SA. The CUI provides a degree of 
software write protection since memory alteration oc- 
curs only after successful completion of a two-step 
write sequence. WE# and CE# must both go active to 
perform this sequence; driving either high inhibits com- 
mand/data writes. Secondly, the system can place the 
device in deep power-down mode (RP# = Vjl) to 
disable command writes, reset the CUI to array read 


mode, and hold the WSM inactive, effectively protect- 
ing array data. Finally, the system designer may hard- 
wire Vpp to Vpph, or switch it to Vppn only when 
memory updates are required. Since byte-write and 
block-erase circuits are disabled by Vpp ^ VppL, Vpp 
switching adds another level of data security. 

SUMMARY 

The 28F008SA is the first flash memory with features 
optimized for solid-state systems and file storage. These 
features include symmetrical block-erase, automation 
of byte write and block erase, erase suspend for data 
read, a reset/power-down mode, a write/erase Status 
Register, and a dedicated RY/BY# status pin. With 
simple microprocessor interfacing and software com- 
mand sequences, the 28F008SA is the non-volatile stor- 
age solution of choice for today’s designs. 

OTHER REFERENCES 

Related documents of interest to readers of this engi- 
neering report: 

28F008SA Data Sheet (order #290429) 

28F008SA-L Data Sheet (order #290435) 

AP-359 “28F008SA Hardware Interfacing” 

(order #292094) 

AP-360 “28F008SA Software Drivers” 

(order #292095) 

AP-364 “28F008SA Automation and Algorithms” 
(order #292099) 

ER-28 “ETOX III Flash Memory Technology” (or- 
der #294012) 
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SUPPLEMENTARY INFORMATION 

FORMULA: ~ ~ 

b = # bytes in a block (256K, 128K, 64K, 32K) 
n = # of erase pulses required (90 pulses) 
w = time for a write cycle (150 ns, t^VAv) 
v = time to verify (6055 ns, t^HGL + tGLQv) 

p = program pulse width (10 juts, twHWHl) one 
pulse programming assumed 

e = erase pulse width (10 ms, t\yHWH2) 

Precondition and precondition verify time is: 
b (2w + p + v) 

Erase/verify, each loop where some byte does not 
pass verify: 

(n - 1) (2w + e + v) 

Last erase pulse: 

(1) (2w + e) 

Passing erase-verify, all bytes: 
b (w + v) 

Total time can be summarized as: 

b (3w 4- p + 2v) + n (2w + e + v) - (v) 

or substituting in times for write, verify, program 
and erase pulse widths: 

b (22.56 X 10-6) + n (10.006355 X 10~3) 

- (6.055 X 10-6) Seconds 

Figure 8. Erase time Calculations for 
First-Generation Flash Memories 



Figure 9. tAvov (*acc) y s V C c and Temperature 
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Figure 14. t AV wH (Us WE#) 


Figure 15. t W HAX(UH WE#) 


vs Vcc and Temperature 


vs Vcc and Temperature 
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Figure 22. Iqh TTL vs Vcc and Temperature 
(V 0H = 2.4V) 



Figure 24. Iql vs V CC and Temperature 
(Vql = 0.45V) 
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(VOH = Vcc - 0.4V) 
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Figure 27. Write and Erase Times vs Cycling 
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Figure 30. 278FQ08SA Die Photo 
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Pin Names 


A 0 -Al 9 

Address Inputs 

DQ0-DQ7 

Data Inputs/Outputs 

CE# 

Chip Enable 

RP# 

Reset/Power-Down 

OE# 

Output Enable 

WE# 

Write Enable 

RY/BY# 

Ready/Busy 

Vpp 

Write/Erase Power Supply 

Vcc 

Device Power Supply 

GND 

Ground 


Figure 31. PSOP Lead Configuration 
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Wordlines are numbered sequentially from top to bottom. Addresses A 9 -A 0 sequentially decode wordlines: block 
address A 19 selects between upper and lower row-decoder. Wordlines 0-1023 serve the left and right quadrants at 
top of device; 1024-2047 serve the lower quadrants. 


Table 3. Row Address Bitmap 
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Blocks are numbered sequentially right to left, top to bottom. Columns within a block are numbered left to right. 
I/Os within a block are numbered from 0-7 left to right. 


Table 4. Block Address Bitmap 
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Columns are numbered from left to right across the top quadrants, and left to right across the bottom quadrants. 
Addresses A 15 -A 10 sequentially count columns. Columns are listed for block 0; other blocks are counted similarly. 

Table 5. Column Address Bitmap 
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8-Mbit (512KX 10, 1H/3X8) 

SmartVoltage BOOT BLOCK FLASH MEMORY FAMILY 



■ Intel SmartVoltage Technology 

— 5V or 12V Program/Erase 

— 3.3V or 5V Read Operation 

— 60% Faster Typical Programming at 
12V V PP 

■ Very High Performance Read 

■ Low Power Consumption 

■ x8/x16-Selectahle Input/Output Bus 

— 28F800 for High Performance 16- or 
32-bit CPUs 

■ Optimized Array Blocking Architecture 
— One 16-KB Protected Boot Block 
— Two 8-KB Parameter Blocks 

— One 96-KB Main Block 
— Seven 128-KB Main Blocks 
— Top or Bottom Boot Locations 

■ Absolute Hardware-Protection for Boot 
Block 

■ Software EEPROM Emulation with 
Parameter Blocks 

■ Extended Temperature Operation 
40°C to + 85°C 

■ Extended Cycling Capability 
— 100,000 Block Erase Cycles 

(Commercial Temperature) 

— 10,000 Block Erase Cycles 
(Extended Temperature) 


ej Automated Word/Byte Write and Block 

Erase 

— industry Standard Command User 
Interface 

— Status Registers 
— Erase Suspend Capability 

m SRAM-Compatible Write Interface 

M Automatic Power Savings Feature 

— 1 mA Typical Iqc Active Current in 
Static Operation 

□ Reset/Deep Power-Down Input 

— 0.2 juA IccTypical 

— Provides Reset for Boot Operations 

□ Hardware Data Protection Feature 

— Erase/Write Lockout during Power 
Transitions 

□ Industry-Standard Surface Mount 
Packaging 

— 40-Lead TSOP 
-44-Lead PSOP: JEDEC ROM 

Compatible 

— 48-Lead TSOP 

□ Footprint Upgradable from 2/4 Mbit 

□ ETOXtm iv Flash Technology 
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8-MBIT SmartVoltage BOOT BLOCK FAMILY 


1.0 PRODUCT FAMILY OVERVIEW 

This datasheet contains product preview information 
about the upcoming 8-Mbit SmartVoltage boot block 
flash memory component. 


1.1 New Features in the SmartVoltage 
Products 

The new SmartVoltage boot block flash memory 
family offers identical operation as the current BX/ 
BL 12V program products, except for the differences 
listed below. All other functions are equivalent to 
current products, including signatures, write com- 
mands, and pinouts. 

• WP# pin has replaced a DU pin. See Table 2 and 
3 for details. 

• 5V Program/ Erase operation has been added 
that uses proven program and erase techniques 
with 5V ± 1 0% applied to Vpp. 

• Enhanced circuits optimize performance at 3.3V 
v cc- 

If you are designing with existing BX/BL 12V Vpp 
boot block products today, you should provide the 
capability in your board design to upgrade to these 
new SmartVoltage products. 

Follow these guidelines to ensure compatibilty: 

1. Connect WP# (DU on existing products) to con- 
trol signal or to Vqc or GND. 

2. If adding a switch on Vpp for write protection, 
switch to GND for complete write protection. 

3. Allow for connecting 5V to Vpp and disconnect 
1 2V from Vpp line, if desired. 


1.2 Main Features 

Intel’s SmartVoltage technology provides the most 
flexible voltage solution in the industry. SmartVol- 
tage provides two discrete voltage supply pins, Vcc 


irrtel. 

for read operation, and Vpp for program and erase 
operation. Discrete supply pins allow system design- 
ers to use the optimal voltage levels for their design. 
The 28F800BV provides read capability at 3.3V or 
5V, and program/erase capability at 5V or 12V. 
Since many designs read from the flash memory a 
large percentage of the time, 3.3V Vcc operation 
can provide great power savings. If read perform- 
ance is an issue, however, 5V Vcc provides faster 
read access times. For program and erase opera- 
tions, 5V Vpp operation eliminates the need for in 
system voltage converters, while 1 2V Vpp operation 
provides faster program and erase for situations 
where 12V is available, such as manufacturing or 
designs where 12V is in-system. 

The 28F800 boot block flash memory family is a very 
high-performance, 8-Mbit (8,388,608 bit) flash mem- 
ory family organized as either 512 Kwords of 16 bits 
each or 512 Kbytes of 8 bits each. 

Separately erasable blocks, including a hardware- 
lockable boot block (16,384 bytes), two parameter 
blocks (8,192 Bytes each) and main blocks (one 
block of 98,304 bytes and seven blocks of 131,072 
bytes) define the boot block flash family architec- 
ture. See Figures 5 and 6 for memory maps. Each 
block can be independently erased and pro- 
grammed 1 00,000 times at commercial temperature 
and 1 0,000 times at extended temperature. 

The boot block is located at either the top (denoted 
by -T suffix) or the bottom (-B suffix) of the address 
map in order to accommodate different microproc- 
essor protocols for boot code location. The hard- 
ware-lockable boot block provides complete code 
security for the kernel code required for system ini- 
tialization. Locking and unlocking of the boot block is 
controlled by WP# and/or RP# (see Section 2.3 for 
details). 

The Command User Interface (CUI) serves as the 
interface between the microprocessor or microcon- 
troller and the internal operation of the boot block 
flash memory products. The internal Write State Ma- 
chine (WSM) automatically executes the algorithms 
and timings necessary for program and erase opera- 
tions, including verifications, thereby unburdening 
the microprocessor or microcontroller of these 
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tasks. The Status Register (SR) indicates the status 
of the WSM and whether it successfully completed 
the desired program or erase operation. 

Program and Erase Automation allows program and 
erase operations to be executed using an industry- 
standard two-write command sequence to the CUI. 
Data writes are performed in word or byte incre- 
ments. Each byte or word in the Flash memory can 
be programmed independently of other memory lo- 
cations, unlike erases, which erase all locations 
within a block simultaneously. 

The 8-Mbit SmartVoltage boot block flash memory 
family is also designed with an Automatic Power 
Savings (APS) feature which minimizes system bat- 
tery current drain, allowing for very low power de- 
signs. To provide even greater power savings, the 
boot block family includes a deep power-down mode 
which minimizes power consumption by turning most 
of the Flash memory’s circuitry off. This mode is 
controlled by the RP# pin. 

Additionally, the RP# pin provides protection 
against unwanted command writes due to invalid 
system bus conditions that may occur during system 
reset and power-up/down sequences. Also, when 
the Flash memory powers-up, it automatically de- 
faults to the read array mode, but during a warm 
system reset, where power continues uninterrupted 
to the system components, the flash memory could 
remain in a non-read mode, such as erase. Conse- 
quently, the system Reset pin should be tied to RP# 
to reset the memory to normal read mode upon acti- 
vation of the Reset pin. 

For the 28F800, byte-wide or word-wide input/out- 
put is controlled by the BYTE# pin. Please see Ta- 
ble 3 for a detailed description of BYTE# opera- 
tions, especially the usage of the DQ15/A.1 pin. 

The 28F800 products are available in a 
ROM/EPROM-compatible pinout and housed in the 
44-Lead PSOP (Plastic Small Outline) package and 
the 48-Lead TSOP (Thin Small Outline, 1.2 mm 
thick) package. 

The 28F008 boot block products are available in the 
40-lead TSOP. 


2.0 OPERATIONAL DETAILS 


2.1 Intelligent Identifier 

The intelligent identifiers of the SmartVoltage boot 
block components are identical to the boot block 
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products that operate only at 12V Vpp. The manu- 
facturer and device codes are read via the CUI or by 
taking the Ag pin to V|q. Writing 90H to the CUI 
places the device into intelligent identifier read 
mode. In this mode, Aq = 0 outputs the manufactur- 
er’s identification code and Aq = 1 outputs the de- 
vice code. When BYTE# is at a logic low, only the 
lower byte of the above signatures is read and 
DQ15/A.-1 is a “don’t care” during intelligent identifi- 
er mode. For x8 only products only the lower byte is 
read. See the table below for product signatures. A 
Read Array command must be written to the memo- 
ry to return to the read array mode. 


Table 1. Intelligent Identifier Table 


Product 

Mfr. ID 

Device ID 

-T 

(Top Boot) 

-B 

(Bottom Boot) 

28F800 

0089 H 

889CH 

889DH 


2.2 Memory Organization 

2.2.1 BLOCKING 

This product family features an asymmetrically 
blocked architecture providing system memory inte- 
gration. Each erase block can be erased indepen- 
dently of the others up to 1 00,000 times at commer- 
cial temperature or up to 10,000 times at extended 
temperature. The block sizes have been chosen to 
optimize their functionality for common applications 
of nonvolatile storage. For the address locations of 
the blocks, see the memory maps in Figures 5 and 
6 . 


2.2.1. 1 Boot Block - 1 x 16 KB 

The boot block is intended to replace a dedicated 
boot PROM in a microprocessor or microcontroller- 
based system. The 16-Kbyte (16,384 bytes) boot 
block is located at either the top (denoted by -T suf- 
fix) or the bottom (-B suffix) of the address map to 
accommodate different microprocessor protocols 
for boot code location. This boot block features 
hardware controllable write-protection to protect the 
crucial microprocessor boot code from accidental 
erasure. The protection of the boot block is con- 
trolled using a combination of the Vpp, RP#, and 
WP# pins, as is detailed in Section 2.3. 
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2.2.1. 2 Parameter Blocks - 2 x 8 KB 

The boot block architecture includes parameter 
blocks to facilitate storage of frequently updated 
small parameters that would normally require an 
EEPROM. By using software techniques, the byte- 
rewrite functionality of EEPROMs can be emulated. 
These techniques are detailed in Intel’s AP-604, 
“Using Intel’s Boot Block Flash Memory Parameter 
Blocks to Replace EEPROM.” Each boot block 
component contains two parameter blocks of eight 
Kbytes (8,192 bytes) each. The parameter blocks 
are not write-protectable. 

2.2.1.3 Main Blocks - 1 x 96 KB + 7 x 
128 KB 

After the allocation of address space to the boot and 
parameter blocks, the remainder is divided into main 
blocks for data or code storage. Each 8-Mbit device 
contains one 96-Kbyte (98,304 byte) block and sev- 
en 128-Kbyte (131,072 byte) blocks. See the memo- 
ry maps for each device for more information. 


2.3 Boot Block Locking 

The boot block family architecture features a hard- 
ware-lockable boot block so that the kernel code for 
the system can be kept secure while the parameter 
and main blocks are programmed and erased inde- 
pendently as necessary. Only the boot block can be 
locked independently from the other blocks. 

2.3.1 V PP = V| L FOR COMPLETE 
PROTECTION 

For complete write protection of all blocks in the 
flash device, the Vpp programming voltage can be 
held low. When Vpp is below Vpp[_K> any program or 
erase operation will result in a error in the Status 
Register. 


intel. 

2.3.2 WP# = V| L FOR BOOT BLOCK 
LOCKING 

When WP# = V||_, the boot block is locked and any 
program or erase operation to the boot block will 
result in an error in the Status Register. All other 
blocks remain unlocked in this condition and can be 
programmed or erased normally. Note that this fea- 
ture is overridden and the boot block unlocked when 
RP# = Vhh- 

2.3.3 RP# = Vhh or WP# = V| H FOR BOOT 
BLOCK UNLOCKING 

Two methods can be used to unlock the boot block: 

1. WP# = V, H 

2. RP# = V hh 

If both or either of these two conditions are met, the 
boot block will be unlocked and can be programmed 
or erased. The truth table below clearly defines the 
write protection methods available. 


Table 2. Write Protection Truth Table for 
SmartVoltage Boot Block Family 


Vpp 

RP# 

WP# 

Write Protection 
Provided 

V|L 

X 

X 

All Blocks Locked 

^ VppLK 

V|L 

X 

All Blocks Locked 
(Reset) 

^ VppLK 

Vhh 

X 

All Blocks Unlocked 

^ VppLK 

V|H 

V|L 

Boot Block Locked 

^ VppLK 

V|H 

V|H 

All Blocks Unlocked 


In the 44-lead PSOP package, the WP# pin is re- 
placed by Ai 8 due to a lack of available pins on that 
package. For this package only, the boot block can 
only be unlocked by placing 12V on RP#. All other 
packages retain the WP# pin for controlling boot 
block locking with a logic-level signal. 
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3.0 PINOUTS 
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Figure 1. The 40-Lead TSOP Offers the Smallest Form Factor for Space-Constrained Applications 
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NOTE: 










For the 8-Mbit device, pin 2 has been changed to Ai 8 (WP# on 2/4-Mbit). Designs planning on upgrading to the 8-Mbit 

density from the 2/4-Mbit density in this package should design pin 2 to control WP# functionality at the 2/4-Mbit level 

and allow for pin 2 to control A 18 after upgrading to the 8-Mbit density. 





Figure 2. The 44-Lead TSOP Offers a Convenient Upgrade from JEDEC ROM Standards 
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Figure 3. The 48-Lead TSOP Offers the Smallest Form Factor for x16 Operation 
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3.1 Pin Descriptions 

Table 3. 28F800 Pin Descriptions 


Symbol 

Type 

Name and Function 

Aq-A -18 

INPUT 

ADDRESS INPUTS for memory addresses. Addresses are internally 
latched during a write cycle. 

Ag 

INPUT 

ADDRESS INPUT: When Ag is at Vhh the signature mode is accessed. 
During this mode, Ao decodes between the manufacturer and device IDs. 
When BYTE# is at a logic low, only the lower byte of the signatures are 
read. DQ15/A.-1 is a don’t care in the signature mode when BYTE# is low. 

DQ0-DQ7 

INPUT/OUTPUT 

DATA INPUTS/OUTPUTS: Inputs array data on the second CE# and 
WE# cycle during a Program command. Inputs commands to the 
Command User Interface when CE# and WE# are active. Data is 
internally latched during the Write cycle. Outputs array, Intelligent Identifier 
and Status Register data. The data pins float to tri-state when the chip is 
de-selected or the outputs are disabled. 

DQ8-DQ15 

INPUT/OUTPUT 

DATA INPUTS/OUTPUTS: Inputs array data on the second CE# and 
WE# cycle during a Program command. Data is internally latched during 
the Write cycle. Outputs array data. The data pins float to tri-state when 
the chip is de-selected or the outputs are disabled as in the byte-wide 
mode (BYTE# = “0”). In the byte-wide mode DQ-15/A.1 becomes the 
lowest order address for data output on DQ 0 -DQ 7 . 

CE# 

INPUT 

CHIP ENABLE: Activates the device’s control logic, input buffers, 
decoders and sense amplifiers. CE# is active low. CE# high de-selects 
the memory device and reduces power consumption to standby levels. If 
CE# and RP# are high, but not at a CMOS high level, the standby current 
will increase due to current flow through the CE# and RP# input stages. 

OE# 

INPUT 

OUTPUT ENABLE: Enables the device’s outputs through the data buffers 
during a read cycle. OE# is active low. 

WE# 

INPUT 

WRITE ENABLE: Controls writes to the Command Register and array 
blocks. WE# is active low. Addresses and data are latched on the rising 
edge of the WE# pulse. 

RP# 

INPUT 

RESET/DEEP POWER-DOWN: Uses three voltage levels (V|i_, Vih, and 
Vhh) to control two different functions: reset/deep power-down mode and 
boot block unlocking. It is backwards-compatible with the BX/BL parts. 

When RP# is at logic low, the device is in reset/deep powerdown 
mode, which puts the outputs at High-Z, resets the Write State Machine, 
and draws minimum current. 

When RP# is at logic high, the device is in standard operation. When 
RP# transitions from logic-low to logic-high, the device defaults to the 
read array mode. 

When RP# is at Vhh> the boot block is unlocked and can be 
programmed or erased. This overides any control from the WP# input. 
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Table 3. 28F800 Pin Descriptions (Continued) 


Symbol 

Type 

Name and Function 

WP# 

INPUT 

WRITE PROTECT: Provides a method for unlocking the boot block in a system without 
a 12V supply. WP# must be driven high or low, not left floating. 

When WP# is at logic low, the boot block is locked, preventing program and erase 
operations to the boot block. If a program or erase operation is attempted on the boot 
block when WP# is low, the corresponding status bit (bit 4 for Program, bit 5 for Erase) 
will be set in the Status Register to indicate the operation failed. 

When WP# is at logic high, the boot block is unlocked and can be programmed or 
erased. 

NOTE: 

This feature is overridden and the boot block unlocked when RP# is at Vhh- See 
Section 2.3 for details on write protection. 

BYTE# 

INPUT 

BYTE# ENABLE: Controls whether the device operates in the byte-wide mode (x 8 ) or 
the word-wide mode (xl 6 ). BYTE# pin must be controlled at CMOS levels to meet the 
CMOS current specification in the standby mode. 

When BYTE# is at logic low, the byte-wide mode is enabled, where data is read and 
programmed on DQ 0 -DQ 7 and DQ 15 /A .1 becomes the lowest order address that 
decodes between the upper and lower byte. DQ 8 -DQ 14 are tri-stated during the byte- 
wide mode. 

When BYTE# is at logic high, the word-wide mode is enabled, where data is read 
and programmed on DQ 0 -DQ 15 . 

Vcc 


DEVICE POWER SUPPLY: 5.0V ± 10%, 3.3V ± 0.3V 

Vpp 


PROGRAM/ERASE POWER SUPPLY: For erasing memory array blocks or 
programming data in each block, a voltage either of 5V ± 10% or 12V ± 5% must be 
applied to this pin. When Vpp < Vppi_K all blocks are locked and protected against 
Program and Erase commands. 

GND 

. 

GROUND: For all internal circuitry. 

NC 


NO CONNECT: Pin may be driven or left floating. 
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4.0 MEMORY MAPS 


28F800-T 28F800-B 


FFFFFH 

FC000H 

16-Kbyte BOOT BLOCK 

FFFFFH 

128-Kbyte MAIN BLOCK 

FBFFFH 

8-Kbyte PARAMETER BLOCK 

E0000H 


FA000H 

DFFFFH 


F9FFFH 

F8000H 

8-Kbyte PARAMETER BLOCK 

128-Kbyte MAIN BLOCK 

F7FFFH 

96-Kbyte MAIN BLOCK 

COOOOH 


E0000H 

BFFFFH 

128-Kbyte MAIN BLOCK 

DFFFFH 

128-Kbyte MAIN BLOCK 

A0000H 



9FFFFH 


COOOOH 



128-Kbyte MAIN BLOCK 

BFFFFH 

128-Kbyte MAIN BLOCK 

80000H 



7FFFFH 


A0000H 



128-Kbyte MAIN BLOCK 

9FFFFH 

128-Kbyte MAIN BLOCK 

60000H 



5FFFFH 


80000 H 



128-Kbyte MAIN BLOCK 

7FFFFH 

128-Kbyte MAIN BLOCK 

40000H 



3FFFFH 


60000 H 



128-Kbyte MAIN BLOCK 

5FFFFH 

128-Kbyte MAIN BLOCK 

20000H 


40000 H 

1FFFFH 

96-Kbyte MAIN BLOCK 

3FFFFH 


08000H 

20000H 

128-Kbyte MAIN BLOCK 

07FFFH 

06000H 

8-Kbyte PARAMETER BLOCK 


05FFFH 

04000H 


1FFFFH 


8-Kbyte PARAMETER BLOCK 

00000H 

128-Kbyte MAIN BLOCK 

03FFFH 

00000H 

16-Kbyte BOOT BLOCK 


290539-5 

NOTE: 

These memory maps apply to the 28F800-T/B components in Byte-Wide (x8) mode. 


Figure 4. Byte-Wide x8-Mode Memory Maps 
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28F800-B 


28F800-T 


7FFFFH 


70000H 

6FFFFH 


60000H 

5FFFFH 


50000 H 
4FFFFH 


40000H 

3FFFFH 


30000 H 
2FFFFH 


20000H 

1FFFFH 


10000H 

OFFFFH 


04000H 

03FFFH 

03b00H 

02FFFH 

02000H 

01FFFH 

00000H 


128-Kbyte MAIN BLOCK 

7FFFFH 

7E000H 

16-Kbyte BOOT BLOCK 

7DFFFH 

7D000H 

7CFFFH 

7C000H 

8-Kbyte PARAMETER BLOCK 

128-Kbyte MAIN BLOCK 

8-Kbyte PARAMETER BLOCK 

7BFFFH 

96-Kbyte MAIN BLOCK 

128-Kbyte MAIN BLOCK 

70000H 

6FFFFH 

128-Kbyte MAIN BLOCK 



128-Kbyte MAIN BLOCK 

60000H 


5FFFFH 

128-Kbyte MAIN BLOCK 



128-Kbyte MAIN BLOCK 

50000H 


4FFFFH 

128-Kbyte MAIN BLOCK 

128-Kbyte MAIN BLOCK 

40000H 

3FFFFH 

128-Kbyte MAIN BLOCK 

128-Kbyte MAIN BLOCK 

30000H 

2FFFFH 

128-Kbyte MAIN BLOCK 

96-Kbyte MAIN BLOCK 

20000H 

1FFFFH 


8-Kbyte PARAMETER BLOCK 

10000H 

128-Kbyte MAIN BLOCK 



8-Kbyte PARAMETER BLOCK 

OFFFFH 


16-Kbyte BOOT BLOCK 

00000H 

128-Kbyte MAIN BLOCK 


Figure 5. Word-Wide x 16-Mode Memory Maps 
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5.0 ADDITIONAL INFORMATION 

5.1 Product Information 



Operating Temperature 

T = Extended Temp 
Blank = Commercial Temp 

Package 

E = TSOP 

PA = 44-Lead PSOP 

TB = Ext. Temp 44-Lead PSOP 


T 

E 

2 

8 

F 

8 

0 

0 

C 

V 

3 

T 

8 

6 


i _ L ,.i_ . » « « , « i . i i 


{ 

{ 

{ 


Access Speed 

(ns, V cc = 5 V) 

T = Top Boot 
B = Bottom Boot 


Voltage Options (V PP / V cc ) 
V= (5 or 12/3.3 or 5) 


Product line designator 
for all Intel Flash products 


1 


Density / Organization 

00X = x8-only (X = 1 , 2, 4, 8) 

X00 = x8/x1 6 Selectable (X = 2. 4, 8)_ 


Architecture 
B = Boot Block 
C = Compact 48-Lead TSOP 
Boot Block 


290539-10 


VALID COMBINATIONS: 

40-Lead TSOP 
Commercial E28F008BVT60 

E28F008BVB60 
E28F008BVT80 
E28F008BVB80 
E28F008BVT120 
E28F008BVB120 


44-Lead PSOP 

PA28F800BVT60 
PA28F800BVB60 
PA28F800BVT80 
PA28F800BVB80 
PA28F800BVT 1 20 
PA28F800BVB1 20 


48-Lead TSOP 

E28F800CVT60 

E28F800CVB60 

E28F800CVT80 

E28F800CVB80 


Extended 


TE28F008BVT80 

TE28F008BVB80 


TB28F800BVT80 

TB28F800BVB80 


TE28F800CVT80 

TE28F800CVB80 


Table 4. Summary of Line Items 


Name 

V C c 

Vpp 

40- 

Lead 

TSOP 

44- 

Lead 

PSOP 

48- 

Lead 

TSOP 

0°C- + 70°C 

— 40°C- + 85°C 


3.3V 

5V 

5V 

12V 







* 





* 




28F008BV 

* 

* 



V* 



* 

* 
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5.2 References 


Order Number 

Document 

292130 

AB-57 “Boot Block Architecture for Safe Firmware Updates” 

292154 

AB-60 “2/4/8-Mbit SmartVoltage Boot Block Flash Memory Family” 

292098 

AP-363 “Extended Flash BIOS Concepts for Portable Computers” 

292148 

AP-604 “Using Intel’s Boot Block Flash Memory Parameter Blocks to Replace 
EEPROM” 

290530 

4-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 

290531 

2-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 



5.3 Revision History 


-001 


Initial release of datasheet 
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4-MB8T (256K x 16, 512K x 8) 

SmartVoltage BOOT BLOCK FLASH MEMORY FAMILY 

28F400BV-T/B, 28F004BV-T/B, 28F400CV-T/B 



m Intel SmartVoltage Technology 

— 5V or 12V Program/Erase 

— 3.3V or 5V Read Operation 

— 60% Faster Typical Programming at 
12V V PP 

■ Very High Performance Read 

— 5V: 60/80/120 ns Max. Access Time, 
30/40 ns Max. Output Enable 

— 3V: 110/150/180 ns Max. Access 
Time, 65/90 ns Max. Output Enable 

m Low Power Consumption 

— Maximum 60 mA Read Current at 5V 
— Maximum 30 mA Read Current at 3V 

m x8/x16-Selectable Input/Output Bus 

— 28F400 for High Performance 16- or 
32-bit CPUs 

m x8-Only Input/Output Architecture 

— 28F004 for Space-Constrained 8-bit 
Applications 

m Optimized Array Blocking Architecture 
— One 16-KB Protected Boot Block 
— Two 8-KB Parameter Blocks 
— One 96-KB Main Block 
— Three 128-KB Main Blocks 
— Top or Bottom Boot Locations 

m Absolute Hardware-Protection for Boot 
Block 

m Software EEPROM Emulation with 
Parameter Blocks 

m Extended Temperature Operation 
40° C to +85°C 


si Extended Cycling Capability 

— 100,000 Block Erase Cycles 
(Commercial Temperature) 

— 10,000 Block Erase Cycles 
(Extended Temperature) 

H Automated Word/Byte Write and Block 

Erase 

— Industry Standard Command User 
Interface 

— Status Registers 
— Erase Suspend Capability 

□ SRAM-Compatible Write Interface 

□ Automatic Power Savings Feature 

— 1 mA Typical Ice Active Current in 
Static Operation 

□ Reset/Deep Power-Down Input 

— 0.2 juA IccTypical 

— Provides Reset for Boot Operations 

□ Hardware Data Protection Feature 

— Erase/Write Lockout during Power 
Transitions 

□ Industry-Standard Surface Mount 
Packaging 

-40-Lead TSOP 

— 44-Lead PSOP: JEDEC ROM 
Compatible 

-48-Lead TSOP 
-56-Lead TSOP 

El Footprint Upgradable from 2 Mbit, and 
to 8 Mbit 

m ETOXtm iv Flash Technology 



December 1994 

Order Number: 290530-001 


4-13 


4-MBIT (256K x 16, 512K x 8) 
SmartVoltage BOOT BLOCK FLASH MEMORY FAMILY 


CONTENTS page 

1.0 PRODUCT FAMILY OVERVIEW .... 4-15 

1 .1 New Features in the SmartVoltage 

Products 4-15 

1.2 Main Features 4-15 

1 .3 Applications 4-17 

1.4 Pinouts 4-19 

1 .5 Pin Descriptions 4-22 

2.0 PRODUCT DESCRIPTION 4-24 

2.1 Memory Organization 4-24 

2.1.1 BLOCKING 4-24 

3.0 PRODUCT FAMILY PRINCIPLES OF 

OPERATION ...4-26 

3.1 Bus Operations 4-26 

3.2 Read Operations 4-26 

3.2.1 READ ARRAY ..4-26 

3.2.2 INTELLIGENT 

IDENTIFIERS 4-28 

3.3 Write Operations 4-28 

3.3.1 COMMAND USER 

INTERFACE 4-28 

3.3.2 STATUS REGISTER 4-31 

3.3.3 PROGRAM MODE 4-32 

3.3.4 ERASE MODE 4-33 

3.4 Boot Block Locking 4-37 

3.4.1 V PP = V| L FOR COMPLETE 

PROTECTION 4-37 

3.4.2 WP# = V| L FOR BOOT 

BLOCK LOCKING 4-37 

3.4.3 RP# = V H h OR WP# = V, H 

FOR BOOT BLOCK 
UNLOCKING 4-37 


CONTENTS page 

3.5 Power Consumption 4-37 

3.5.1 ACTIVE POWER 4-37 

3.5.2 AUTOMATIC POWER 

SAVINGS 4-37 

3.5.3 STANDBY POWER 4-37 

3.5.4 DEEP POWER-DOWN 

MODE 4-37 

3.6 Power-Up/Down Operation 4-38 

3.6.1 RP# CONNECTED TO 

SYSTEM RESET .......4-38 

3.6.2 V C c.Vp P AND RP# 

TRANSITIONS ....4-38 

3.7 Power Supply Decoupling 4-38 

3.7.1 V PP TRACE ON PRINTED 
CIRCUIT BOARDS ...4-38 

4.0 ABSOLUTE MAXIMUM RATINGS . . 4-40 

5.0 COMMERCIAL OPERATING 

CONDITIONS 4-41 

5.1 Switching Vqc Voltages 4-41 

5.2 DC Characteristics 

(Commercial) 4-42 

5.3 AC Characteristics 

(Commercial) 4-46 

6.0 EXTENDED OPERATING 

CONDITIONS . . 4-56 

6.1 Applying V<x Voltages 4-56 

6.2 DC Characteristics (Extended) . . . . 4-57 

6.3 AC Characteristics (Extended) 4-62 

7.0 ADDITIONAL INFORMATION 4-66 

7.1 Ordering Information 4-66 

7.2 References 4-67 

7.3 Revision History 4-67 


I 


4-14 



4-MBIT SmartVoltage BOOT BLOCK FAMILY 


intel 


1.0 PRODUCT FAMILY OVERVIEW 

This datasheet comprises the specifications for the 
SmartVoltage products in the 4-Mbit boot block flash 
memory family. Throughout this datasheet, the 
28F400 refers to all x8/x16 4-Mbit products, while 
28F004 refers to all x8 4-Mbit products. Section 1 
provides an overview of the flash memory family in- 
cluding applications, pinouts and pin descriptions. 
Sections 2 and 3 describe, in detail, the specific 
memory organizations and principles of operation for 
these products. Finally, Sections 4 and 5 describe 
the family’s operating specifications. Tables 1 and 2 
provide a quick reference to each product’s voltage 
supply capability. 


1.1 New Features in the SmartVoltage 
Products 

The new SmartVoltage boot block flash memory 
family offers identical operation as the current 
BX/BL 12V program products, except for the differ- 
ences listed below. All other functions are equivalent 
to current products, including signatures, write com- 
mands, and pinouts. 

q WP# pin has replaced a DU pin. See Table 3 and 
Table 10 for details. 

0 5V Program/Erase operation has been added 
that uses proven program and erase techniques 
with 5V ± 10% applied to Vpp. 

• Enhanced circuits optimize performance at 3.3V 
Vcc- 

If you are designing with existing BX/BL 12V Vpp 
boot block products today, you should provide the 
capability in your board design to upgrade to these 
new SmartVoltage products. 

Follow these guidelines to ensure compatibilty: 

1. Connect WP# (DU on existing products) to con- 
trol signal or to Vcc or GND. 


2. If adding a switch on Vpp for write protection, 
switch to GND for complete write protection. 

3. Allow for connecting 5V to Vpp and disconnect 
12V from Vpp line, if desired. 


1.2 Main Features 

Intel’s SmartVoltage technology provides the most 
flexible voltage solution in the industry. 
SmartVoltage provides two discrete voltage supply 
pins, Vcc for read operation, and Vpp for program 
and erase operation. Discrete supply pins allow sys- 
tem designers to use the optimal voltage levels for 
their design. The 28F400/004BV provides read ca- 
pability at 3.3V or 5V, and program/erase capability 
at 5V or 12V. Since many designs read from the 
flash memory a large percentage of the time, 3.3V 
Vcc operation can provide great power savings. If 
read performance is an issue, however, 5V Vcc pro- 
vides faster read access times. For program and 
erase operations, 5V Vpp operation eliminates the 
need for in system voltage converters, while 12V 
Vpp operation provides faster program and erase for 
situations where 1 2 V is available, such as manufac- 
turing or designs where 12V is in-system. 

The 28F400/28F004 boot block flash memory fami- 
ly is a very high-performance, 4-Mbit (4,194,304 bit) 
flash memory family organized as either 256 Kwords 
(262,144 words) of 16 bits each or 512 Kbytes 
(524,288 bytes) of 8 bits each. 

Separately erasable blocks, including a hardware- 
lockable boot block (16,384 bytes), two parameter 
blocks (8,192 Bytes each) and main blocks (one 
block of 98,304 bytes and three blocks of 131,072 
bytes) define the boot block flash family architec- 
ture. See Figure 7 and 8 for memory maps. Each 
block can be independently erased and pro- 
grammed 1 00,000 times at commercial temperature 
or 10,000 times at extended temperature. 
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Table 1. x8/x16 Boot Block Product Family 


Product Name 

Vpp 

Vcc 


12V 

5 V 

5V 

3V 

28F400BV-T/B 



* 

* 


Table 2. x8-only Boot Block Product Family 


Product Name 

Vpp 

Vcc 


12V 

5V 

5V 

3V 

28F004BV-T/B 




V* 


The boot block is located at either the top (denoted 
by -T suffix) or the bottom (-B suffix) of the address 
map in order to accommodate different microproc- 
essor protocols for boot code location. The hard- 
ware-lockable boot block provides complete code 
security for the kernel code required for system ini- 
tialization. Locking and unlocking of the boot block is 
controlled by WP# and/or RP# (see Section 3.4 for 
details). 

The Command User Interface (CUI) serves as the 
interface between the microprocessor or microcon- 
troller and the internal operation of the boot block 
flash memory products. The internal Write State Ma- 
chine (WSM) automatically executes the algorithms 
and timings necessary for program and erase opera- 
tions, including verifications, thereby unburdening 
the microprocessor or microcontroller of these 
tasks. The Status Register (SR) indicates the status 
of the WSM and whether it successfully completed 
the desired program or erase operation. 

Program and Erase Automation allows program and 
erase operations to be executed using an industry- 
standard two-write command sequence to the CUI. 
Data writes are performed in word (28F400 family) 
or byte (28F400 or 28F004 families) increments. 
Each byte or word in the Flash memory can be pro- 
grammed independently of other memory locations, 
unlike erases, which erase all locations within a 
block simultaneously. 

The 4-Mbit SmartVoltage boot block flash memory 
family is also designed with an Automatic Power 
Savings (APS) feature which minimizes system 


battery current drain, allowing for very low power de- 
signs. To provide even greater power savings, the 
boot block family includes a deep power-down mode 
which minimizes power consumption by turning most 
of the Flash memory’s circuitry off. This mode is 
controlled by the RP# pin and its usage is discussed 
in Section 3.5, along with other power consumption 
issues. 

Additionally, the RP# pin provides protection 
against unwanted command writes due to invalid 
system bus conditions that may occur during system 
reset and power-up/down sequences. Also, when 
the Flash memory powers-up, it automatically de- 
faults to the read array mode, but during a warm 
system reset, where power continues uninterrupted 
to the system components, the flash memory could 
remain in a non-read mode, such as erase. Conse- 
quently, the system Reset pin should be tied to RP# 
to reset the memory to normal read mode upon acti- 
vation of the Reset pin. 

For the 28F400, byte-wide or word-wide input/out- 
put is controlled by the BYTE# pin. Please see Ta- 
ble 3 for a detailed description of BYTE# opera- 
tions, especially the usage of the DQis/A-i pin. 

The 28F400 products are available in a 
ROM/EPROM-compatible pinout and housed in the 
44-Lead PSOP (Plastic Small Outline) package, the 
48-Lead TSOP (Thin Small Outline, 1.2 mm thick) 
package and the 56-Lead TSOP as shown in Figure 
4, 5 and 6, respectively. The 28F004 products are 
available in the 40-Lead TSOP package as shown in 
Figure 3. 
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Refer to the DC Characteristics Table, Section 4.2 
(commercial temperature) and Section 5.2 (extend- 
ed temperature), for complete current and voltage 
specifications. Refer to the AC Characteristics Ta- 
ble, Section 4.3 (commercial temperature) and Sec- 
tion 5.3 (extended temperature), for read, write and 
erase performance specifications. 


1.3 Applications 

The 4-Mbit boot block flash memory family com- 
bines high-density, low-power, high-performance, 
cost-effective flash memories with blocking and 
hardware protection capabilities. Their flexibility and 
versatility reduce costs throughout the product life 
cycle. Flash memory is ideal for Just-In-Time pro- 
duction flow, reducing system inventory and costs, 
and eliminating component handling during the pro- 
duction phase. 

When your product is in the end-user’s hands, and 
updates or feature enhancements become neces- 
sary, flash memory reduces the update costs by al- 
lowing user-performed code changes instead of 
costly product returns or technician calls. 

The 4-Mbit boot block flash memory family provides 
full-function, blocked flash memories suitable for a 
wide range of applications. These applications in- 
clude extended PC BIOS and ROM-able applica- 
tions storage, digital cellular phone program and 
data storage, telecommunication boot/firmware, 
printer firmware/font storage and various other em- 
bedded applications where program and data stor- 
age are required. 

Reprogrammable systems such as personal com- 
puters, are ideal applications for the 4-Mbit flash 
memory products. Increasing software sophis- 
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tication greatens the probability that a code update 
will be required after the PC is shipped. For example, 
the emerging of “Plug and Play” standard in desktop 
and portable PCs enables auto-configuration of ISA 
and PCI add-in cards. However, since the “Plug and 
Play” specification continues to evolve, a flash BIOS 
provides a cost-effective capability to update exist- 
ing PCs. In addition, the parameter blocks are ideal 
for storing the required auto-configuration parame- 
ters, allowing you to integrate the BIOS PROM and 
parameter storage EEPROM into a single compo- 
nent, reducing parts costs while increasing function- 
ality. 

The 4-Mbit flash memory products are also excellent 
design solutions for digital cellular phone and tele- 
communication switching applications requiring very 
low power consumption, high-performance, high- 
density storage capability, modular software de- 
signs, and a small form factor package. The 4-Mbit’s 
Kbytes of hardware-protected boot code, four main 
blocks of program code and two parameter blocks 
of 8 Kbytes each for frequently updated data stor- 
age and diagnostic messages (e.g., phone numbers, 
authorization codes). 

Intel’s boot block architecture provides a flexible 
voltage solution for the different design needs of 
various applications. The asymmetrically blocked 
memory map allows the integration of several mem- 
ory components into a single Flash device. The boot 
block provides a secure boot PROM; the parameter 
blocks can emulate EEPROM functionality for pa- 
rameter store with proper software techniques; and 
the main blocks provide code and data storage with 
access times fast enough to execute code in place, 
decreasing RAM requirements. 


P>G?@®tUJ(ST raEWOEW 


4-17 


4-MBIT SmartVoltage BOOT BLOCK FAMILY 




Figure 1. 28F400 Interface to lntel 386 EX™ Microprocessor 
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Figure 2. 28F004 Interface to lnte!80C188EB 8-Bit Embedded Microprocessor 


1.4 Pinouts have s P ace concerns, refer to the 48-Lead pinout in 

Figure 5. Furthermore, the 28F400 56-Lead TSOP 
Intel’s SmartVoltage Boot Block architecture pro- pinout shown in Figure 6 provides density upgrades 

vides upgrade paths in every package pinout to the to future higher density boot block memories. 

8-Mbit density. The 28F004 40- Lead TSOP pinout 

for space-constrained designs is shown in Figure 3. Pinouts for the corresponding 2-Mbit and 8-Mbit 

The 28F400 44-Lead PSOP pinout follows the indus- components are also provided for convenient refer- 

try standard ROM/EPROM pinout as shown in Fig- ence. 4-Mbit pinouts are given on the chip illustration 

ure 4. For designs that require x16 operation but in the center, with 2-Mbit and 8-Mbit pinouts going 

outward from the center. 
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NOTE: 

Pin 12 is DU for BX/BL 12V V PP Versions. 


Figure 3. The 40-Lead TSOP Offers the Smallest Form Factor for Space-Constrained Applications 
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Pin 2 is DU for BX/BL 12V V PP Versions, but for the 8-Mbit device, pin 2 has been changed to A^ (WP# on 2/4 Mbit). 

Designs planning on upgrading to the 8-Mbit density from the 2/4-Mbit density in this package should design pin 2 to 

control WP# functionality at the 2/4-Mbit level and allow for pin 2 to control A-,8 after upgrading to the 8-Mbit density. 


Figure 4. The 44-Lead PSOP Offers a Convenient Upgrade from JEDEC ROM Standards 
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Figure 5. The 48-Lead TSOP Offers the Smallest Form Factor for x16 Operation 




NOTE: 

Pin 18 is DU for BX/BL 12V V PP Versions. 


Figure 6. The 56-Lead TSOP Offers Compatibility between 2 and 4 Mbits 
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iny 


1.5 Pin Descriptions 

Table 3. 28F400/004 Pin Descriptions 


Symbol 

Type 

Name and Function 

Ao-A-18 

INPUT 

ADDRESS INPUTS for memory addresses. Addresses are internally latched 
during a write cycle. The 28F400 only has A 0 -A 17 pins, while the 28F004 has 

a 0 -a 18 . 

A 9 

INPUT 

ADDRESS INPUT: When Ag is at Vhh the signature mode is accessed. During this 
mode, Ao decodes between the manufacturer and device IDs. When BYTE# is at 
a logic low, only the lower byte of the signatures are read. DQ-js/A-i is a don’t 
care in the signature mode when BYTE# is low. 

DQ 0 -DQ 7 

INPUT/ 

OUTPUT 

DATA INPUTS/OUTPUTS: Inputs array data on the second CE# and WE# cycle 
during a Program command. Inputs commands to the Command User Interface 
when CE# and WE# are active. Data is internally latched during the Write cycle. 
Outputs array, Intelligent Identifier and Status Register data. The data pins float to 
tri-state when the chip is de-selected or the outputs are disabled. 

DQq-DQ-15 

INPUT/ 

OUTPUT 

DATA INPUTS/OUTPUTS: Inputs array data on the second CE# and WE# cycle 
during a Program command. Data is internally latched during the Write cycle. 
Outputs array data. The data pins float to tri-state when the chip is de-selected or 
the outputs are disabled as in the byte-wide mode (BYTE# = “0”). In the byte- 
wide mode DQi 5 /A _ 1 becomes the lowest order address for data output on 
DQ 0 -DQ 7 . The 28F004 does not include these DQ 8 -DQis pins. 

CE# 

INPUT 

CHIP ENABLE: Activates the device’s control logic, input buffers, decoders and 
sense amplifiers. CE# is active low. CE# high de-selects the memory device and 
reduces power consumption to standby levels. If CE# and RP# are high, but not 
at a CMOS high level, the standby current will increase due to current flow through 
the CE# and RP# input stages. 

OE# 

INPUT 

OUTPUT ENABLE: Enables the device’s outputs through the data buffers during a 
read cycle. OE # is active low. 



WRITE ENABLE: Controls writes to the Command Register and array blocks. 
WE# is active low. Addresses and data are latched on the rising edge of the WE# 
pulse. 

RP# 

INPUT 

RESET/DEEP POWER-DOWN: Uses three voltage levels (V| L , V| H , and V H h) to 
control two different functions: reset/deep power-down mode and boot block 
unlocking. It is backwards-compatible with the 28F400BX/BL. 

When RP# is at logic low, the device is in reset/deep powerdown mode, 

which puts the outputs at High-Z, resets the Write State Machine, and draws 
minimum current. 

When RP# is at logic high, the device is in standard operation. When RP# 
transitions from logic-low to logic-high, the device defaults to the read array mode. 

When RP# is at Vhh> the boot block is unlocked and can be programmed or 
erased. This overides any control from the WP# input. 
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Table 3. 28F400/004 Pin Descriptions (Continued) 


Symbol 

Type 

Name and Function 

WP# 

INPUT 

WRITE PROTECT: Provides a method for unlocking the boot block in a system without 
a 12 V supply. WP# must be pulled to logic low or high, not left floating. 

When WP# is at logic low, the boot block is locked, preventing Program and Erase 
operations to the boot block. If a Program or Erase operation is attempted on the boot 
block when WP# is low, the corresponding status bit (bit 4 for Program, bit 5 for Erase) 
will be set in the Status Register to indicate the operation failed. 

When WP# is at logic high, the boot block is unlocked and can be programmed or 
erased. 

NOTE: This feature is overridden and the boot block unlocked when RP# is at Vhh- See 
Section 3.4 for details on write protection. 

BYTE# 

INPUT 

BYTE# ENABLE: Not available on 28F004. Controls whether the device operates in 
the byte-wide mode (x 8 ) or the word-wide mode (x16). BYTE# pin must be controlled at 
CMOS levels to meet the CMOS current specification in the standby mode. 

When BYTE# is at logic low, the byte-wide mode is enabled, where data is read and 
programmed on DQ 0 -DQ 7 and DQ 15 /A_i becomes the lowest order address that 
decodes between the upper and lower byte. DQ 8 -DQ 14 are tri-stated during the byte- 
wide mode. 

When BYTE# is at logic high, the word-wide mode is enabled, where data is read 
and programmed on DQ 0 -DQ 15 . 

Vcc 


DEVICE POWER SUPPLY: 5.0V ± 10%, 3.3V ± 0.3V 

Vpp 


PROGRAM/ERASE POWER SUPPLY: For erasing memory array blocks or 
programming data in each block, a voltage either of 5V ± 10% or 12V ± 5% must be 
applied to this pin. When Vpp < Vppi_K all blocks are locked and protected against 
Program and Erase commands. 

GND 


GROUND: For all internal circuitry. 

NC 


NO CONNECT: Pin may be driven or left floating. 
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2.0 PRODUCT DESCRIPTION 


2.1 Memory Organization 

2.1.1 BLOCKING 

This product family features an asymmetrically 
blocked architecture providing system memory inte- 
gration. Each erase block can be erased indepen- 
dently of the others up to 100,000 times at commer- 
cial temperature or up to 10,000 times at extended 
temperature. The block sizes have been chosen to 
optimize their functionality for common applications 
of nonvolatile storage. For the address locations of 
the blocks, see the memory maps in Figures 7 
and 8. 


2.1. 1.1 Boot Block— 1 x 16 KB 

The boot block is intended to replace a dedicated 
boot PROM in a microprocessor or microcontroller- 
based system. The 16-Kbyte (16,384 bytes) boot 
block is located at either the top (denoted by -T suf- 
fix) or the bottom (-B suffix) of the address map to 
accommodate different microprocessor protocols 
for boot code location. This boot block features 
hardware controllable write-protection to protect the 
crucial microprocessor boot code from accidental 
erasure. The protection of the boot block is con- 
trolled using a combination of the Vpp, RP#, and 
WP# pins, as is detailed in Section 3.4. 


intel. 

2.1. 1.2 Parameter Blocks— 2 x 8 KB 

The boot block architecture includes parameter 
blocks to facilitate storage of frequently updated 
small parameters that would normally require an 
EEPROM. By using software techniques, the byte- 
rewrite functionality of EEPROMs can be emulated. 
These techniques are detailed in Intel’s AP-604, 
“Using Intel’s Boot Block Flash Memory Parameter 
Blocks to Replace EEPROM.” Each boot block 
component contains two parameter blocks of eight 
Kbytes (8,192 bytes) each. The parameter blocks 
are not write-protectable. 

2.1. 1.3 Main Blocks— 1 x 96 KB + 3 x 128 KB 

After the allocation of address space to the boot and 
parameter blocks, the remainder is divided into main 
blocks for data or code storage. Each 4-Mbit device 
contains one 96-Kbyte (98,304 byte) block and three 
128-Kbyte (131,072 byte) blocks. See the memory 
maps for each device for more information. 
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16-Kbyte BOOT BLOCK 

3E000H 

3DFFFH 8-Kbyte PARAMETER BLOCK 

3D000H 

3CFFFH 8-Kbyte PARAMETER BLOCK 
3C000H 


30000H 

2FFFFH 


20000H 

1FFFFH 


10000H 

OFFFFH 


96-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


30000H 

2FFFFH 


20000H 

1FFFFH 


10000H 

OFFFFH 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


96-Kbyte MAIN BLOCK 


04000H 

03FFFH 8-Kbyte PARAMETER BLOCK 

03000H 

02FFFH 8-Kbyte PARAMETER BLOCK 

02000H : 

01FFFH 16-Kbyte BOOT BLOCK 


Address = A[17:0]. In x8 operation, the least significant system address should be connected to A_-|. Memory maps 
are shown for x16 operation. 


Figure 7. 28F400-T/B Memory Maps 


. 16-Kbyte BOOT BLOCK 
8-Kbyte PARAMETER BLOCK 
8-Kbyte PARAMETER BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


96-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


96-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


8-Kbyte PARAMETER BLOCK 
8-Kbyte PARAMETER BLOCK 
16-Kbyte BOOT BLOCK 


NOTE: 

Address = A[18:0], 


Figure 8. 28F004-T/B Memory Maps 
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3.0 PRODUCT FAMILY PRINCIPLES 
OF OPERATION 

Flash memory augments EPROM functionality with 
in-circuit electrical write and erase. The boot block 
flash family utilizes a Command User Interface (CUI) 
and automated algorithms to simplify write and 
erase operations. The CUI allows for 100% TTL-lev- 
el control inputs, fixed power supplies during erasure 
and programming, and maximum EPROM compati- 
bility. 

When Vpp < Vpp|_K, the device will only successful- 
ly execute the following commands: Read Array, 
Read Status Register, Clear Status Register and in- 
telligent identifier mode. The device provides stan- 
dard EPROM Read, Standby and Output Disable op- 
erations. Manufacturer Identification and Device 
Identification data can be accessed through the CUI 
or through the standard EPROM Ag high voltage ac- 
cess (Vid) for PROM programming equipment. 

The same EPROM Read, Standby and Output Dis- 
able functions are available when 5V or 12V is ap- 
plied to the Vpp pin. In addition, 5V or 12V on Vpp 
allows write and erase of the device. All functions 
associated with altering memory contents: Write and 
Erase, Intelligent Identifier Read, and Read Status 
are accessed via the CUI. 

The purpose of the Write State Machine (WSM) is to 
completely automate the write and erasure of the 
device. The WSM will begin operation upon receipt 
of a signal from the CUI and will report status back 
through a Status Register. The CUI will handle the 
WE# interface to the data and address latches, as 
well as system software requests for status while the 
WSM is in operation. 


irriel. 

3.1 Bus Operations 

Flash memory reads, erases and writes in-system 
via the local CPU. All bus cycles to or from the flash 
memory conform to standard microprocessor bus 
cycles. These bus operations are summarized in Ta- 
bles 4 and 5. 


3.2 Read Operations 

3.2.1 READ ARRAY 

When RP# transitions from V||_ (reset) to Vih, the 
device will be in the read array mode and will re- 
spond to the read control inputs (CE#, address in- 
puts) and OE#) without any commands being writ- 
ten to the CUI. 

When the device is in the read array mode, five con- 
trol signals must be controlled to obtain data at the 
outputs. 

• WE# must be logic high (Vih) 

• CE# must be logic low (V||_) 

• OE must be logic low (V||_) 

• RP# must be logic high (Vih) 

• BYTE# must be logic high or logic low. 

In addition, the address of the desired location must 
be applied to the address pins. Refer to Figures 1 8 
and 1 9 for the exact sequence and timing of these 
signals. 

If the device is not in read array mode, as would be 
the case after a program or erase operation, the 
Read Mode command (FFH) must be written to the 
CUI before reads can take place. 
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Table 4. Bus Operations for Word-Wide Mode (BYTE# = V|h! 


Mode 

Notes 

RP# 

CE# 

OE# 

WE# 

a 9 

A 0 

Vpp 

DQo-15 

Read 

1,2,3 

Vih 

V| L 

V|L 

V| H 

X 

X 

X 

Dout 

Output Disable 


Vih 

V| L 

V| H 

V|H 

X 

X 

X 

High Z 

Standby 



Vih 

X 

X 


D 

X 

■EMM 

Deep Power-Down 

9 

V|L 

X 

X 

X 


D 

X 

■SH^H 

Intelligent Identifier (Mfr) 

4 


■ I 


KM 

PIW 


X 

1 

Intelligent Identifier (Device) 



■ 


KM 

EM 


mm 

See Table 6 

Write 



V|L 



a 



Din 


Table 5. Bus Operations for Byte-Wide Mode (BYTE# = V| L ) 


Mode 

Notes 

RP# 

CE# 

OE# 

WE# 

a 9 

A 0 

A-i 

a. 

0. 

> 


DQ 8 -14 

Read 

1,2,3 

V|H 

V|L 

V|L 

V| H 

X 

X 

D 




Output Disable 






D 

a 

D 



High Z 

Standby 




X 

X 

I 

D 

D 



High Z 

Deep Power-Down 




X 

X 

D 

D 

D 




Intelligent Identifier (Mfr) 

4 

V|H 

V|L 

VlL 

V|H 

V|D 

V|L 

X 

X 

89H 

High Z 

Intelligent Identifier 
(Device) 

4,5 

V| H 

V| L 

V|L 

V|H 

V|D 

V| H 

X 

X 

See Table 6 

High Z 

Write 

6,7,8 

V| H 

V|L 

V| H 

V|L 

X 

X 

X 

X 

□in 

High Z 


NOTES: 

1 . Refer to DC Characteristics. 

2. X can be V||_, Vih for control pins and addresses, Vppy< or Vppn for Vpp. 

3. See DC Characteristics for Vppy<, Vppm, VppH2 . Vhh. Vid voltages. 

4. Manufacturer and Device codes may also be accessed via a CUI write sequence, A-1-A-17 = X, A-i-A-iq = X. 

5. See Table 6 of Device IDs. 

6. Refer to Table 7 for valid Din during a Write operation. 

7. Command writes for Block Erase or Word/Byte Write are only executed when Vpp = Vppm or VppH2- 

8. To Write or Erase the boot block, hold RP# at Vhh or WP# at V IH- 

9. RP# must be at GND ± 0.2V to meet the maximum deep power-down current specified. 


[p[F3®®tUJ©T [p>[F30 


4-27 






















4-MBIT SmartVoltage BOOT BLOCK FAMILY 


3.2.2 INTELLIGENT IDENTIFIERS 

The intelligent identifiers of the SmartVoltage boot 
block components are identical to the boot block 
products that operate only at 12V Vpp. The manu- 
facturer and device codes are read via the CUI or by 
taking the Ag pin to V|p. Writing 90H to the CUI 
places the device into intelligent identifier read 
mode. In this mode, Ag = 0 outputs the manufactur- 
er’s identification code and Ag = 1 outputs the de- 
vice code. When BYTE# is at a logic low, only the 
lower byte of the above signatures is read and 
DQ15/A-1 is a “don’t care” during intelligent identi- 
fier mode. For x8 only products only the lower byte is 
read. See the Table 6 below for product signatures. 
A Read Array command must be written to the mem- 
ory to return to the read array mode. 


Table 6. Intelligent Identifier Table 


Product 

Mfr. ID 

Device ID 

-T 

(Top Boot) 

-B 

(Bottom Boot) 

28F400 

0089 H 

4470 H 

4471 H 

28F004 

89 H 

78 H 

79 H 


3.3 Write Operations 

3.3.1 COMMAND USER INTERFACE (CUI) 

The Command User Interface (CUI) serves as the 
interface between the microprocessor and the inter- 
nal chip controller. Commands are written to the CUI 
using standard microprocessor write timings. The 
available commands are Read Array, Read Intelli- 
gent Identifier, Read Status Register, Clear Status 


intel. 

Register, Erase and Program (summarized in Tables 
7 and 8). For Read commands, the CUI points the 
read path at either the array, the intelligent identifier, 
or the Status Register depending on the command 
received. For Program or Erase commands, the CUI 
informs the Write State Machine (WSM) that a write 
or erase has been requested. During the execution 
of a Program command, the WSM will control the 
programming sequences and the CUI will only re- 
spond to status reads. During an erase cycle, the 
CUI will respond to status reads and erase suspend. . 
After the WSM has completed its task, it will set the 
WSM Status bit to a “1,” which will also allow the 
CUI to respond to its full command set. Note that 
after the WSM has returned control to the CUI, the 
CUI will stay in the current command state until it 
receives another command. 


Table 7. Command Set Codes and 
Corresponding Device Mode 


Command Codes 

Device Mode 

00 

Invalid Reserved 

10 

Alternate Program Set-Up 

20 

Erase Set-Up 

40 

Program Set-Up 

50 

Clear Status Register 

70 

Read Status Register 

90 

Intelligent Identifier 

BO 

Erase Suspend 

DO 

Erase Resume/Erase Confirm 

FF 

Read Array 
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Intel 


Table 8. Command Bus Definitions 


Command 

Notes 

First Bus Cycle 

Second Bus Cycle 

Oper 

Addr 

Data 

Oper 

Addr 

Data 

Read Array 

8 

Write 

X 

FFH 




Intelligent Identifier 

1 

Write 

X 

90H 

Read 

IA 

IID 

Read Status Register 

2,4 

Write 

X 

70H 

Read 

X 

SRD 

Clear Status Register 

3 

Write 

X 

50H 




Word /Byte Write 


Write 

WA 

40H 

Write 

WA 

WD 

Alternate Word/Byte Write 

6,7 

Write 

WA 

10H 

Write 

WA 

WD 

Block Erase/Confirm 

6,7 

Write 

BA 

20H 

Write 

BA 

DOH 

Erase Suspend/Resume 

5 

Write 

X 

BOH 

Write 

X 

DOH 


ADDRESS 

BA = Block Address 
IA = Identifier Address 
WA = Write Address 
X = Don’t Care 


DATA 

SRD = Status Register Data 
IID = Identifier Data 
WD = Write Data 


NOTES: 

1. Bus operations are defined in Tables 4 and 5. 

2. IA = Identifier Address: A0=0 for manufacturer code, A0 = 1 for device code. 

3. SRD— Data read from Status Register. 

4. IID = Intelligent Identifier Data. Following the Intelligent Identifier command, two Read operations access manufacturer 
and device codes. 

5. BA = Address within the block being erased. 

6. WA = Address to be written. WD = Data to be written at location WD. 

7. Either 40H or 10H commands is valid. 

8. When writing commands to the device, the upper data bus [DQq-DQis] = X (28F400 only) which is either V||_ or Vm, to 
minimize current draw. 
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3.3.1. 1 Command Function Description 

Device operations are selected by writing specific 
commands into the CUI. Tables 7 and 8 define the 
available commands. 

Invalid/Reserved 

These are unassigned commands and should not be 
used. Intel reserves the right to redefine these codes 
for future functions. 

Read Array (FFH) 

This single write cycle command points the read 
path at the array. If the host CPU performs a 
CE#/OE# -controlled Read immediately following a 
two-write sequence that started the WSM, then the 
device will output Status Register contents. If the 
Read Array command is given after the Erase Setup 
command, the device will reset to read the array. A 
two Read Array command sequence (FFH) is re- 
quired to reset to Read Array after the Program Set- 
up command. 

Intelligent Identifier (90H) 

After this command is executed, the CUI points the 
output path to the intelligent identifier circuits. Only 
intelligent identifier values at addresses 0 and 1 can 
be read (only address Aq is used in this mode, all 
other address inputs are ignored). 

Read Status Register (70H) 

This is one of the two commands that is executable 
while the WSM is operating. After this command is 
written, a read of the device will output the contents 
of the Status Register, regardless of the address 
presented to the device. 

The device automatically enters this mode after pro- 
gram or erase has completed. 

Clear Status Register (50H) 

The WSM can only set the Program Status and 
Erase Status bits in the Status Register to “1,” it 
cannot clear them to “0.” 


intel. 

Two reasons exist for operating the Status Register 
in this fashion. The first is synchronization. Since the 
WSM does not know when the host CPU has read 
the Status Register, it would not know when to clear 
the status bits. Secondly, if the CPU is programming 
a string of bytes, it may be more efficient to query 
the Status Register after programming the string. 
Thus, if any errors exist while programming the 
string, the Status Register will return the accumulat- 
ed error status. 

Program Setup (40H or 10H) 

This command simply sets the CUI into a state such 
that the next write will load the Address and Data 
registers. After this command is executed, the out- 
puts default to the Status Register. A two Read Ar- 
ray command sequence (FFH) is required to reset to 
Read Array after the Program Setup command. 

Program 

The second write after the Program Setup com- 
mand, will latch addresses and data. Also, the CUI 
initiates the WSM to begin execution of the program 
algorithm. The device outputs Status Register data 
when OE# is enabled. A Read Array command is 
required after programming, to read array data. 

Erase Setup (20H) 

Prepares the CUI for the Erase Confirm command. 
No other action is taken. If the next command is not 
an Erase Confirm command, then the CUI will set 
both the Program Status and Erase Status bits of the 
Status Register to a “1,” place the device into the 
Read Status Register state, and wait for another 
command. 

Erase Confirm (DOH) 

If the previous command was an Erase Setup com- 
mand, then the CUI will enable the WSM to erase, at 
the same time closing the address and data latches, 
and respond only to the Read Status Register and 
Erase Suspend commands. While the WSM is exe- 
cuting, the device will output Status Register data 
when OE# is toggled low. Status Register data can 
only be updated by toggling either OE# or CE# low. 
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Erase Suspend (BOH) 

This command is only valid while the WSM is exe- 
cuting an Erase operation, and therefore will only be 
responded to during an Erase operation. After this 
command has been executed, the CUI will set an 
output that directs the WSM to suspend Erase oper- 
ations, and then respond only to Read Status Regis- 
ter or to the Erase Resume commands. Once the 
WSM has reached the Suspend state, it will set an 
output into the CUI which allows the CUI to respond 
to the Read Array, Read Status Register, and Erase 
Resume commands. In this mode, the CUI will not 
respond to any other commands. The WSM will also 
set the WSM Status bit to a “1.” The WSM will con- 
tinue to run, idling in the SUSPEND state, regardless 
of the state of all input control pins except RP#, 
which will immediately shut down the WSM and the 
remainder of the chip, if it is made active. During a 
Suspend operation, the data and address latches 
will remain closed, but the address pads are able to 
drive the address into the read path. 

Erase Resume (DOH) 

This command will cause the CUI to clear the Sus- 
pend state and clear the WSM Status Bit to a “0,” 
but only if an Erase Suspend command was previ- 
ously issued. Erase Resume will not have any effect 
under any other conditions. 

3.3.2 STATUS REGISTER 

The device contains a Status Register which may be 
read to determine when a Program or Erase opera- 
tion is complete, and whether that operation com- 
pleted successfully. The Status Register may be 
read at any time by writing the Read Status com- 
mand to the CUI. After writing this command, all sub- 
sequent Read operations output data from the 
Status Register until another command is written to 
the CUI. A Read Array command must be written to 
the CUI to return to the read array mode. 
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The Status Register bits are output on DQ[0:7], 
whether the device is in the byte-wide (x8) or word- 
wide (x16) mode. In the word-wide mode the upper 
byte, DQ [8:1 5] , is set to 00H during a Read Status 
command. In the byte-wide mode, DQ[8:14] are tri- 
stated and DQ-j 5 /A_-| retains the low order address 
function. 

Important: The contents of the Status Register are 
latched on the falling edge of OEff or CE#, which- 
ever occurs last in the read cycle. This prevents pos- 
sible bus errors which might occur if the contents of 
the Status Register change while reading the Status 
Register. CE# or OE# must be toggled with each 
subsequent status read, or the completion of a Pro- 
gram or Erase operation will not be evident from the 
Status Register. 

When the WSM is active, this register will indicate 
the status of the WSM, and will also hold the bits 
indicating whether or not the WSM was successful in 
performing the desired operation. 

3.3.2.1 Clearing the Status Register 

The WSM sets status bits “3” through “7” to “1,” 
and clears bits “6” and “7” to “0,” but cannot clear 
status bits “3” through “5” to “0.” Bits 3 through 5 
can only be cleared by the controlling CPU through 
the use of the Clear Status Register command. 
These bits can indicate various error conditions. By 
allowing the system software to control the resetting 
of these bits, several operations may be performed 
(such as cumulatively programming several bytes or 
erasing multiple blocks in sequence). The Status 
Register may then be read to determine if an error 
occurred during that programming or erasure series. 
This adds flexibility to the way the device may be 
programmed or erased. To clear the Status Regis- 
ter, the Clear Status Register command is written to 
the CUI. Then, any other command may be issued to 
the CUI. Note, again, that before a read cycle can be 
initiated, a Read Array command must be written to 
the CUI to specify whether the read data is to come 
from the Memory Array, Status Register, or Intelli- 
gent Identifier. 
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Table 9. Status Register Bit Definition 



7 6 5 4 3 2 1 0 


SR.7 = WRITE STATE MACHINE STATUS 
(WSMS) 

1 = Ready 
0 = Busy 

NOTES: 

Write State Machine bit must first be checked to 
determine Byte/Word program or Block Erase 
completion, before the Program or Erase Status bits are 
checked for success. 

SR.6 = ERASE-SUSPEND STATUS (ESS) 
1 = Erase Suspended 
0 = Erase in Progress/Completed 

When Erase Suspend is issued, WSM halts execution 
and sets both WSMS and ESS bits to “1 .” ESS bit 
remains set to “1 ” until an Erase Resume command is 
issued. 

SR. 5 = ERASE STATUS 

1 = Error in Block Erasure 
0 = Successful Block Erase 

When this bit is set to “1,” WSM has applied the 
maximum number of erase pulses to the block and is still 
unable to successfully verify block erasure. 

SR.4 = PROGRAM STATUS 

1 = Error in Byte/Word Program 
0 = Successful Byte/Word Program 

When this bit is set to “1 ,” WSM has attempted but failed 
to program a byte or word. 

SR. 3 = V PP STATUS 

1 = Vpp Low Detect, Operation Abort 
0 = Vpp OK 

The Vpp Status bit, unlike an A/D converter, does not 
provide continuous indication of Vpp level. The WSM 
interrogates Vpp level only after the Byte Write or Erase 
command sequences have been entered, and informs 
the system if Vpp has not been switched on. The Vpp 
Status bit is not guaranteed to report accurate feedback 
between Vpp[_K and Vppn- 

SR.2-SR.0 = RESERVED FOR FUTURE 
ENHANCEMENTS 

These bits are reserved for future use and should be 
masked out when polling the Status Register. 


3.3.3 PROGRAM MODE 

Programming is executed using a two-write se- 
quence. The Program Setup command is written to 
the CUI followed by a second write which specifies 
the address and data to be programmed. The WSM 
will execute a sequence of internally timed events 
to: 

1 . Program the desired bits of the addressed mem- 
ory word or byte. 

2. Verify that the desired bits are sufficiently pro- 
grammed. 

Programming of the memory results in specific bits 
within a byte or word being changed to a “0.” 
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If the user attempts to program ‘T’s, there will be no 
change of the memory cell content and no error oc- 
curs. 

Similar to erasure, the Status Register indicates 
whether programming is complete. While the pro- 
gram sequence is executing, bit 7 of the Status Reg- 
ister is a “0.” The Status Register can be polled by 
toggling either CE# or OE# to determine when the 
program sequence is complete. Only the Read 
Status Register command is valid while program- 
ming is active. 

When programming is complete, the status bits, 
which indicate whether the Program operation was 
successful, should be checked. If the programming 
operation was unsuccessful, bit 4 of the Status 
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Register is set to a “1” to indicate a Program Fail- 
ure. If bit 3 is t set to a “1,” then Vpp was not within 
acceptable limits, and the WSM did not execute the 
programming sequence. If the program operation 
fails, bit 4 of the Status Register will be set within 1 .5 
ms as determined by the timeout of the WSM. 

The Status Register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after programming is completed; however, 
reads from the Memory Array, Status Register, or 
Intelligent Identifier cannot be accomplished until 
the CUI is given the Read Array command. 

3.3.4 ERASE MODE 

Erasure of a single block is initiated by writing the 
Erase Setup and Erase Confirm commands to the 
CUI, along with the addresses identifying the block 
to be erased. These addresses are latched internally 
when the Erase Confirm command is issued. Block 
erasure results in all bits within the block being set to 
“ 1 .” 

The WSM will execute a sequence of internally 
timed events to: 

1. Program all bits within the block to “0.” 

2. Verify that all bits within the block are sufficiently 
programmed to “0.” 

3. Erase all bits within the block. 

4. Verify that all bits within the block are sufficiently 
erased. 

While the erase sequence is executing, bit 7 of the 
Status Register is a “0.” 

When the Status Register indicates that erasure is 
complete, the status bits, which indicate whether the 
Erase operation was successful, should be checked. 
If the Erase operation was unsuccessful, bit 5 of the 
Status Register will be set to a “1,” indicating an 
Erase Failure. If Vpp was not within acceptable limits 
after the Erase Confirm command is issued, the 
WSM will not execute an erase sequence; 
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instead, bit 5 of the Status Register is set to a “1” to 
indicate an Erase Failure, and bit 3 is set to a “1” to 
identify that Vpp supply voltage was not within ac- 
ceptable limits. If the erase operation fails, bit 5 of 
the Status Register will be set within 1 .5ms as deter- 
mined by the timeout of the WSM. 

The Status Register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after erasure is completed; however, reads 
from the Memory Array, Status Register, or Intelli- 
gent Identifier cannot be accomplished until the CUI 
is given the Read Array command. 

3.3.4. 1 Suspending and Resuming Erase 

Since an erase operation requires on the order of 
seconds to complete, an Erase Suspend command 
is provided to allow erase-sequence interruption in 
order to read data from another block of the memo- 
ry. Once the erase sequence is started, writing the 
Erase Suspend command to the CUI requests that 
the WSM pause the erase sequence at a predeter- 
mined point in the erase algorithm. The Status Reg- 
ister must then be read to determine if the erase 
operation has been suspended. 

At this point, a Read Array command can be written 
to the CUI in order to read data from blocks other 
than that which is being suspended. The only other 
valid command at this time is the Erase Resume 
command or Read Status Register command. 

During erase suspend mode, the chip can go into a 
pseudo-standby mode by taking CE# to V|h, which 
reduces active current draw. 

To resume the erase operation, the chip must be 
enabled by taking CE# to Vil, then issuing the 
Erase Resume command. When the Erase Resume 
command is given, the WSM will continue with the 
erase sequence and complete erasing the block. As 
with the end of a standard erase operation, the 
Status Register must be read, cleared, and the next 
instruction issued in order to continue. 
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Full Status 
Check if Desired 


Status Register Data 
Toggle CE# or OE# 
to Update SRD. 


Check SR.7 
1 = WSM Ready 
0 = WSM Busy 


Repeat for subsequent Word/Byte Writes. 

SR Full Status Check can be done after each Word/Byte 
Write, or after a sequence of Word/Byte Writes. 

Write FFH after the last write operation to reset device to 
read array mode. 


Word/Byte Program 
Complete 




Check SR.4 

1 = VPP Byte Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State Machine. 

SR.4 is only clear by the Clear Status Register Command, 
in cases where multiple bytes are programmed before full 
status is checked. 

If error is detected, clear the Status Register before attempting 
retry or other error recovery. 


Figure 9. Automated Word/Byte Programming Flowchart 
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Bus 

Operation 

Command 

Comments 



Data = 20 H 

Addr = Within Block to be Erased 

Write 

Erase 

Confirm 

Data = DOH 

Addr = Within Block to be Erased 



Status Register Data 
Toggle CE# or OE# 
to Update Status Register 

Standby 


Check SR.7 
1 = WSM Ready 
0 = WSM Busy 

Repeat for subsequent block erasures. 

Full Status Check can be done after each block erase, 
or after a sequence of block erasures. 

Write FFH after the last operation to reset device to read 
array mode. 


FULL STATUS CHECK PROCEDURE 



Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4,5 
Both 1 = Command 

Sequence Error 

Standby 


Check SR.5 
1 = Block Erase Error 

SR.3 MUST be cleared, if set during an erase attempt, before further 
attempts are allowed by the Write State Machine. 

SR.5 is only clear by the Clear Status Register Commahd, in 
cases where multiple blocks are erase before full status is checked. 

If error is detected, clear the Status Register before attempting 
retry or other error recovery. 
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Figure 10. Automated Block Erase Flowchart 
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Bus 

Operation 

Command 

Comments 

Write 

Erase 

Suspend 

Data = BOH 
Addr = X 

Read 


Status Register Data 
Toggle CE#orOE# 
to update SRD. 

Addr = X 

* Standby 


Check SR.7 
1 = WSM Ready 
0 = WSM Busy 

Standby 


Check SR.6 
1 = Erase Suspended 
0 = Erase Completed 

Write 

Read Array 

Data = FFH 
Addr = X 

Read 



Write 

Erase Resume 

Data = DOH 
Addr = X 



290530-11 

Figure 11. Erase Suspend/Resume Flowchart 
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3.4 Boot Block Locking 

The boot block family architecture features a hard- 
ware-lockable boot block so that the kernel code for 
the system can be kept secure while the parameter 
and main blocks are programmed and erased inde- 
pendently as necessary. Only the boot block can be 
locked independently from the other blocks. 

3.4.1 V PP = V IL FOR COMPLETE PROTECTION 

For complete write protection of all blocks in the 
flash device, the Vpp programming voltage can be 
held low. When Vpp is below Vppi_K, any program or 
erase operation will result in a error in the Status 
Register. 

3.4.2 WP# = V| L FOR BOOT BLOCK 
LOCKING 

When WP# = V|l, the boot block is locked and any 
program or erase operation to the boot block will 
result in an error in the Status Register. All other 
blocks remain unlocked in this condition and can be 
programmed or erased normally. Note that this fea- 
ture is overridden and the boot block unlocked when 
RP# = V H h- 

3.4.3 RP# = V H h OR WP# = V| H FOR BOOT 
BLOCK UNLOCKING 

Two methods can be used to unlock the boot block: 

1. WP# = V| H 

2. RP# = V HH 

If both or either of these two conditions are met, the 
boot block will be unlocked and can be programmed 
or erased. The truth table, Table 10, clearly defines 
the write protection methods. 


3.5 Power Consumption 

3.5.1 ACTIVE POWER 

With CE# at a logic-low level and RP# at a logic- 
high level, the device is placed in the active mode. 
Refer to the DC Characteristics table for Ice current 
values. 
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Table 10. Write Protection Truth Table for 
SmartVoltage Boot Block Family 


Vpp 

RP# 

WP# 

Write Protection 
Provided 

V| L 

X 

X 

All Blocks Locked 

^ Vpp L K 

V|L 

X 

All Blocks Locked 
(Reset) 

^ Vpp L K 

Vhh 

X 

All Blocks Unlocked 

^ VppLK 

V|H 

VlL 

Boot Block Locked 

^ Vpp L K 

V| H 

V|H 

All Blocks Unlocked 


3.5.2 AUTOMATIC POWER SAVINGS (APS) 

Automatic Power Savings (APS) is a low-power fea- 
ture during active mode of operation. The boot block 
flash memory family incorporates Power Reduction 
Control (PRC) circuitry which allows the device to 
put itself into a low current state when it is not being 
accessed. After data is read from the memory array, 
PRC logic controls the device’s power consumption 
by entering the APS mode where typical Iqc current 
is less than 1 mA. The device stays in this static 
state with outputs valid until a new location is read. 

3.5.3 STANDBY POWER 

With CE# at a logic-high level (Vih), and the CUI in 
read mode, the memory is placed in standby mode. 
The standby operation disables much of the de- 
vice’s circuitry and substantially reduces device 
power consumption. The outputs (DQ[0:15] or 
DQ[0:7]) are placed in a high-impedance state inde- 
pendent of the status of the OE# signal. When CE# 
is at logic-high level during erase or program func- 
tions, the devices will continue to perform the erase 
or program function and consume erase or program 
active power until erase or program is completed. 

3.5.4 DEEP POWER-DOWN MODE 

The SmartVoltage boot block family supports a low 
typical Iqc in deep power-down mode, which turns 
off all circuits to save power. This mode is activated 
by the RP# pin when it is at a logic-low (GND 
±0.2V.) (Note: BYTE# pin must be at CMOS levels 
to meet the Iccd specification.) 
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During read modes, the RP# pin going low dese- 
lects the memory and places the output drivers in a 
high impedance state. Recovery from the deep pow- 
er-down state, requires a minimum access time of 
tpHQV- (See AC Characteristics table) 

During erase or program modes, RP# low will abort 
either erase or program operations, but the memory 
contents are no longer valid as the data has been 
corrupted by the RP# function. As in the read mode 
above, all internal circuitry is turned off to achieve 
the power savings. 

RP# transitions to V|i_, or turning power off to the 
device will clear the Status Register. 


3.6 Power-Up/Down Operation 

The device offers protection against accidental 
block erasure or programming during power tran- 
sitions. Power supply sequencing is not required, 
since the device is indifferent as to which power sup- 
ply, Vpp or Vqc» powers-up first. The CUI is reset to 
the read mode after power-up, but the system must 
drop CE# low or present a new address to ensure 
valid data at the outputs. 

A system designer must guard against spurious 
writes when Vcc voltages are above V|_ko and V PP 
is active. Since both WE# and CE# must be low for 
a command write, driving either signal to Vm will in- 
hibit writes to the device. The CUI architecture pro- 
vides an additional protection since alteration of 
memory contents can only occur after successful 
completion of the two-step command sequences. 
The device is also disabled until RP# is brought to 
Vm, regardless of the state of its control inputs. By 
holding the device in reset (RP# connected to sys- 
tem PowerGood) during power up/down, invalid bus 
conditions during power-up can be masked, provid- 
ing yet another level of memory protection. 

3.6.1 RP# CONNECTED TO SYSTEM RESET 

The use of RP# during system reset is important 
with automated write/erase devices because the 
system expects to read from the flash memory when 
it comes out of reset. If a CPU reset occurs without a 
flash memory reset, proper CPU initialization would 
not occur because the flash memory may be provid- 
ing status information instead of array data. Intel’s 
flash memories allow proper CPU initialization fol- 
lowing a system reset by connecting the RP# pin to 
the same RESET# signal that resets the system 
CPU. 


intel. 

3.6.2 Vcc, Vpp AND RP# TRANSITIONS 

The CUI latches commands as issued by system 
software and is not altered by Vpp or CE# tran- 
sitions or WSM actions. Its default state upon power- 
up, after exit from deep power-down mode, or after 
Vqc transitions above Vlko (Lockout voltage), is 
read array mode. 

After any Word/Byte Write or Block Erase operation 
is complete and even after Vpp transitions down to 
Vpplk. the CUI must be reset to read array mode via 
the Read Array command if accesses to the flash 
memory are desired. 


3.7 Power Supply Decoupling 

Flash memory’s power switching characteristics re- 
quire careful device decoupling methods. System 
designers should consider three supply current is- 
sues: 

1 . Standby current levels (Ices) 

2. Active current levels (Iccr) 

3. Transient peaks produced by falling and rising 
edges of CE#. 

Transient current magnitudes depend on the device 
outputs’ capacitive and inductive loading. Two-line 
control and proper decoupling capacitor selection 
will suppress these transient voltage peaks. Each 
flash device should have a 0.1 jtxF ceramic capacitor 
connected between each Vcc and GND, and be- 
tween its Vpp and GND. These high frequency, in- 
herently low inductance capacitors should be placed 
as close as possible to the package leads. 

3.7.1 Vpp TRACE ON PRINTED CIRCUIT 
BOARDS 

Designing for in-system writes to the flash memory 
requires special consideration of the Vpp power sup- 
ply trace by the printed circuit board designer. The 
Vpp pin supplies the flash memory cells current for 
programming and erasing. One should use similar 
trace widths and layout considerations given to the 
Vcc power supply trace. Adequate Vpp supply 
traces, and decoupling capacitors placed adjacent 
to the component, will decrease spikes and over- 
shoots. 
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NOTE: 

In the following tables, the topmost heading lists the line items to which the specifications in that 
column apply. For space considerations, the line items have been abbreviated as shown in the follow- 
ing table. See Section 7.1 for more information on product naming and line items. 


Abbreviation 

Applicable Product Names 

BV-60 

E28F004BVT60, E28F004BVB60, E28F400BVT60, E28F400BVB60, 
E28F400CVT60, E28F400CVB60, PA28F400BVT60, PA28F400BVB60 

BV-80 

E28F004BVT80, E28F004BVB80, E28F400BVT80, E28F400BVB80, 
E28F400CVT80, E28F400CVB80, PA28F400BVT80, PA28F400BVB80 

BV-120 

E28F004BVT120, E28F004BVB120, PA28F400BVT120, PA28F400BVB120 

TBV-80 

TE28F004BVT80, TE28F004BVB80, TE28F400BVT80, TE28F400BVB80, 
TE28F400CVT80, TE28F400CVB80, TB28F400BVT80, TB28F400BVB80 
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4.0 ABSOLUTE MAXIMUM RATINGS* 

Commercial Operating Temperature 

During Read 0°Cto +70°C 

During Block Erase 

and Word/Byte Write 0°C to + 70°C 

Temperature Bias - 1 0°C to 80°C 

Extended Operating Temperature 

During Read -40°Cto +85°C 

During Block Erase 

and Word/Byte Write -40°C to + 85°C 

Temperature Under Bias -40°Cto +85°C 

Storage Temperature -65°C to + 125°C 

Voltage on Any Pin 

(except Vqc, Vpp, Ag and RP#) 

with Respect to GND -2.0V to + 7.0V( 2 ) 

Voltage on Pin RP# or Pin Ag 
with Respect to GND -2.0V to + 13.5V(2.3) 

Vpp Program Voltage with Respect 
to GND during Block Erase 
and Word/Byte Write -2.0V to + 14 . 0 V( 2 . 3 ) 

Vqc Supply Voltage 

with Respect to GND -2.0V to + 7.0V(2) 

Output Short Circuit Current 100 mA(4) 


NOTICE: This document contains information on 
products in the design phase of development. Do not 
finalize a design with this information. Revised infor- 
mation will be published when the product is avail- 
able. Verify with your local Intel Sales office that you 
have the latest data sheet before finalizing a design. 

* WARNING: Stressing the device beyond the ‘‘Absolute 

Maximum Ratings” may cause permanent damage. 

These are stress ratings only. Operation beyond the 

‘‘Operating Conditions” is not recommended and ex- 
tended exposure beyond the ‘‘Operating Conditions” 

may affect device reliability 

NOTES: 

1 . Operating temperature is for commercial product 
defined by this specification. 

2. Minimum DC voltage is -0.5V on input/output 
pins. During transitions, this level may under- 
shoot to -2.0V for periods <20 ns. Maximum 
DC voltage on input/output pins is Vqc + 0.5V 
which, during transitions, may overshoot to 
Vqc + 2.0V for periods <20 ns. 

3. Maximum DC voltage on Vpp may overshoot to 
+ 14.0V for periods <20 ns. Maximum DC volt- 
age on RP# or Ag may overshoot to 13.5V for 
periods <20 ns. 

4. Output shorted for no more than one second. No 
more than one output shorted at a time. 

5. 10% Vqq specifications reference the 28F400/ 
004BV-60 in their standard test configurations, 
and 28F400/004BV-80/1 20. 

6. 5% Vqc specifications reference the 
28F400/004BV-60 in their high speed test con- 
figuration. 
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5.0 COMMERCIAL OPERATING CONDITIONS 

Table 11. Commercial Temperature and Vqc Operating Conditions 



NOTES: 

1. 10% Vcc specifications apply to the 60, 80 and 120 ns product versions in their standard test configuration. 

2. 5% Vqc specifications apply to the 60 ns versions in their high speed test configuration. 


5.1 Switching Vqo Voltages 


Table 12. Vcc Supply Switching Timing 


Symbol 

Parameter 

Notes 

Min 

Max 

Unit 

Tsvph 

Vqc at 4.5V (minimum) to RP# High 

1 

2 


JLtS 

T 3 VPH 

Vcc at 3-OV (minimum) to RP# High 

1 

2 


JLlS 


NOTE: 

1. The T 5 VPH and/or T 3 VPH times must be strictly followed to guarantee all other read and write specifications. 

2. To switch between 3.3V and 5.0V operation, the system should first transition Vcc from the existing voltage to GND, and 
then to the new voltage. The Vcc supply voltage should not be switched when the WSM is busy. 



Figure 12. Vcc Supply Switching Waveform 



4-41 





4-MBIT SmartVoltage BOOT BLOCK FAMILY 


5.2 DC Characteristics 


Table 13. DC Characteristics (Commercial) 



BV-60 

BV-80 

BV-120 

Vcc = 3.3 V ± 0.3 V 
Min Typ Max 


BV-120 


V C c = 5V± 10% 


•lo 

Output Leakage 
Current 

1 

•ccs 

Vqc Standby 
Current 

1,3 



V C c Read 
Current for 
Word or Byte 



Test Conditions 


juA V CC = V CC MAX 
V|jv| = Vcc ° r GND 

Vcc = Vcc MAX 
V|N = Vcc or GND 

Vcc = Vcc MAX 
CE# = RP# = 

BYTE# = WP# = V| H 

Vcc = V C C max 
CE# = RP# = 

V CC ± 0.2V 


Jn-A V CC = V CC MAX 
V|N = Vcc or GND 
RP# = GND + 0.2V 

mA CMOS INPUTS 

Vcc = v C c max 

CE# = GND 
OE# = V CC 
f = 10 MHz (5V), 

5 MHz (3.3V) 

•out = 0 mA 
Inputs = GND ± 0.2V 
or Vcc ± 0.2V 

mA TTL INPUTS 

Vcc = Vcc MAX 
CE# = V| L 
OE# = V| H 
f = 10 MHz (5V), 

5 MHz (3.3V) 
l0UT = 0 m A 
Inputs = V|[_ or Vih 


mA Word Write in Progress 
Vpp = Vpphi (at 5V) 
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Symbol 

Parameter 

Notes 

ICCE 

Vcc Erase 
Current 

1.4 

>CCES 

V C c Er ase 

Suspend 

Current 

1,2 

ipps 

Vpp Standby 
Current 

1 

IPPD 

Vpp Deep 

Power-down 

Current 

1 

IPPR 

Vpp Read 
Current 

1 

IppW 

Vpp 

Word/Byte 
Write Current 

1,4 

IPPE 

Vpp Erase 
Current 

1,4 

IPPES 

Vpp Erase 

Suspend 

Current 

1 

Irp# 

RP# Boot 
Block Unlock 
Current 

1,4 

l|D 

Ag Intelligent 

Identifier 

Current 

1,4 


Table 13. DC Characteristics (Commercial) (Continued) 


BV-60 

BV-80 

BV-120 


BV-60 

BV-80 

BV-120 

Vcc = 

= 3.3V ± 0.3V 

Min 

Typ 

Max 


13 

30 


10 

25 





Units 

Test Conditions 

mA 

Block Erase in Progress 
Vpp = VppHi (at 5V) 

mA 

Block Erase in Progress 
Vpp = V P pH 2 (at 12V) 

mA 

CE# = V| H 
Block Erase Suspend 




juA 

Vpp - VppH 
Block Erase Suspend 
in Progress 

/xA 

RP# = V H h 

jllA 

> 

CD 

II 

< 

u 
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Table 13. DC Characteristics (Commercial) (Continued) 


Symbol 

Parameter 

Notes 

BV-60 

BV-80 

BV-120 

BV-60 

BV-80 

BV-120 

Units 

Test Conditions 

V C c = 3.3V ± 0.3V 

V C c = 5V± 10% 

Min 

Typ 

Max 

Min 

Typ 

Max 

V|D 

Ag Intelligent 
Identifier Voltage 


11.4 


12.6 

11.4 


12.6 

V 


V|L 

Input Low Voltage 


-0.5 


0.8 

-0.5 


0.8 

V 


V|H 

Input High 
Voltage 


2.0 


Vcc 
+ 0.5V 

2.0 


Vcc 
+ 0.5V 

V 


V 0 L 

Output Low 
Voltage 




0.45 




V 

Vcc = Vcc MIN 
Iql = 5.8 mA 

VOHI 

Output High 
Voltage (TTL) 


H 

■ 


H 


■ 

V 

Vcc = Vcc min 

Iqh = “2.5 mA 

V OH2 

Output High 

Voltage 

(CMOS) 



■ 


0.85V CC 


■ 




■ 



Vcc 

-0.4V 


■ 

Vcc = Vcc min 

Ioh = “100 jmA 

VpPLK 

Vpp Lock-Out 
Voltage 

3 


■ 

1.5 

0.0 


1.5 

V 

Complete Write 
Protection 

VppHI 

Vpp (Program/ 
Erase Operations) 

■ 

4.5 


5.5 

4.5 


5.5 

V 




■ 



12.6 

11.4 


12.6 

V 



Vcc Erase/Write 
Lock Voltage 

8 



■ 

2.0 


■ 

V 




■ 

11.4 


12.6 

11.4 


12.6 

V 

Boot Block 
Write/ Erase 


NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, T = 25°C. These currents are valid for all 
product versions (packages and speeds). 

2. Icces is specified with the device deselected. If the device is read while in erase suspend mode, current draw is the sum 
of Icces and Iccr- 

3. Block erases and word/byte writes are inhibited when Vpp = VppL«, and not guaranteed in the range between Vppm 
and Vp PLK . 

4. Sampled, not 100% tested. 

5. Automatic Power Savings (APS) reduces Iccr to less than 1 mA typical, in static operation. 

6. CMOS Inputs are either Vcc ± 0.2V or GND ± 0.2V. TTL Inputs are either V iL or V| H . 

7. For the 28F004, address pin Aio follows the Cout capacitance numbers. 

8. For all BV parts, Vlko = 2.0V for both 3.3V and 5V operations. 
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2.0 k ” 35 \ yfZo 

TEST POINTS 

0.8 t t \ 0 8 


Figure 15. 5V Inputs and Measurement Points 


V C c 



NOTE: 

C[_ = 100 pF, includes Jig Capacitance. 


Figure 16. 5V Standard Test Configuration 


V CC 



NOTE: 

Cl = 30 pF, includes Jig Capacitance. 



Figure 17. 5V High Speed Test Configuration 
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5.3 AC Characteristics 


Table 14. AC Characteristics: Read Only Operations (Commercial) 





BV-60 




v C c 

5V±5% 

5V± 10% 

3.3 ± 0.3 V 




Load 

30 pF 

100 pF 

50 pF 


Symbol 

Parameter 


Min 

Max 

Min 

Max 

Min 

Max 

Units 

*AVAV 

Read Cycle Time 


60 


70 


110 


ns 

*AVQV 




60 


70 


110 

ns 

tELQV 

CE# to Output Delay 

2 


60 


70 


110 

ns 

tpHQV 

RP# to Output Delay 



450 


450 


800 

ns 

tGLQV 

OE# to Output Delay 

2 


30 


35 


65 

ns 

*ELQX 

CE# to Output in Low Z 

3 

0 


0 


0 


ns ! 



3 


20 


25 


55 

ns 

<GLQX 

OE# to Output in Low Z 

3 

0 


0 


0 


ns 

tGHQZ 

OE# to Output in High Z 

3 


20 


25 


45 

ns 

tQH 

Output Hold from 
Address, CE#, or OE# 
change, whichever 
occurs first 

3 

0 


0 


0 




CE# Low to BYTE# 
High or Low 

B 


5 


5 


7 

ns 



B 


5 


5 


7 

ns 

*FLQV 

tFHQV 


B 


60 


70 


110 

ns 

tFLQZ 




20 


25 


45 

ns 
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5.3 AC Characteristics 


Table 14. AC Characteristics: Read Only Operations (Commercial) (Continued) 



NOTES: 

1. See AC Input/Output Reference Waveform for timing measurements. 

2. OE# may be delayed up to tcE - toE after the falling edge of CE# without impact on tcE- 

3. Sampled, but not 100% tested. 

4. tFLQV. BYTE# switching low to valid output delay will be equal to tAVQV. measured from the time DQ-| 5 /A_i becomes 
valid. 

5. See 5V High Speed Test Configuration. 

6. See 5V Standard Test Configuration. 

7. See 3.3V Test Configuration. 
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Figure 18. AC Waveforms for Read Operations 



Figure 19. BYTE# Timing Diagram for Both Read and Write Operations with Vcc at 5.0V 
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Table 15. AC Characteristics: WE#— Controlled Write Operations^) (Commercial) 




Vcc 

Load 

Symbol 

Parameter 

Note 

UVAV 

Write Cycle Time 


tpHWL 

RP# Setup to WE# 
Going Low 



Boot Block Lock Setup 
to WE# Going High 


Vpp Setup to WE# 

Going High 

Address Setup to WE# 
Going High 

Data Setup to WE# 

Going High 

WE# Pulse Width 

Data Hold Time from 
WE# High 

Address Hold Time from 
WE# High 


CE# Hold Time from 
WE# High 


tWHQVI 

Duration of Word /Byte 
Programming Operation 

tWHQV2 

Duration of Erase 
Operation (Boot) 

tWHQV3 

Duration of Erase 
Operation (Parameter) 

tWHQV4 

Duration of Erase 
Operation (Main) 



tpHBR Boot-Block Relock 
Delay 
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Table 15. AC Characteristics: WE# — Controlled Write OperationsO) (Commercial) (Continued) 



Vcc 

Load 

Parameter 

Note 

Write Cycle Time 


RP# Setup to 
WE# Going Low 


CE# Setup to 
WE# Going Low 


Boot Block Lock 
Setup to WE# 
Going High 

6,8 

Vpp Setup to WE# 
Going High 

5,8 


BV-80 

BV-120 

5V± 10% 

3.3 ± 0.3 V 

5V± 10% 3.3 ± 0.3V 

100 pF 

50 pF 

100 pF 50 pF 


l AVWH Address Setup to 
WE# Going High 


tWLWH 

WE# Pulse Width 

tWHDX 

Data Hold Time 
from WE# High 
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NOTES: 

1 . Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
characteristics during read mode. 

2. The on-chip WSM completely automates Program/ Erase operations; Program/ Erase algorithms are now controlled inter- 
nally which includes verify and margining operations. 

3. Refer to command definition table for valid Ain. 

4. Refer to command definition table for valid Din. 

5. Program/Erase durations are measured to valid SRD data (successful operation, SR.7= 1). 

6. For boot block program/erase, RP# should be held at Vhh or WP# should be held at VIH until operation completes 
successfully. 

7. Time tp^BR is required for successful relocking of the boot block. 

8. Sampled, but not 100% tested. 

9. V PP at 5.0V. 

10. V PP at 12.0V. 

11. See 5V High Speed Test Configuration. 

12. See 5V Standard Test Configuration. 

13. See 3.3V Test Configuration. 


ADDRESSES 


V— jC^ 

V„, *avav ■"•H’UvwrfH 


wwmmMmmm 


CE# (E) 


vlA 

\i 1 FI Wl ^ 


OE# (G) 


V l ELWL 
V IH 


WE# (W) 


» r 

V,H 

1/3 


DATA (D/Q) HI 9 hZ 


6.5V Vhh 
V... 

RP# (P) 


A 


fc: 


WLWH 
DVWH 

^whd: 


d in 


IAJ 




l WHQV1 ,2,3,4 


J 


WP# 


A 




Vop U 2 


v pp< v > v„ 


mmm 


nsns 




\s 



Valid 

SRD. 


sk*> 


*QVPH 



NOTES: 

1. Vcc Power-Up and Standby. 

2. Write program or Erase Setup Command. 

3. Write Valid Address and Data (Program) or Erase Confirm Command. 

4. Automated Program or Erase Delay. 

5. Read Status Register Data. 

6. Write Read Array Command. 


Figure 20. AC Waveforms for Write and Erase Operations (WE# -Controlled Writes) 
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Table 16. AC Characteristics: CE# -Controlled Write Operations^* 13 ) (Commercial) 


BV-60 



Vcc 

5V±5% 

Load 

30 pF 


5V± 10% 

100 pF 

Min 

Max 

70 


450 


0 




Max | Units 
ns 


tVPEH 

Vpp Setup to CE# 
Going High 

*AVEH 

Address Setup to CE# 
Going High 

*DVEH 

Data Setup to CE# 
Going High 

^ELEH 

CE# Pulse Width 

fEHDX 

Data Hold Time from 
CE# High 

*EHAX 

Address Hold Time from 
CE# High 

tEHWH 

WE # Hold Time from 
CE# High 


Itj Eliiliffi 


l EHQVi Duration of Word/Byte 2,5 

Programming Operation 

l EHQV2 Duration of Erase 2,5,6 

Operation (Boot) 


tEHQV3 

Duration of Erase 
Operation (Parameter) 

tEHQV4 

Duration of Erase 
Operation (Main) 

tQWL 

Vpp Hold from Valid 
SRD 


RP# Vhh Hold from 
Valid SRD 


Boot-Block Relock 
Delay 


2,5,6 0.3 


0.3 
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Table 16 . AC Characteristics: CE#-Controlled Write OperationsC 1 * 13 ) (Commercial) (Continued) 




WE# Setup to CE# 
Going Low 

Boot Block Lock 
Setup to CE# 

Going High 



*AVEH 

Address Setup to 
CE# Going High 

3 ' 

tDVEH 

Data Setup to CE# 
Going High 

4 

*ELEH 

CE# Pulse Width 


*EHDX 

Data Hold Time 
from CE# High 

4 

*EHAX 

Address Hold Time 
from CE# High 


tEHWH 

WE # Hold Time 
fromCE# High 


*EHEL 

CE# Pulse Width 
High 


tEHQVI 

Duration of Word/ 
Byte Programming 
Operation 

2,5 

tEHQV2 

Duration of Erase 
Operation (Boot) 

2,5,6 

*EHQV3 

Duration of Erase 

Operation 

(Parameter) 

2,5 

*EHQV4 

Duration of Erase 
Operation (Main) 

2,5 

l QWL 

Vpp Hold from Valid 
SRD 

5,8 

tQVPH 

RP# V HH Hold from 
Valid SRD 

6,8 

tpHBR 

Boot-Block Relock 
Delay 

7,8 


100 


200 

100 


200 

50 


120 

50 




BV-120 

5V± 10% 

3.3 + 0.3 V 

100 pF 

50 pF 


Min Max 




NOTES: 

See WE# -Controlled Write Operations for notes 1 through 12. 

13. Chip-Enabie controlled writes: Write operations are driven by the valid combination of CE# and WE# in systems where 
CE# defines the write pulse-width (within a longer WE# timing waveform), all set-up, hold and inactive WE# times 
should be measured relative to the CE# waveform. 
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290530-19 

NOTES: 

1. Vcc Power-Up and Standby. 

2. Write program or Erase Setup Command. 

3. Write Valid Address and Data (Program) or Erase Confirm Command. 

4. Automated Program or Erase Delay. 

5. Read Status Register Data. 

6. Write Read Array Command. 


Figure 21. Alternate AC Waveforms for Write and Erase Operations (CE#— Controlled Writes) 
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Table 17. Erase and Program Timings (Commercial Ta = 0°C to + 70°C) 


Parameter 

V PP = 5V ±10% 

V PP = 12V ±5% 

Units 



V C c = 
3.3 ± 0.3V 

Vcc = 
5V ± 10% 

Typ 

Typ 

Typ 

Typ 

Boot/ Parameter Block Erase Time 

0.84 

0.8 

0.44 

0.34 

s 

Main Block Erase Time 

2.4 

1.9 

1.3 

1.1 

s 

Main Block Write Time (Byte Mode) 

1.7 

1.8 

1.6 

1.2 

s 

Main Block Write Time (Word Mode) 

1.1 

0.9 

0.8 

0.6 

s 

Byte Write Time 

10 

10 

8 

8 

fXS 

Word Write Time 

13 

13 

8 

8 

JU-S 


NOTES: 

1. All numbers are sampled, not 100% tested. 

2. Contact your Intel representative for information regarding maximum Byte/Word Write specifications. 
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6.0 EXTENDED OPERATING CONDITIONS 


Table 18. Extended Temperature and Vcc Operating Conditions 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 

Ta 

Operating Temperature 


-40 

85 

°C 

Vcc 

3.3V Vcc Supply Voltage ( ± 0.3V) 

1 

3.0 

3.6 


5V Vcc Supply Voltage (1 0%) 

2 

4.50 




NOTES: 

1. AC specifications are valid at both voltage ranges. See DC Characteristics tables for voltage range-specific specifications. 

2 . 10 % Vqc specifications apply to 1 10 ns and 80 ns versions in their standard test configuration. 



6.1 Applying Vcc Voltages 

Table 1 9. Vcc Supply Switching Timing 

| Symbol Parameter Notes Min | Max [ Units | 

Vcc at 4.5V (minimum) to RP# High 1 

Vcc at 3.0V (minimum) to RP# High 1 


NOTES: 

1. The T 5 VPH and/or T 3 VPH times must be strictly followed to guarantee all other read and write specifications. 

2. To switch between 3.3V and 5.0V operation, the system should first transition Vcc from the existing voltage to GND, and 
then to the new voltage. The Vcc supply voltage should not be switched when the WSM is busy. 




Figure 22. Vcc Supply Switching Waveform 
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6.2 DC Characteristics 


Table 20. DC Characteristics: Extended Temperature Operation 


Symbol 

Parameter 

Notes 

TBV-80 

TBV-80 

Unit 

Test Conditions 

Vcc - 

= 3.3 ± 0.3V 

Vcc - 

= 5V ± 

10% 





EM 


Min 

Typ 

Max 



IlL 

Input Load 
Current 

1 

■ 


± 1.0 



± 1.0 

jllA 

Vcc = Vcc MAX 
V|N = Vcc ° r GND 

•lo 

Output Leakage 
Current 

1 



± 10 

■ 


± 10 

|UL A 

Vcc = Vcc MAX 
V|N = Vcc 
or GND 

•ccs 

Vcc Standby 
Current 

1,3 


0.4 

1.5 


0.8 

2.5 

mA 

v C c = v cc max 

CE# = RP# = 
BYTE# = V, H 





60 

110 


70 

150 

juA 

Vcc = Vcc MAX 
CE# = RP# = WP# 
= V C c ± 0.2V 

IcCD 

V C c Deep 

Power-Down 

Current 

1 


0.2 

8 


0.2 

8 

/xA 

v C c = v cc max 

Vin = Vcc °r GND 
RP# = GND ± 0.2V 

ICCR 

V C c Read 
Current for 
Word or Byte 

1,5,6 


15 

30 


50 

65 

mA 

CMOS INPUTS 

Vcc = Vcc MAX 
CE = GND, 

OE# = Vcc 
f = 10 MHz (5V), 

5 MHz (3.3V) 

Iout = 0 mA 
Inputs = GND ± 0.2V 
or Vcc — 0.2V 





15 

30 


55 


mA 

TTL INPUTS 

Vcc = Vcc MAX 
CE# = V| L 
OE# = V| H 
f = 10 MHz (5V), 

5 MHz (3.3V) 
Iout = 0 mA 
Inputs = V|[_ or Vih 

Iccw 

Vcc W^e 
Current for 
Word or Byte 

1,4 


13 

30 


30 

50 

mA 

Word/ Byte Program 

in Progress 

Vpp = VppHi (at 5V) 


j 



10 

25 


30 

45 

mA 

Word/Byte Program 

in Progress 

Vpp = V P pH 2 (at 12V) 


|piF3®B)y©T (PE1EW0EW 


4-57 















4-MBIT SmartVoltage BOOT BLOCK FAMILY 


inlel 


Table 20. DC Characteristics: Extended Temperature Operation (Continued) 


TBV-80 


TBV-80 


Symbol 

•CCE 



Units 

Test Conditions 

mA 

Block Erase in Progress 
Vpp = Vpphi (at 5V) 



Vpp Deep 1 

Power-down 
Current 

IppR Vpp Read 1 

Current 

Ippw . Vpp Write 1,4 

Current for 
Word/ Byte 


±5 ±15 




IppE Vpp Erase 1 ,4 
Current 



mA 

CE# = V| H 
Block Erase Suspend 
Vpp = Vpphi (at 5V) 

fiA 

Vpp ^ Vcc 

/x A 

RP# = GND ± 0.2V 

fiA 

Vpp > Vcc 

mA 

Vpp = VppH 
Word Write in Progress 
Vpp = Vpphi (at5V) 

mA 

Vpp = Vpph 
W ord Write in Progress 
Vpp = VppH2(at12V) 


Vpp = Vpph 

Block Erase in Progress 

Vpp = Vpphi (at 5V) 

mA 

Vpp = Vpph 

Block Erase in Progress 

Vpp = VppH 2 (at 12 V) 

jllA 

Vpp = Vpph 


Block Erase Suspend 
in Progress 
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Table 20. DC Characteristics: Extended Temperature Operation (Continued) 


Symbol 

Parameter 

Notes 

TBV-80 

TBV-80 

Units 

Test Conditions 

V C c = 3.3 ± 0.3V 






EH 


•rp# 

RP# Boot 
Block Unlock 
Current 

1,4 



500 



500 

/xA 

RP# = v hh 

Vpp = 12V 

•id 

Ag Intelligent 

Identifier 

Current 

1,4 



500 



500 

jllA 

A 9 = V| D 

V|D 

Ag Intelligent 

Identifier 

Voltage 


11.4 


12.6 

11.4 


12.6 

V 


V|L 

Input Low 
Voltage 


-0.5 


0.8 

-0.5 


0.8 



V|H 

Input High 
Voltage 


2.0 


Vec 

+ 0.5V 

2.0 


V CC 

±0.5V 

V 


V 0 L 

Output Low 
Voltage 




0.45 



0.45 

V 

Vcc = Vcc MIN 
Iql = 5.8 mA (5V) 
2 mA (3.3V) 
Vpp = 12V 

VoHI 

Output High 
Voltage (TTL) 

■ 

2.4 



2.4 



V 

Vcc = Vcc MIN 
Ioh = “2.5 mA 

VOH2 

Output High 

Voltage 

(CMOS) 

■ 


■ 


x o 
d 



V 

Vcc = v cc min 

Ioh = “2.5 mA 

■ 


■ 

■ 

Vcc 

-0.4V 



Vcc = Vcc min 
Ioh = -100 julA 

VpPLK 

Vpp Lock- 
Out Voltage 

3 

0.0 


1.5 

0.0 


1.5 

V 

Complete Write 
Protection 

VppHI 

Vpp (Program/ 
Erase Operations) 

■ 

4.5 

■ 


4.5 


5.5 

V 

Vpp at 5V 

VppH2 

Vpp (Program/ 
Erase Operations) 

■ 

11.4 

■ 


11.4 


12.6 

V 

Vpp at 12V 
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Table 20. DC Characteristics: Extended Temperature Operation (Continued) 


Symbol 

Parameter 

Notes 

TBV-80 

TBV-80 

Units 

Test Conditions 

Vcc = 3.3 ± 0.3V 

V C c = 5V ± 10% 

Min 

Efl 


Min 



V|_KO 

Vcc 

Erase/Write 
Lock Voltage 

8 

2.0 

i 


2.0 

1 

1 


Vpp -12V 

Vhh 

RP# Unlock 
Voltage 


11.4 

■ 


11.4 


12.6 

V 

Boot Block Write/Erase 
Vp P = 12V 


NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at V<x = 5.0V, T = 25°C. These currents are valid for all 
product versions (packages and speeds). 

2. Icces is specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum 
of Icces and Iccr- 

3. Block erases and word/byte writes are inhibited when Vpp = Vppi_K» and not guaranteed in the range between Vppm 
and VppLK- 

4. Sampled, not 100% tested. 

5. Automatic Power Savings (APS) reduces Iccr to less than 1 mA typical, in static operation. 

6. CMOS Inputs are either Vcc ± 0.2V or GND ± 0.2V. TTL Inputs are either V||_ or V|p. 

7. For the 28F004 address pin Aio follows the Cout capacitance numbers. 

8. For all BV parts, V|_ko = 2.0V for both 3.3V and 5.0V operations. 
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Figure 23. 3.3V Inputs and Measurement Points 



Figure 25. 5V Inputs and Measurement Points 



I 



NOTE: 

C|_ = 50 pF, includes Jig Capacitance. 

Figure 24. 3.3V Standard Test Configuration 


NOTE: 

C|_ = 100 pF, includes Jig Capacitance. 

Figure 26. 5V Standard Test Configuration 
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6.3 AC Characteristics 


Table 21. AC Characteristics: Read Only Operations^) (Extended Temperature) 


Symbol 

Parameter 

Notes 

TBV-80 

TBV-80 

Units 

V cc = 3.3 ± 0.3V<6) 


Min 

Max 



UVAV 

Read Cycle Time 


110 


80 


ns 

*AVQV 

Address to Output Delay 



110 


80 

ns 

*ELQV 

CE# to Output Delay 

2 


110 


80 

ns 

tpHQV 

RP# to Output Delay 



800 


450 

ns 

*GLQV 

OE# to Output Delay 

2 


65 


40 

ns 

tELQX 

CE# to Output in Low Z 

3 

0 


0 


ns 

tEHQZ 

CE# to Output in High Z 

3 


55 


30 

ns 

tGLQX 

OE# to Output in Low Z 

3 

0 


0 


ns 

tGHQZ 

OE# to Output in High Z 

3 


45 


30 

ns 

tQH 

Output Hold from Address 
CE#, orOE# change 1 

whichever occurs first 

3 

0 


0 


ns 

■ 

C91 

CE# Low to BYTE# High or 
Low 

3 


7 


5 

ns 

*AVFL 

Address to BYTE# High or Low 

3 


7 


5 

ns 

JQ 

C9! 

BYTE# to Output Delay 

3,4 




80 

ns 

*FLQZ 

BYTE# Low to Output in High Z 

3 


45 



ns 


NOTES: 

1. See AC Input/Output Reference Waveform for timing measurements. 

2. OE# may be delayed up to tcE ~ toE after the falling edge of CE# without impact on tcE- 

3. Sampled, but not 100% tested. 

4. tpLQV. BYTE# switching low to valid output delay will be equal to t/\vQV> measured from the time DQi 5 /A_i becomes 
valid. 

5. 5V Standard Test Configuration. (Figure 26) 

6. See 3.3V Standard Test Configuration. (Figure 24) 
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Table 22. AC Characteristics: WE# -Controlled Write Operations^) (Extended Temperature) 



Parameter 

Notes 

TBV-80 

TBV-80 

Units 

Vcc = 3.3 ± 0.3V01) 

Vcc = 5V ± 10%(12) 

Min 

Max 

Min 

Max 


Write Cycle Time 


110 


80 



tpHWL 

RP# High Recovery 
to WE# Going Low 


800 


450 


H 

tELWL 

CE# Setup to WE# Going Low 


0 


0 



tpHHWH 

Boot Block Lock Setup to WE# 
Going High 

6,8 



100 


ns 

tVPWH 

Vpp Setup to WE# Going High 

5,8 



100 


ns 

tAVWH 

Address Setup to WE# Going 
High 

3 



60 


ns 

tDVWH 

Data Setup to WE# Going High 

4 

90 


60 


ns 

tWLWH 

WE# Pulse Width 


90 


60 


ns 

tWHDX 

Data Hold Time from WE# High 

4 

0 


0 


ns 




10 


10 


ns 




0 


0 


ns 

tWHWL 

WE# Pulse Width High 


20 


20 


ns 

tWHQVI 

Duration of Word/ Byte Write 
Operation 

2,5 

6 


7 


JUS 

*WHQV2 

Duration of Erase Operation (Boot) 

2,5,6 

0.3 


0.4 


s 

tWHQV3 

Duration of Erase Operation 
(Parameter) 




0.4 


s 




0.6 


0.7 


s 

tQWL 



0 


0 


ns 

BIBB 

RP# V H h Hold from Valid SRD 


0 


0 


ns 

EBIBB 




200 



ns 


NOTES: 

1 . Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
Characteristics during read mode. 

2. The on-chip WSM completely automates program/erase operations; program/erase algorithms are now controlled inter- 
nally which includes verify and margining operations. 

3. Refer to command definition table for valid Ain- 

4. Refer to command definition table for valid Din- 

5. Program/Erase durations are measured to valid SRD data (successful operation, SR.7 =1) 

6. For boot block program/erase, RP# should be held at Vhh or WP# should be held at Vm until operation completes 
successfully. 

7. Time tpHBR is required for successful relocking of the boot block. 

8. Sampled, but not 100% tested. 

9. V PP at 5.0V. 

10. V PP at 12.0V. 

11. See 3.3V Standard Test Configuration. 

12. See 5V Standard Test Configuration. 
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Table 23. AC Characteristics: CE# -Controlled Write Operations^. 13 ) 


TBV-80 


TBV-80 


Symbol Parameter 

Uvav Write Cycle Time 


tpHEL RP# High Recovery to 
CE# Going Low 


twLEL WE# Setup to CE# Going 

Low 

tpHHEH Boot Block Lock Setup to 

CE# Going High 

tvPEH Vpp Setup to CE# Going 

High 

tAVEH Address Setup to CE # 

Going High 


tDVEH Data Setup to CE# Going 
High 


tELEH I CE# Pulse Width 
tEHDX 


Notes | V C c = 3.3 ± 0.3V0 1 ) | V C c = 5V ± 10%02) 



tEHWH 

WE# Hold Time from CE# 
High 

*EHEL 

CE# Pulse Width High 

tEHQVI 

Duration of Word/Byte 
Write Operation 

tEHQV2 

Duration of Erase Operation 
(Boot) 

tEHQV3 

Duration of Erase Operation 
(Parameter) 


tQWL 

V PP Hold from Valid SRD 

tQVPH 

RP# V H h Hold from Valid 
SRD 

tPHBR 

Boot-Block Relock Delay 



NOTES: 

See WE# Controlled Write Operations for notes 1 through 12. 

13. Chip-Enable controlled writes: Write operations are driven by the valid combination of CE# and WE# in systems where 
CE# defines the write pulse-width (within a longer WE# timing waveform), all set-up, hold and inactive WE# times 
should be measured relative to the CE# waveform. 
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iny 


Table 24. Extended Temperature Operations— Erase and Program Timings 


Parameter 

Vpp=5V± 10% 

V PP = 12V ±5% 

Units 

V CC = 
3.3 ± 0.3V 

V CC = 
5V± 10% 

V CC = 
3.3 ± 0.3V 

Vcc- 
5 V ± 10% 

Typ 

Typ 

Typ 

Typ 

Boot/ Parameter Block 
Erase Time 

0.84 

0.8 

0.44 

0.34 

s 

Main Block Erase Time 

2.4 

1.9 

1.3 

1.1 

s 

Main Block Write Time 
(Byte Mode) 

1.7 

1.4 

1.6 

1.2 

s 

Main Block Write Time 
(Word Mode) 

1.1 

0.9 

0.8 

0.6 

s 

Byte Write Time 

10 

10 

8 

8 

JUS 

Word Write Time 

13 

13 

8 

8 

JUS 


NOTES: 

1. All numbers are sampled, not 100% tested. 

2. Contact your Intel representative for information regarding maximum Byte/Word Write specifications. 
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7.0 ADDITIONAL INFORMATION 



7.1 Ordering Information 


Operating Temperature 

T = Extended Temp 
Blank = Commercial Temp 

Package 
E = TSOP 

PA = 44-Lead PSOP 

TB = Ext. Temp 44-Lead PSOP 

Product line designator 
for all Intel Flash products 


Density / Organization 

00X = x8-only (X = 1 , 2, 4, 8) 

X00 = x8/x1 6 Selectable (X = 2, 4, 8) 



Access Speed 

(ns, V cc = 5V) 

T = Top Boot 
B = Bottom Boot 


Voltage Options (V PP / V cc ) 
V = (5 or 12/3.3 or 5) 


Architecture 
B = Boot Block 
C = Compact 48-Lead TSOP 
Boot Block 


VALID COMBINATIONS: 

40-Lead TSOP 
Commercial E28F004BVT60 
E28F004BVB60 
E28F004BVT80 
E28F004BVB80 
E28F004BVT 1 20 
E28F004BVB120 
Extended TE28F004BVT80 
TE28F004BVB80 


44-Lead PSOP 

PA28F400BVT60 
PA28F400BVB60 
PA28F400BVT80 
PA28F400BVB80 
PA28F400BVT 1 20 
PA28F400BVB1 20 
TB28F400BVT80 
TB28F400BVB80 


48-Lead TSOP 

E28F400CVT60 

E28F400CVB60 

E28F400CVT80 

E28F400CVB80 


56-Lead TSOP 

E28F400BVT60 

E28F400BVB60 

E28F400BVT80 

E28F400BVB80 


TE28F400CVT80 TE28F400BVT80 

TE28F400CVB80 TE28F400BVB80 


Table 25. Summary of Line Items 


40- 44- 48- 56- 

Name V C c V PP Lead Lead Lead Lead 0°- + 70°C -40°- + 85°C 

TSOP PSOP TSOP TSOP 
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7.2 References 


Order Number 

Document 

292130 

AB-57 “Boot Block Architecture for Safe Firmware Updates” 

292154 

AB-60 “2/4/8-Mbit SmartVoltage Boot Block Flash Memory Family” 

292098 

AP-363 “Extended Flash BIOS Concepts for Portable Computers” 

292148 

AP-604 “Using Intel’s Boot Block Flash Memory Parameter Blocks to Replace 
EEPROM” 

290448 

28F002/200BX-T/B 2-Mbit Boot Block Flash Memory Datasheet 

290449 

28F002/200BL-T/B 2-Mbit Low Power Boot Block Flash Memory Datasheet 

290450 

28F004/400BL-T/B 4-Mbit Low Power Boot Block Flash Memory Datasheet 

290451 

28F004/400BX-T/B 4-Mbit Boot Block Flash Memory Datasheet 

290531 

2-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 

290539 

8-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 



7.3 Revision History 


-001 


Initial release of datasheet 
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2-MBIT (128K x 16, 256K x 8) 

SmartVoltage BOOT BLOCK FLASH MEMORY FAMILY 

28F200BV-T/B, 28F002BV-T/B, 28F200CV-T/B 



■ Intel SmartVoltage Technology 

— 5V or 12V Program/Erase 

— 3.3V or 5V Read Operation 

— 60% Faster Typical Programming at 
12V V PP 

■ Very High Performance Read 

— 5V: 60/80/120 ns Max. Access Time, 
30/40 ns Max. Output Enable 

— 3V: 110/150 /180 ns Max. Access 
Time 65/90 ns Max. Output Enable 

■ Low Power Consumption 

— Maximum 60 mA Read Current at 5V 
— Maximum 30 mA Read Current at 3V 

■ x8/x16-Selectable Input/Output Bus 

— 28F200 for High Performance 16- or 
32-bit CPUs 

■ x8-Only Input/Output Architecture 

— 28F002 for Space-Constrained 8-bit 
Applications 

■ Optimized Array Blocking Architecture 
— One 16-KB Protected Boot Block 
— Two 8-KB Parameter Blocks 

— One 96-KB Main Block 
— One 128-KB Main Blocks 
— Top or Bottom Boot Locations 

■ Absolute Hardware-Protection for Boot 
Block 

■ Software EEPROM Emulation with 
Parameter Blocks 

■ Extended Temperature Operation 
40° C to +85°C 


■ Extended Cycling Capability 
— 100,000 Block Erase Cycles 

(Commercial Temperature) 

— 10,000 Block Erase Cycles 
(Extended Temperature) 

■ Automated Word/Byte Write and Block 
Erase 

— Industry Standard Command User 
Interface 

— Status Registers 
— Erase Suspend Capability 

■ SRAM-Compatible Write Interface 

■ Automatic Power Savings Feature 

— 1 mA Typical Ice Active Current in 
Static Operation 

■ Reset/Deep Power-Down Input 

— 0.2 juA Ice Typical 

— Provides Reset for Boot Operations 

■ Hardware Data Protection Feature 

— Erase/Write Lockout during Power 
Transitions 

■ Industry-Standard Surface Mount 
Packaging 

— 40-Lead TSOP 
-44-Lead PSOP: JEDEC ROM 

Compatible 

— 48-Lead TSOP 
-56-Lead TSOP 

■ Footprint Upgradable to 4 or 8 Mbit 

■ ETOXtm iv Flash Technology 
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1.0 PRODUCT FAMILY OVERVIEW 

This datasheet comprises the specifications for the 
SmartVoltage products in the 2-Mbit boot block flash 
memory family. Throughout this datasheet, the 
28F200 refers to all x8/x16 2-Mbit products, while 
28F002 refers to all x8 2-Mbit products. Section 1 
provides an overview of the flash memory family in- 
cluding applications, pinouts and pin descriptions. 
Sections 2 and 3 describe, in detail, the specific 
memory organizations and principles of operation for 
these products. Finally, Sections 4 and 5 describe 
the family’s operating specifications. Tables 1 and 2 
provide a quick reference to each product’s voltage 
supply capability. 


1.1 New Features in the SmartVoltage 
Products 

The new SmartVoltage boot block flash memory 
family offers identical operation as the current 
BX/BL 12V program products, except for the differ- 
ences listed below. All other functions are equivalent 
to current products, including signatures, write com- 
mands, and pinouts. 

• WP# pin has replaced a DU pin. See Table 3 and 
Table 10 for details. 

• 5V Program/Erase operation has been added 
that uses proven program and erase techniques 
with 5V ± 10% applied to Vpp. 

• Enhanced circuits optimize performance at 
3.3V V CC . 

If you are designing with existing BX/BL 12V Vpp 
boot block products today, you should provide the 
capability in your board design to upgrade to these 
new SmartVoltage products. 

Follow these guidelines to ensure compatibilty: 

1. Connect WP# (DU on existing products) to con- 
trol signal or to Vcc or GND. 


iny. 

2. If adding a switch on Vpp for write protection, 
switch to GND for complete write protection. 

3. Allow for connecting 5V to Vpp and disconnect 
12V from Vpp line, if desired. 


1.2 Main Features 

Intel’s SmartVoltage technology provides the 
most flexible voltage solution in the industry. 
SmartVoltage provides two discrete voltage supply 
pins, Vcc for read operation, and Vpp for program 
and erase operation. Discrete supply pins allow sys- 
tem designers to use the optimal voltage levels for 
their design. The 28F200/002BV provides read ca- 
pability at 3.3V or 5V, and program/erase capability 
at 5V or 12V. Since many designs read from the 
flash memory a large percentage of the time, 
3.3V Vcc operation can provide great power sav- 
ings. If read performance is an issue, however, 5V 
Vcc provides faster read access times. For program 
and erase operations, 5V Vpp operation eliminates 
the need for in system voltage converters, while 
1 2V Vpp operation provides faster program and 
erase for situations where 1 2V is available, such as 
manufacturing or designs where 1 2V is in-system. 

The 28F200/28F002 boot block flash memory fami- 
ly is a very high-performance, 2-Mbit (2,097,1 52 bit) 
flash memory family organized as either 256 Kwords 
(131,072 words) of 16 bits each or 512 Kbytes 
(262,144 bytes) of 8 bits each. 

Separately erasable blocks, including a hardware- 
lockable boot block (16,384 bytes), two parameter 
blocks (8,192 bytes each) and main blocks (one 
block of 98,304 bytes and three blocks of 131,072 
bytes) define the boot block flash family architec- 
ture. See Figure 7 and 8 for memory maps. Each 
block can be independently erased and pro- 
grammed 1 00,000 times at commercial temperature 
or 1 0,000 times at extended temperature. 
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Table 1. x8/x16 Boot Block Product Family 


Product Name 

Vpp 

Vcc 


12V 

5V 

5V 

3V 

28F200BV-T/B 




v " 


Table 2. x8-only Boot Block Product Family 


Product Name 

Vpp 

V CC 


12V 

5V 

5V 

3V 

28F002BV-T/B 






The boot block is located at either the top (denoted 
by -T suffix) or the bottom (-B suffix) of the address 
map in order to accommodate different microproc- 
essor protocols for boot code location. The hard- 
ware-lockable boot block provides complete code 
security for the kernel code required for system ini- 
tialization. Locking and unlocking of the boot block is 
controlled by WP# and/or RP# (see Section 3.4 for 
details). 

The Command User Interface (CUI) serves as the 
interface between the microprocessor or microcon- 
troller and the internal operation of the boot block 
flash memory products. The internal Write State Ma- 
chine (WSM) automatically executes the algorithms 
and timings necessary for program and erase opera- 
tions, including verifications, thereby unburdening 
the microprocessor or microcontroller of these 
tasks. The Status Register (SR) indicates the status 
of the WSM and whether it successfully completed 
the desired program or erase operation. 

Program and Erase Automation allows program and 
erase operations to be executed using an industry- 
standard two-write command sequence to the CUI. 
Data writes are performed in word (28F200 family) 
or byte (28F200 or 28F002 families) increments. 
Each byte or word in the Flash memory can be pro- 
grammed independently of other memory locations, 
unlike erases, which erase all locations within a 
block simultaneously. 

The 2-Mbit SmartVoltage boot block flash memory 
family is also designed with an Automatic Power 
Savings (APS) feature which minimizes system 


battery current drain, allowing for very low power de- 
signs. To provide even greater power savings, the 
boot block family includes a deep power-down mode 
which minimizes power consumption by turning most 
of the Flash memory’s circuitry off. This mode is 
controlled by the RP# pin and its usage is discussed 
in Section 3.5, along with other power consumption 
issues. 

Additionally, the RP# pin provides protection 
against unwanted command writes due to invalid 
system bus conditions that may occur during system 
reset and power-up/down sequences. Also, when 
the Flash memory powers-up, it automatically de- 
faults to the read array mode, but during a warm 
system reset, where power continues uninterrupted 
to the system components, the flash memory could 
remain in a non-read mode, such as erase. Conse- 
quently, the system Reset pin should be tied to RP# 
to reset the memory to normal read mode upon acti- 
vation of the Reset pin. 

For the 28F200, byte-wide or word-wide input/out- 
put is controlled by the BYTE# pin. Please see Ta- 
ble 3 for a detailed description of BYTE# opera- 
tions, especially the usage of the DQ-js/A-i pin. 

The 28F200 products are available in a 
ROM/EPROM-compatible pinout and housed in the 
44-Lead PSOP (Plastic Small Outline) package, the 
48-Lead TSOP (Thin Small Outline, 1.2 mm thick) 
package and the 56-Lead TSOP as shown in Figure 
4, 5 and 6, respectively. The 28F002 products are 
available in the 40-Lead TSOP package as shown in 
Figure 3. 
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Refer to the DC Characteristics Table, Section 4.2 
(commercial temperature) and Section 5.2 (extend- 
ed temperature), for complete current and voltage 
specifications. Refer to the AC Characteristics Ta- 
ble, Section 4.3 (commercial temperature) and Sec- 
tion 5.3 (extended temperature), for read, write and 
erase performance specifications. 


1.3 Applications 

The 2-Mbit boot block flash memory family com- 
bines high-density, low-power, high-performance, 
cost-effective flash memories with blocking and 
hardware protection capabilities. Their flexibility and 
versatility reduce costs throughout the product life 
cycle. Flash memory is ideal for Just-In-Time pro- 
duction flow, reducing system inventory and costs, 
and eliminating component handling during the pro- 
duction phase. 

When your product is in the end-user’s hands, and 
updates or feature enhancements become neces- 
sary, flash memory reduces the update costs by al- 
lowing user-performed code changes instead of 
costly product returns or technician calls. 

The 2-Mbit boot block flash memory family provides 
full-function, blocked flash memories suitable for a 
wide range of applications. These applications in- 
clude extended PC BIOS and ROM-able applica- 
tions storage, digital cellular phone program and 
data storage, telecommunication boot/firmware, 
printer firmware/font storage and various other em- 
bedded applications where program and data stor- 
age are required. 

Reprogrammable systems such as personal com- 
puters, are ideal applications for the 2-Mbit flash 
memory products. Increasing software sophistica- 


intel. 

tion greatens the probability that a code update will 
be required after the PC is shipped. For example, the 
emerging of “Plug and Play” standard in desktop 
and portable PCs enables auto-configuration of ISA 
and PCI add-in cards. However, since the “Plug and 
Play” specification continues to evolve, a flash BIOS 
provides a cost-effective capability to update exist- 
ing PCs. In addition, the parameter blocks are ideal 
for storing the required auto-configuration parame- 
ters, allowing you to integrate the BIOS PROM and 
parameter storage EEPROM into a single compo- 
nent, reducing parts costs while increasing function- 
ality. 

The 2-Mbit flash memory products are also excellent 
design solutions for digital cellular phone and tele- 
communication switching applications requiring very 
low power consumption, high-performance, high- 
density storage capability, modular software de- 
signs, and a small form factor package. The 2-Mbit’s 
blocking scheme allows for easy segmentation of 
the embedded code with 16 Kbytes of hardware-pro- 
tected boot code, two main blocks of program code 
and two parameter blocks of 8 Kbytes each for fre- 
quently updated data storage and diagnostic mes- 
sages (e.g., phone numbers, authorization codes). 

Intel’s boot block architecture provides a flexible 
voltage solution for the different design needs of 
various applications. The asymmetrically blocked 
memory map allows the integration of several mem- 
ory components into a single Flash device. The boot 
block provides a secure boot PROM; the parameter 
blocks can emulate EEPROM functionality for pa- 
rameter store with proper software techniques; and 
the main blocks provide code and data storage with 
access times fast enough to execute code in place, 
decreasing RAM requirements. 
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Figure 1. 28F200 Interface to lntel 386 EXTM Microprocessor 
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Figure 2. 28F002 interface to lnte!80C188EB 8-Bit Embedded Microprocessor 


1.4 Pinouts 

Intel’s SmartVoltage Boot Block architecture pro- 
vides upgrade paths in every package pinout to the 
8-Mbit density. The 28 F002 40-Lead TSOP pinout 
for space-constrained designs is shown in Figure 3. 
The 28F200 44-Lead PSOP pinout follows the indus- 
try standard ROM/EPROM pinout as shown in Fig- 
ure 4. For designs that require x16 operation but 


have space concerns, refer to the 48-Lead pinout in 
Figure 5. Furthermore, the 28F200 56-Lead TSOP 
pinout shown in Figure 6 provides density upgrades 
to future higher density boot block memories. 

Pinouts for the corresponding 4-Mbit and 8-Mbit 
components are also provided for convenient refer- 
ence. 2-Mbit pinouts are given on the chip illustration 
in the center, with 4-Mbit and 8-Mbit pinouts going 
outward from the center. 
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28F008 28F004 



GND 

NC 

NC 

A 10 

DQ 7 

dq 6 

dq 5 


dq 4 

V C C 

v cc 

NC 

DQ 3 

dq 2 

DQ 1 

DQ 0 

OE# 

GND 

CE# 

A n 


NOTE: 

Pin 12 is DU for BX/BL 12V Vpp Versions. 
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Figure 3. The 40-Lead TSOP Offers the Smallest Form Factor for Space-Constrained Applications 
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NOTE: 









Pin 2 is DU for BX/BL 12V Vpp Versions, 

but for the 8 -Mbit device, pin 2 has been changed to Ais (WP# on 2/4 Mbit). 

Designs planning on upgrading to the 8 -Mbit density from the 2/4-Mbit density in this package should design pin 2 to 

control WP# functionality at the 2/4-Mbit level and allow for pin 2 to control Ais after upgrading to the 8 -Mbit density. 


Figure 4. The 44-Lead PSOP Offers a Convenient Upgrade from JEDEC ROM Standards 
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Figure 5. The 48-Lead TSOP Offers the Smallest Form Factor for x16 Operation 



Figure 6. The 56-Lead TSOP Offers Compatibility between 2 Mbits and 4 Mbits 
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1.5 Pin Descriptions 

Table 3. 28F200/002 Pin Descriptions 


Symbol 

Type 

Name and Function 

> 

o 

1 

> 

-vj 

INPUT 

ADDRESS INPUTS for memory addresses. Addresses are internally latched 
during a write cycle. The 28F200 only has Aq-A^ pins, while the 28F002 has 

a 0 -a 17 . 

Ag 

INPUT 

ADDRESS INPUT: When Ag is at Vhh the signature mode is accessed. During this 
mode, Ao decodes between the manufacturer and device IDs. When BYTE# is at 
a logic low, only the lower byte of the signatures are read. DQ 15 /A_i is a don’t 
care in the signature mode when BYTE# is low. 

DQ 0 -DQ 7 

INPUT/ 

OUTPUT 

« 

DATA INPUTS/OUTPUTS: Inputs array data on the second CE# and WE# cycle 
during a Program command. Inputs commands to the Command User Interface 
when CE# and WE# are active. Data is internally latched during the Write cycle. 
Outputs array, Intelligent Identifier and Status Register data. The data pins float to 
tri-state when the chip is de-selected or the outputs are disabled. 

dq 8 -dq 15 

INPUT/ 

OUTPUT 

DATA INPUTS/OUTPUTS: Inputs array data on the second CE# and WE# cycle 
during a Program command. Data is internally latched during the Write cycle. 
Outputs array data. The data pins float to tri-state when the chip is de-selected or 
the outputs are disabled as in the byte-wide mode (BYTE# = “0”). In the byte- 
wide mode DQ-| 5 /A_i becomes the lowest order address for data output on 
DQ 0 -DQ 7 . The 28F002 does not include these DQq-DQis pins. 

CE# 

INPUT 

CHIP ENABLE: Activates the device’s control logic, input buffers, decoders and 
sense amplifiers. CE# is active low. CE# high de-selects the memory device and 
reduces power consumption to standby levels. If CE# and RP# are high, but not 
at a CMOS high level, the standby current will increase due to current flow through 
the CE# and RP# input stages. 

OE# 

INPUT 

OUTPUT ENABLE: Enables the device’s outputs through the data buffers during a 
read cycle. OE# is active low. 

WE# 

INPUT 

WRITE ENABLE: Controls writes to the Command Register and array blocks. 
WE# is active low. Addresses and data are latched on the rising edge of the WE# 
pulse. 

RP# 

INPUT 

RESET/DEEP POWER-DOWN: Uses three voltage levels (V| L , V| H , and V H h) to 
control two different functions: reset/deep power-down mode and boot block 
unlocking. It is backwards-compatible with the 28F200BX/BL. 

When RP# is at logic low, the device is in reset/deep powerdown mode, 

which puts the outputs at High-Z, resets the Write State Machine, and draws 
minimum current. 

When RP# is at logic high, the device is in standard operation. When RP# 
transitions from logic-low to logic-high, the device defaults to the read array mode. 

When RP# is at Vhh> the boot block is unlocked and can be programmed or 
erased. This overides any control from the WP# input. 
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Table 3. 28F200/002 Pin Descriptions (Continued) 


Symbol 

Type 

Name and Function 

WP# 

INPUT 

WRITE PROTECT: Provides a method for unlocking the boot block in a system without 
a 1 2V supply. WP# must be driven to logic high or low, not left floating. 

When WP# is at logic low, the boot block is locked, preventing Program and Erase 
operations to the boot block. If a Program or Erase operation is attempted on the boot 
block when WP# is low, the corresponding status bit (bit 4 for Program, bit 5 for Erase) 
will be set in the Status Register to indicate the operation failed. 

When WP# is at logic high, the boot block is unlocked and can be programmed or 
erased. 

NOTE: This feature is overridden and the boot block unlocked when RP# is at Vhh- See 
Section 3.4 for details on write protection. 

BYTE# 

INPUT 

BYTE# ENABLE: Not available on 28F002. Controls whether the device operates in 
the byte-wide mode (x 8 ) or the word-wide mode (x16). BYTE# pin must be controlled at 
CMOS levels to meet the CMOS current specification in the standby mode. 

When BYTE# is at logic low, the byte-wide mode is enabled, where data is read and 
programmed on DQ 0 -DQ 7 and DQ 15 /A -1 becomes the lowest order address that 
decodes between the upper and lower byte. DQq-DQ^ are tri-stated during the byte- 
wide mode. 

When BYTE# is at logic high, the word-wide mode is enabled, where data is read 
and programmed on DQ 0 -DQ 1 5 . 

Vcc 


DEVICE POWER SUPPLY: 5.0V ± 1 0%, 3.3V ± 0.3V 

Vpp 


PROGRAM/ERASE POWER SUPPLY: For erasing memory array blocks or 
programming data in each block, a voltage either of 5V ± 10 % or 12V ± 5% must be 
applied to this pin. When Vpp < Vpp|_K all blocks are locked and protected against 
Program and Erase commands. 

GND 


GROUND: For all internal circuitry. 

NC 


NO CONNECT: Pin may be driven or left floating. 
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2.0 PRODUCT DESCRIPTION 


2.1 Memory Organization 

2.1.1 BLOCKING 

This product family features an asymmetrically 
blocked architecture providing system memory inte- 
gration. Each erase block can be erased indepen- 
dently of the others up to 100,000 times at commer- 
cial temperature or up to 1 0,000 times at extended 
temperature. The block sizes have been chosen to 
optimize their functionality for common applications 
of nonvolatile storage. For the address locations of 
the blocks, see the memory maps in Figures 7 
and 8. 


2.1. 1.1 Boot Block— 1 x 16 KB 

The boot block is intended to replace a dedicated 
boot PROM in a microprocessor or microcontroller- 
based system. The 16-Kbyte (16,384 bytes) boot 
block is located at either the top (denoted by -T suf- 
fix) or the bottom (-B suffix) of the address map to 
accommodate different microprocessor protocols 
for boot code location. This boot block features 
hardware controllable write-protection to protect the 
crucial microprocessor boot code from accidental 
erasure. The protection of the boot block is con- 
trolled using a combination of the Vpp, RP#, and 
WP# pins, as is detailed in Section 3.4. 


2.1. 1.2 Parameter Blocks— 2 x 8 KB 

The boot block architecture includes parameter 
blocks to facilitate storage of frequently updated 
small parameters that would normally require an 
EEPROM. By using software techniques, the byte- 
rewrite functionality of EEPROMs can be emulated. 
These techniques are detailed in Intel’s AP-604, 
“Using Intel’s Boot Block Flash Memory Parameter 
Blocks to Replace EEPROM.” Each boot block 
component contains two parameter blocks of eight 
Kbytes (8,192 bytes) each. The parameter blocks 
are not write-protectable. 

2.1. 1.3 Main Blocks— 1 x 96 KB + lx 128 KB 

After the allocation of address space to the boot and 
parameter blocks, the remainder is divided into main 
blocks for data or code storage. Each 2-Mbit device 
contains one 96-Kbyte (98,304 byte) block and one 
128-Kbyte (131,072 byte) blocks. See the memory 
maps for each device for more information. 
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28F200-T 


1FFFFH 


1E000H 

1DFFFH 

1D000H 

1CFFFH 

1C000H 

1BFFFH 


10000H 

OFFFFH 


00000 H 


16-Kbyte BOOT BLOCK 
8-Kbyte PARAMETER BLOCK 
8-Kbyte PARAMETER BLOCK 


96-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


28F200-B 


1FFFFH 


10000H 

OFFFFH 


04000H 
03FFFH 
03000 H 
02FFFH 
02000H 
01FFFH 

00000 H 

290531 -7 


128-Kbyte MAIN BLOCK 


96-Kbyte MAIN BLOCK 


8-Kbyte PARAMETER BLOCK 
8-Kbyte PARAMETER BLOCK 
16-Kbyte BOOT BLOCK 


NOTE: 

Address = A[17:0]. In x8 operation, the least significant system address should be connected to A_i. Memory maps 
are shown for x16 operation. 


Figure 7. 28F200-T/B Memory Maps 


28F002-T 


28F002-B 


3FFFFH 


3C000H 

3BFFFH 


3A000H 

39FFFH 


38000H 

37FFFH 


20000H 

1FFFFH 


00000H 


16-Kbyte BOOT BLOCK 
8-Kbyte PARAMETER BLOCK 
8-Kbyte PARAMETER BLOCK 


96-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


NOTE: 

Address = A [18:0]. 


3FFFFH 


20000 H 
1FFFFH 


08000 H 
07FFFH 
06000 H 
05FFFH 
04000H 
03FFFH 

00000 H 


128-Kbyte MAIN BLOCK 


96-Kbyte MAIN BLOCK 


8-Kbyte PARAMETER BLOCK 
8-Kbyte PARAMETER BLOCK 
16-Kbyte BOOT BLOCK 


290531-8 


Figure 8. 28F002-T/B Memory Maps 


ra@®U©T ran 


4-80 




iny 

3.0 PRODUCT FAMILY PRINCIPLES 
OF OPERATION 

Flash memory augments EPROM functionality with 
in-circuit electrical write and erase. The boot block 
flash family utilizes a Command User Interface (CUI) 
and automated algorithms to simplify write and 
erase operations. The CUI allows for 100% TTL-lev- 
el control inputs, fixed power supplies during erasure 
and programming, and maximum EPROM compati- 
bility. 

When Vpp < Vpplk. the device will only successful- 
ly execute the following commands: Read Array, 
Read Status Register, Clear Status Register and in- 
telligent identifier mode. The device provides stan- 
dard EPROM Read, Standby and Output Disable op- 
erations. Manufacturer Identification and Device 
Identification data can be accessed through the CUI 
or through the standard EPROM Ag high voltage ac- 
cess (V|d) for PROM programming equipment. 

The same EPROM Read, Standby and Output Dis- 
able functions are available when 5V or 1 2 V is ap- 
plied to the Vpp pin. In addition, 5V or 12V on Vpp 
allows write and erase of the device. All functions 
associated with altering memory contents: Write and 
Erase, Intelligent Identifier Read, and Read Status 
are accessed via the CUI. 

The purpose of the Write State Machine (WSM) is to 
completely automate the write and erasure of the 
device. The WSM will begin operation upon receipt 
of a signal from the CUI and will report status back 
through a Status Register. The CUI will handle the 
WE# interface to the data and address latches, as 
well as system software requests for status while the 
WSM is in operation. 
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3.1 Bus Operations 

Flash memory reads, erases and writes in-system 
via the local CPU. All bus cycles to or from the flash 
memory conform to standard microprocessor bus 
cycles. These bus operations are summarized in Ta- 
bles 4 and 5. 


3.2 Read Operations 

3.2.1 READ ARRAY 

When RP# transitions from V||_ (reset) to Vm, the 
device will be in the read array mode and will re- 
spond to the read control inputs (CE#, address in- 
puts) and OE#) without any commands being writ- 
ten to the CUI. 

When the device is in the read array mode, five con- 
trol signals must be controlled to obtain data at the 
outputs. 

• WE# must be logic high (Vm) 

• CE# must be logic low (V|[_) 

• OE must be logic low (V|i_) 

® RP# must be logic high (Vm) 

• BYTE# must be logic high or logic low. 

In addition, the address of the desired location must 
be applied to the address pins. Refer to Figure 18 
and 1 9 for the exact sequence and timing of these 
signals. 

If the device is not in read array mode, as would be 
the case after a program or erase operation, the 
Read Mode command (FFH) must be written to the 
CUI before reads can take place. 
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Table 4. Bus Operations for Word-Wide Mode (BYTE# = V, H ) 


Mode 



CE# 

OE# 



^^9 

Vpp 

DQo-15 

Read 

1,2,3 

V|H 

VlL 

V|L 

V|H 

X 

D 


Dqut 

Output Disable 


V|H 

VlL 



D 


X 


Standby 


V|H 

V|H 


X 

D 


X 


Deep Power-Down 

9 


X 

X 

X 

X 

D 



Intelligent Identifier (Mfr) 

4 




V|H 

V|D 


X 

0089 H 

Intelligent Identifier (Device) 

4,5 

V|H 

VlL 

VlL 

V|H 

V|D 

V|H 

X 

See Table 6 

Write 

6,7,8 

V| H 

V| L 

V|H 

VlL 

X 

X 

X 

Din 


Table 5. Bus Operations for Byte-Wide Mode (BYTE# = V|l) 


Mode 

Notes 

RP# 

CE# 

OE# 

WE# 

Ag 

Ao 

A-l 

Vpp 

DQ 0-7 

O 

0 
00 

1 

wmL 

Read 

1,2,3 

V|H 


BIB 

P!i 

D 

D 

D 

D 

Dout 


Output Disable 


Vih 

VlL 


I 

a 


D 

D 

High Z 

High Z 

Standby 


V|H 

WM 

D 

mm 

a 

a 

X 

X 

High Z 

High Z 

Deep Power-Down 

9 


D 

■ 


X 

m 

X 

X 

High Z 

BUB 

Intelligent Identifier (Mfr) 

4 


1 

1 

El| 

V|D 

DU 

X 

X 

89H 

BIU 

Intelligent Identifier 
(Device) 

4,5 







X 

X 

See Table 6 

High Z 

Write 

6,7,8 

V|H 

VlL 

V| H 

V|L 

X 

X 

X 

X 

Din 

High Z 


NOTES: 

1 . Refer to DC Characteristics. 

2. X can be V||_, Vih for control pins and addresses, Vppi_« or Vppn for Vpp. 

3. See DC Characteristics for Vppi_K, Vppnl, Vp PH 2, Vhh, Vid voltages. 

4. Manufacturer and Device codes may also be accessed via a CUI write sequence, A1-A16 = X, A1-A17 = X. 

5. See Table 6 of Device IDs. 

6. Refer to Table 7 for valid D|^ during a Write operation. 

7. Command writes for Block Erase or Word/Byte Write are only executed when Vpp = Vppnl or Vppn2. 

8. To Write or Erase the boot block, hold RP# at Vhh or WP# at V IH- 

9. RP# must be at GND ± 0.2V to meet the maximum deep power-down current specified. 
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3.2.2 INTELLIGENT IDENTIFIERS 

The intelligent identifiers of the SmartVoltage boot 
block components are identical to the boot block 
products that operate only at 12V Vpp. The manu- 
facturer and device codes are read via the CUI or by 
taking the Ag pin to V|p. Writing 90H to the CUI 
places the device into intelligent identifier read 
mode. In this mode, Ag = 0 outputs the manufactur- 
er’s identification code and Ag = 1 outputs the de- 
vice code. When BYTE# is at a logic low, only the 
lower byte of the above signatures is read and 
DQ-15/A.1 is a “don’t care’’ during intelligent identifi- 
er mode. For x8 only products only the lower byte is 
read. See the Table 6 below for product signatures. 
A Read Array command must be written to the mem- 
ory to return to the read array mode. 


Table 6. Intelligent Identifier Table 


Product 

Mfr. ID 

Device ID 

-T 

(Top Boot) 

-B 

(Bottom Boot) 







7CH 

7DH 


3.3 Write Operations 

3.3.1 COMMAND USER INTERFACE (CUI) 

The Command User Interface (CUI) serves as the 
interface between the microprocessor and the inter- 
nal chip controller. Commands are written to the CUI 
using standard microprocessor write timings. The 
available commands are Read Array, Read Intelli- 
gent Identifier, Read Status Register, Clear Status 


Register, Erase and Program (summarized in Tables 
7 and 8). For Read commands, the CUI points the 
read path at either the array, the intelligent identifier, 
or the Status Register depending on the command 
received. For Program or Erase commands, the CUI 
informs the Write State Machine (WSM) that a write 
or erase has been requested. During the execution 
of a Program command, the WSM will control the 
programming sequences and the CUI will only re- 
spond to status reads. During an erase cycle, the 
CUI will respond to status reads and erase suspend. 
After the WSM has completed its task, it will set the 
WSM Status bit to a “1,” which will also allow the 
CUI to respond to its full command set. Note that 
after the WSM has returned control to the CUI, the 
CUI will stay in the current command state until it 
receives another command. 


Table 7. Command Set Codes and 
Corresponding Device Mode 


Command Codes 

Device Mode 

00 

Invalid Reserved 

10 


20 

Erase Set-Up 

40 

Program Set-Up 

50 

Clear Status Register 

70 

Read Status Register 

90 

Intelligent Identifier 

B0 

Erase Suspend 

DO 

Erase Resume/ Erase Confirm 

FF 

Read Array 
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Table 8. Command Bus Definitions 


Command 

Notes 

First Bus Cycle 

Second Bus Cycle 

Oper 

Addr 

Data 

Oper 

Addr 

Data 

Read Array 

8 


X 





Intelligent Identifier 

1 


X 


Read 



Read Status Register 

2,4 

Write 

X 


Read 

X 



3 

Write 

X 





Word/ Byte Write 


Write 



U22Q|| 

m23H 

WD 

Alternate Word/Byte Write 

6,7 

Write 





WD 

Block Erase/Confirm 

6,7 

Write 

BA 


Write 

BA 

DOH 

Erase Suspend/Resume 

5 

Write 

X 

BOH 

Write 

X 



ADDRESS 

BA = Block Address 
IA = Identifier Address 
WA = Write Address 
X = Don’t Care 

NOTES: 

1. Bus operations are defined in Tables 4 and 5. 

2. IA = Identifier Address: A0=0 for manufacturer code, A0 = 1 for device code. 

3. SRD— Data read from Status Register. 

4. IID = Intelligent Identifier Data. Following the Intelligent Identifier command, two Read operations access manufacturer 
and device codes. 

5. BA = Address within the block being erased. 

6. WA = Address to be written. WD = Data to be written at location WD. 

7. Either 40H or 1 0H commands is valid. 

8. When writing commands to the device, the upper data bus [DQ0-DQ15] = X (28F200 only) which is either V||_ or Vih, to 
minimize current draw. 


DATA 

SRD = Status Register Data 
IID = Identifier Data 
WD = Write Data 
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3.3.1. 1 Command Function Description 

Device operations are selected by writing specific 
commands into the CUI. Tables 7 and 8 define the 
available commands. 

Invalid/Reserved 

These are unassigned commands and should not be 
used. Intel reserves the right to redefine these codes 
for future functions. 

Read Array (FFH) 

This single write cycle command points the 
read path at the array. If the host CPU performs a 
CE#/OE# -controlled Read immediately following a 
two-write sequence that started the WSM, then the 
device will output Status Register contents. If the 
Read Array command is given after the Erase Setup 
command, the device will reset to read the array. A 
two Read Array command sequence (FFH) is re- 
quired to reset to Read Array after the Program Set- 
up command. 

Intelligent Identifier (90H) 

After this command is executed, the CUI points the 
output path to the intelligent identifier circuits. Only 
intelligent identifier values at addresses 0 and 1 can 
be read (only address Aq is used in this mode, all 
other address inputs are ignored). 

Read Status Register (70H) 

This is one of the two commands that is executable 
while the WSM is operating. After this command is 
written, a read of the device will output the contents 
of the Status Register, regardless of the address 
presented to the device. 

The device automatically enters this mode after pro- 
gram or erase has completed. 

Clear Status Register (50H) 

The WSM can only set the Program Status and 
Erase Status bits in the Status Register to “1,” it 
cannot clear them to “0.” 

Two reasons exist for operating the Status Register 
in this fashion. The first is synchronization. Since 
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the WSM does not know when the host CPU has 
read the Status Register, it would not know when to 
clear the status bits. Secondly, if the CPU is pro- 
gramming a string of bytes, it may be more efficient 
to query the Status Register after programming the 
string. Thus, if any errors exist while programming 
the string, the Status Register will return the accu- 
mulated error status. 

Program Setup (40H or 10H) 

This command simply sets the CUI into a state such 
that the next write will load the Address and Data 
registers. After this command is executed, the out- 
puts default to the Status Register. A two Read Ar- 
ray command sequence (FFH) is required to reset to 
Read Array after the Program Setup command. 

Program 

The second write after the Program Setup com- 
mand, will latch addresses and data. Also, the CUI 
initiates the WSM to begin execution of the program 
algorithm. The device outputs Status Register data 
when OE# is enabled. A Read Array command is 
required after programming, to read array data. 

Erase Setup (20H) 

Prepares the CUI for the Erase Confirm command. 
No other action is taken. If the next command is not 
an Erase Confirm command, then the CUI will set 
both the Program Status and Erase Status bits of the 
Status Register to a “1,” place the device into the 
Read Status Register state, and wait for another 
command. 

Erase Confirm (DOH) 

If the previous command was an Erase Setup com- 
mand, then the CUI will enable the WSM to erase, at 
the same time closing the address and data latches, 
and respond only to the Read Status Register and 
Erase Suspend commands. While the WSM is exe- 
cuting, the device will output Status Register data 
when OE# is toggled low. Status Register data can 
only be updated by toggling either OE# or CE# low. 
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Erase Suspend (BOH) 

This command is only valid while the WSM is exe- 
cuting an Erase operation, and therefore will only be 
responded to during an Erase operation. After this 
command has been executed, the CUI will set an 
output that directs the WSM to suspend Erase oper- 
ations, and then respond only to Read Status Regis- 
ter or to the Erase Resume commands. Once the 
WSM has reached the Suspend state, it will set an 
output into the CUI which allows the CUI to respond 
to the Read Array, Read Status Register, and Erase 
Resume commands. In this mode, the CUI will not 
respond to any other commands. The WSM will also 
set the WSM Status bit to a “1.” The WSM will con- 
tinue to run, idling in the SUSPEND state, regardless 
of the state of all input control pins except RP#, 
which will immediately shut down the WSM and the 
remainder of the chip, if it is made active. During a 
Suspend operation, the data and address latches 
will remain closed, but the address pads are able to 
drive the address into the read path. 

Erase Resume (DOH) 

This command will cause the CUI to clear the Sus- 
pend state and clear the WSM Status Bit to a “0,” 
but only if an Erase Suspend command was previ- 
ously issued. Erase Resume will not have any effect 
under any other conditions. 

3.3.2 STATUS REGISTER 

The device contains a Status Register which may be 
read to determine when a Program or Erase opera- 
tion is complete, and whether that operation com- 
pleted successfully. The Status Register may be 
read at any time by writing the Read Status com- 
mand to the CUI. After writing this command, all sub- 
sequent Read operations output data from the 
Status Register until another command is written to 
the CUI. A Read Array command must be written to 
the CUI to return to the read array mode. 


intel. 

The Status Register bits are output on DQ[0:7], 
whether the device is in the byte-wide (x8) or word- 
wide (x16) mode. In the word-wide mode the upper 
byte, DQ[8:15], is set to 00H during a Read Status 
command. In the byte-wide mode, DQ[8:14] are tri- 
stated and DQi 5 /A_-| retains the low order address 
function. 

Important: The contents of the Status Register are 
latched on the falling edge of OE # or CE#, which- 
ever occurs last in the read cycle. This prevents pos- 
sible bus errors which might occur if the contents of 
the Status Register change while reading the Status 
Register. CE# or OE# must be toggled with each 
subsequent status read, or the completion of a Pro- 
gram or Erase operation will not be evident from the 
Status Register. 

When the WSM is active, this register will indicate 
the status of the WSM, and will also hold the bits 
indicating whether or not the WSM was successful in 
performing the desired operation. 

3.3.2. 1 Clearing the Status Register 

The WSM sets status bits “3” through “7” to “1,” 
and clears bits “6” and “7” to “0,” but cannot clear 
status bits “3” through “5” to “0.” Bits 3 through 5 
can only be cleared by the controlling CPU through 
the use of the Clear Status Register command. 
These bits can indicate various error conditions. By 
allowing the system software to control the resetting 
of these bits, several operations may be performed 
(such as cumulatively programming several bytes or 
erasing multiple blocks in sequence). The Status 
Register may then be read to determine if an error 
occurred during that programming or erasure series. 
This adds flexibility to the way the device may be 
programmed or erased. To clear the Status Regis- 
ter, the Clear Status Register command is written to 
the CUI. Then, any other command may be issued to 
the CUI. Note, again, that before a read cycle can be 
initiated, a Read Array command must be written to 
the CUI to specify whether the read data is to come 
from the Memory Array, Status Register, or Intelli- 
gent Identifier. 
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Table 9. Status Register Bit Definition 


WSMS 

ESS 

ES 

DWS 

VPPS 

R 

R 

R 

7 

6 

5 

4 

3 

2 

1 

0 


SR. 7 = 

WRITE STATE MACHINE STATUS 
(WSMS) 

1 = Ready 
0 = Busy 

NOTES: 

Write State Machine bit must first be checked to 
determine Byte/Word program or Block Erase 
completion, before the Program or Erase Status bits are 
checked for success. 

SR. 6 = 

ERASE-SUSPEND STATUS (ESS) 
1 = Erase Suspended 
0 = Erase in Progress/Completed 

When Erase Suspend is issued, WSM halts execution 
and sets both WSMS and ESS bits to “1.” ESS bit 
remains set to “1” until an Erase Resume command is 
issued. 

SR. 5 = 

ERASE STATUS 
1 = Error in Block Erasure 
0 = Successful Block Erase 

When this bit is set to “1 ,” WSM has applied the 
maximum number of erase pulses to the block and is still 
unable to successfully verify block erasure. 

SR.4 = 

PROGRAM STATUS 
1 = Error in Byte/Word Program 
0 = Successful Byte/Word Program 

When this bit is set to “1 ,” WSM has attempted but failed 
to program a byte or word. 

SR. 3 = 

V P p STATUS 

1 = Vpp Low Detect, Operation Abort 
0 = Vpp OK 

The Vpp Status bit, unlike an A/D converter, does not 
provide continuous indication of Vpp level. The WSM 
interrogates Vpp level only after the Byte Write or Erase 
command sequences have been entered, and informs 
the system if Vpp has not been switched on. Vpp Status 
bit is not guaranteed to report accurate feedback 
between Vpp[_K and Vppn- 

SR.2-SR.0 = RESERVED FOR FUTURE 
ENHANCEMENTS 

These bits are reserved for future use and should be 
masked out when polling the Status Register. 


3.3.3 PROGRAM MODE 

Programming is executed using a two-write se- 
quence. The Program Setup command is written to 
the CUI followed by a second write which specifies 
the address and data to be programmed. The WSM 
will execute a sequence of internally timed events 
to: 

1 . Program the desired bits of the addressed mem- 
ory word or byte. 

2. Verify that the desired bits are sufficiently pro- 
grammed. 

Programming of the memory results in specific bits 
within a byte or word being changed to a “0.” 


If the user attempts to program “1 ”s, there will be no 
change of the memory cell content and no error oc- 
curs. 

Similar to erasure, the Status Register indicates 
whether programming is complete. While the pro- 
gram sequence is executing, bit 7 of the Status Reg- 
ister is a “0.” The Status Register can be polled by 
toggling either CE# or OE# to determine when the 
program sequence is complete. Only the Read 
Status Register command is valid while program- 
ming is active. 

When programming is complete, the status bits, 
which indicate whether the Program operation was 
successful, should be checked. If the programming 
operation was unsuccessful, bit 4 of the Status 


[p[F3@®y©T PIM 


4-87 





2-MBIT SmartVoltage BOOT BLOCK FAMILY 


Intel 


Register is set to a “1” to indicate a Program Fail- 
ure. If bit 3 is set to a “1," then Vpp was not within 
acceptable limits, and the WSM did not execute the 
programming sequence. If the program operation 
fails, bit 4 of the Status Register will be set within 
1 .5 ms as determined by the timeout of the WSM. 

The Status Register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after programming is completed; however, 
reads from the Memory Array, Status Register, or 
Intelligent Identifier cannot be accomplished until 
the CUI is given the Read Array command. 

3.3.4 ERASE MODE 

Erasure of a single block is initiated by writing the 
Erase Setup and Erase Confirm commands to the 
CUI, along with the addresses identifying the block 
to be erased. These addresses are latched internally 
when the Erase Confirm command is issued. Block 
erasure results in all bits within the block being set to 
"I.” 

The WSM will execute a sequence of internally 
timed events to: 

1. Program all bits within the block to “0.” 

2. Verify that all bits within the block are sufficiently 
programmed to “0.” 

3. Erase all bits within the block. 

4. Verify that all bits within the block are sufficiently 
erased. 

While the erase sequence is executing, bit 7 of the 
Status Register is a “0.” 

When the Status Register indicates that erasure is 
complete, the status bits, which indicate whether the 
Erase operation was successful, should be checked. 
If the Erase operation was unsuccessful, bit 5 of the 
Status Register will be set to a “1”, indicating an 
Erase Failure. If Vpp was not within acceptable limits 
after the Erase Confirm command is issued, the 
WSM will not execute an erase sequence; in- 


stead, bit 5 of the Status Register is set to a “1” to 
indicate an Erase Failure, and bit 3 is set to a “1 ” to 
identify that Vpp supply voltage was not within ac- 
ceptable limits. If the erase operation fails, bit 5 of 
the Status Register will be set within 1.5 ms as de- 
termined by the timeout of the WSM. 

The Status Register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after erasure is completed; however, reads 
from the Memory Array, Status Register, or Intelli- 
gent Identifier cannot be accomplished until the CUI 
is given the Read Array command. 

3.3.4. 1 Suspending and Resuming Erase 

Since an erase operation requires on the order of 
seconds to complete, an Erase Suspend command 
is provided to allow erase-sequenqe interruption in 
order to read data from another block of the memo- 
ry. Once the erase sequence is started, writing the 
Erase Suspend command to the CUI requests that 
the WSM pause the erase sequence at a predeter- 
mined point in the erase algorithm. The Status Reg- 
ister must then be read to determine if the erase 
operation has been suspended. 

At this point, a Read Array command can be written 
to the CUI in order to read data from blocks other 
than that which is being suspended. The only other 
valid command at this time is the Erase Resume 
command or Read Status Register command. 

During erase suspend mode, the chip can go into a 
pseudo-standby mode by taking CE# to Vm, which 
reduces active current draw. 

To resume the erase operation, the chip must be 
enabled by taking CE# to V||_, then issuing the 
Erase Resume command. When the Erase Resume 
command is given, the WSM will continue with the 
erase sequence and complete erasing the block. As 
with the end of a standard erase operation, the 
Status Register must be read, cleared, and the next 
instruction issued in order to continue. 
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Status Register Data 
Toggle CE# or OE# 
to Update SRD. 



Check SR.7 
1 = WSM Ready 
0 = WSM Busy 


Repeat for subsequent Word/Byte Writes. 

SR Full Status Check can be done after each Word/Byte 
Write, or after a sequence of Word/Byte Writes. 

Write FFH after the last write operation to reset device to 
read array mode. 


Word/Byte Program 
Complete 



Byte Program 


SR. 3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State Machine. 


Word/Byte Program 
Successful 


SR.4 is only clear by the Clear Status Register Command, 
in cases where multiple bytes are programmed before full 
status is checked. 


If error is detected, clear the Status Register before attempting 
retry or other error recovery. 


Figure 9. Automated Word/Byte Programming Flowchart 


P[Ri@®tLD©T IPRE¥D0 


























2-MBIT SmartVoltage BOOT BLOCK FAMILY 


Intel 



Bus 

Operation 

Command 

Comments 

Write 

Erase Setup 

Data = 20H 

Addr = Within Block to be Erased 

Write 

Erase 

Confirm 

Data = DOH 

Addr = Within Block to be Erased 

Read 


Status Register Data 
Toggle CE# or OE# 
to Update Status Register 

Standby 


Check SR.7 
1 = WSM Ready 
0 = WSM Busy 

Repeat for subsequent block erasures. 

Full Status Check can be done after each block erase, 
or after a sequence of block erasures. 

Write FFH after the last operation to reset device to Read 
Array mode. 


FULL STATUS CHECK PROCEDURE 



Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4,5 
Both 1 = Command 

Sequence Error 

Standby 


Check SR.5 
1 = Block Erase Error 

SR. 3 MUST be cleared, if set during an erase attempt, before further 
attempts are allowed by the Write State Machine. 

SR. 5 is only clear by the Clear Status Register Command, in 
cases where multiple blocks are erase before full status is checked. 

If error is detected, clear the Status Register before attempting 
retry or other error recovery. 


290531-10 

Figure 10. Automated Block Erase Flowchart 
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Comments 


Erase 

Suspend 

Data = BOH 
Addr = X 

Read 


Status Register Data 
Toggle CE# or OE# 
to Update SRD. 
Addr = X 

Standby 


Check SR. 7 
1 = WSM Ready 
0 = WSM Busy 

Standby 


Check SR. 6 
1 = Erase Suspended 
0 = Erase Completed 

Write 

Read Array 

Data = FFH 
Addr = X 

Read 

' 


Read Array Data from Block 
Other Than the One Being 
Erased 


Erase Resume 

Data = DOH 
Addr = X 


290531-11 


Figure 11. Erase Suspend/Resume Flowchart 
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3.4 Boot Block Locking 

The boot block family architecture features a hard- 
ware-lockable boot block so that the kernel code for 
the system can be kept secure while the parameter 
and main blocks are programmed and erased inde- 
pendently as necessary. Only the boot block can be 
locked independently from the other blocks. 

3.4.1 V PP = V, L FOR COMPLETE PROTECTION 

For complete write protection of all blocks in the 
flash device, the Vpp programming voltage can be 
held low. When Vpp is below Vppi_K. any program or 
erase operation will result in a error in the Status 
Register. 

3.4.2 WP# = V, L FOR BOOT BLOCK 
LOCKING 

When WP# = V|i_, the boot block is locked and any 
program or erase operation to the boot block will 
result in an error in the Status Register. All other 
blocks remain unlocked in this condition and can be 
programmed or erased normally. Note that this fea- 
ture is overridden and the boot block unlocked when 
RP# = V HH - 

3.4.3 RP# = V H h OR WP# = V IH FOR BOOT 
BLOCK UNLOCKING 

Two methods can be used to unlock the boot block: 

1. WP# = V| H 

2. RP# = V HH 

If both or either of these two conditions are met, the 
boot block will be unlocked and can be programmed 
or erased. The truth table, Table 10, clearly defines 
the write protection methods. 


3.5 Power Consumption 

3.5.1 ACTIVE POWER 

With CE# at a logic-low level and RP# at a logic- 
high level, the device is placed in the active mode. 
Refer to the DC Characteristics table for Iqc current 
values. 


iny 


Table 10. Write Protection Truth Table for 
SmartVoltage Boot Block Family 


Vpp 

RP# 

WP# 

Write Protection 
Provided 

VlL 

X 

X 

All Blocks Locked 

^ V PPLK 

V|L 

X 

All Blocks Locked (Reset) 

^ Vpp|_K 

Vhh 

X 

All Blocks Unlocked 

^ VpPLK 

V| H 

VlL 

Boot Block Locked 

^ VppLK 

V|H 

V|H 

All Blocks Unlocked 


3.5.2 AUTOMATIC POWER SAVINGS (APS) 

Automatic Power Savings (APS) is a low-power fea- 
ture during active mode of operation. The boot block 
flash memory family incorporates Power Reduction 
Control (PRC) circuitry which allows the device to 
put itself into a low current state when it is not being 
accessed. After data is read from the memory array, 
PRC logic controls the device’s power consumption 
by entering the APS mode where typical Ice current 
is less than 1 mA. The device stays in this static 
state with outputs valid until a new location is read. 

3.5.3 STANDBY POWER 

With CE# at a logic-high level (Vm), and the CUI in 
read mode, the memory is placed in standby mode. 
The standby operation disables much of the de- 
vice’s circuitry and substantially reduces device 
power consumption. The outputs (DQ[0:15] or 
DQ[0:7]) are placed in a high-impedance state inde- 
pendent of the status of the OE# signal. When CE# 
is at logic-high level during erase or program func- 
tions, the devices will continue to perform the erase 
or program function and consume erase or program 
active power until erase or program is completed. 

3.5.4 DEEP POWER-DOWN MODE 

The SmartVoltage boot block family supports a low 
typical Ice in deep power-down mode, which turns 
off all circuits to save power. This mode is activated 
by the RP# pin when it is at a logic-low (GND 
±0.2V.) (Note: BYTE# pin must be at CMOS levels 
to meet the Iccd specification.) 
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During read modes, the RP# pin going low dese- 
lects the memory and places the output drivers in a 
high impedance state. Recovery from the deep pow- 
er-down state, requires a minimum access time of 
tpHQV- (See AC Characteristics table) 

During erase or program modes, RP# low will abort 
either erase or program operations, but the memory 
contents are no longer valid as the data has been 
corrupted by the RP# function. As in the read mode 
above, all internal circuitry is turned off to achieve 
the power savings. 

RP# transitions to Vjl, or turning power off to the 
device will clear the Status Register. 


3.6 Power-Up/Down Operation 

The device offers protection against accidental 
block erasure or programming during power tran- 
sitions. Power supply sequencing is not required, 
since the device is indifferent as to which power sup- 
ply, Vpp or Vqc, powers-up first. The CUI is reset to 
the read mode after power-up, but the system must 
drop CE# low or present a new address to ensure 
valid data at the outputs. 

A system designer must guard against spurious 
writes when Vcc voltages are above Vlko ancl v pp 
is active. Since both WE# and CE# must be low for 
a command write, driving either signal to Vm will in- 
hibit writes to the device. The CUI architecture pro- 
vides an additional protection since alteration of 
memory contents can only occur after successful 
completion of the two-step command sequences. 
The device is also disabled until RP# is brought to 
Vm, regardless of the state of its control inputs. By 
holding the device in reset (RP# connected to sys- 
tem PowerGood) during power up/down, invalid bus 
conditions during power-up can be masked, provid- 
ing yet another level of memory protection. 

3.6.1 RP# CONNECTED TO SYSTEM RESET 

The use of RP# during system reset is important 
with automated write /erase devices because the 
system expects to read from the flash memory when 
it comes out of reset. If a CPU reset occurs without a 
flash memory reset, proper CPU initialization would 
not occur because the flash memory may be provid- 
ing status information instead of array data. Intel’s 
flash memories allow proper CPU initialization fol- 
lowing a system reset by connecting the RP# pin to 
the same RESET # signal that resets the system 
CPU. 
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3.6.2 Vcc, Vpp AND RP# TRANSITIONS 

The CUI latches commands as issued by system 
software and is not altered by Vpp or CE# tran- 
sitions or WSM actions. Its default state upon power- 
up, after exit from deep power-down mode, or after 
Vqc transitions above Vlko (Lockout voltage), is 
read array mode. 

After any Word/Byte Write or Block Erase operation 
is complete and even after Vpp transitions down to 
Vpplk. the cu l must be reset to read array mode via 
the Read Array command if accesses to the flash 
memory are desired. 


3.7 Power Supply Decoupling 

Flash memory’s power switching characteristics re- 
quire careful device decoupling methods. System 
designers should consider three supply current is- 
sues: 

1 . Standby current levels (Ices) 

2. Active current levels (Iccr) 

3. Transient peaks produced by falling and rising 
edges of CE#. 

Transient current magnitudes depend on the device 
outputs’ capacitive and inductive loading. Two-line 
control and proper decoupling capacitor selection 
will suppress these transient voltage peaks. Each 
flash device should have a 0.1 jllF ceramic capacitor 
connected between each Vcc and GND, and be- 
tween its Vpp and GND. These high frequency, in- 
herently low inductance capacitors should be placed 
as close as possible to the package leads. 

3.7.1 Vpp TRACE ON PRINTED CIRCUIT 
BOARDS 

Designing for in-system writes to the flash memory 
requires special consideration of the Vpp power sup- 
ply trace by the printed circuit board designer. The 
Vpp pin supplies the flash memory cells current for 
programming and erasing. One should use similar 
trace widths and layout considerations given to the 
Vcc power supply trace. Adequate Vpp supply 
traces, and decoupling capacitors placed adjacent 
to the component, will decrease spikes and over- 
shoots. 
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Guide to Subsequent Tables 
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Table 

Number 
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mm 
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AC Characteristics-Read Only Operations 
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34 
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40 
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43 
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44 
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44 
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50 

AC Characteristics-WE# Controlled Write Operations 

22 
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AC Characteristics-CE# Controlled Write Operations 

23 


Erase and Program Timings 

24 

54 


Summary of Line Items 
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55 


NOTE: 

In the following tables, the topmost heading lists the line items to which the specifications in that 
column apply. For space considerations, the line items have been abbreviated as shown in the follow- 
ing table. See Section 7.1 for more information on product naming and line items. 


Abbreviation 

Applicable Product Names 

BV-60 

E28F200BV-T60, E28F200BV-B60, E28F002BV-T60, E28F002BV-B60, 
E28F200CV-T60, E28F200CV-B60, PA28F200BV-T60, PA28F200BV-B60 

BV-80 

E28F200BV-T80, E28F200BV-B80, E28F002BV-T80, E28F002BV-B80, 
E28F200CV-T80, E28F200CV-B80, PA28F200BV-T80, PA28F200BV-B80 

BV-120 

E28F002BV-T120, E28F002BV-B120, PA28F200BV-T120, PA28F200BV-B120 

TBV-80 

TE28F200BV-T80, TE28F200BV-B80, TE28F002BV-T80, TE28F002BV-B80, 
TE28F200CV-T80, TE28F200CV-B80, TB28F200BV-T80, TB28F200BV-B80 
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intel. 

4.0 ABSOLUTE MAXIMUM RATINGS* 

Commercial Operating Temperature 

During Read 0°Cto +70°C 

During Block Erase 

and Word/Byte Write 0°C to + 70°C 

Temperature Bias - 1 0°C to 80°C 

Extended Operating Temperature 

During Read -40°Cto +85°C 

During Block Erase 

and Word/Byte Write -40°C to +85°C 

Temperature Under Bias -40°Cto +85°C 

Storage T emperature - 65°C to + 1 25°C 

Voltage on Any Pin 

(except Vcc> Vpp, Ag and RP#) 

with Respect to GND -2.0V to + 7.0V( 2 ) 

Voltage on Pin RP# or Pin Ag 
with Respect to GND - 2.0V to + 1 3.5V( 2 - 3 ) 

Vpp Program Voltage with Respect 
to GND during Block Erase 
and Word/Byte Write -2.0V to + 14.0V( 2 > 3 ) 

Vcc Supply Voltage 

with Respect to GND -2.0V to + 7.0V( 2 ) 

Output Short Circuit Current 100 mA( 4 ) 
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NOTICE: This document contains information on 
products in the design phase of development. Do not 
finalize a design with this information. Revised infor- 
mation will be published when the product is avail- 
able. Verify with your local Intel Sales office that you 
have the latest data sheet before finalizing a design. 

* WARNING: Stressing the device beyond the "Absolute 

Maximum Ratings” may cause permanent damage. 

These are stress ratings only. Operation beyond the 

"Operating Conditions” is not recommended and ex- 
tended exposure beyond the "Operating Conditions” 

may affect device reliability. 

NOTES: 

1 . Operating temperature is for commercial product 
defined by this specification. 

2. Minimum DC voltage is -0.5V on input/output 
pins. During transitions, this level may under- 
shoot to -2.0 V for periods <20 ns. Maximum 
DC voltage on input/output pins is Vcc + 0.5V 
which, during transitions, may overshoot to Vcc 
+ 2.0V for periods <20 ns. 

3. Maximum DC voltage on Vpp may overshoot to 
+ 14.0V for periods <20 ns. Maximum DC volt- 
age on RP# or Ag may overshoot to 13.5V for 
periods <20 ns. 

4. Output shorted for no more than one second. No 
more than one output shorted at a time. 

5. 10% Vcc specifications reference the 
28F200/002BV-60 in their standard test configu- 
rations, and 28F200/002BV-80/ 1 20. 

6. 5% Vcc specifications reference the 
28F200/ 002BV-60 in their high speed test con- 
figuration. 
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5.0 COMMERCIAL OPERATING CONDITIONS 



Table 11. Commercial Temperature and Vcc Operating Conditions 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 

Ta 

Operating Temperature 


0 

70 

°C 

Vcc 

3.3V Vqc Supply Voltage ( ± 0.3V) 


3.0 

3.6 

Volts 

5V Vcc Supply Voltage (1 0%) 

1 

4.50 

5.50 

Volts 

5V Vcc Supply Voltage (5%) 

2 

4.75 

5.25 

Volts 


NOTES: 

1. 10% Vqc specifications apply to the 60, 80 and 120 ns product versions in their standard test configuration. 

2. 5% Vqc specifications apply to the 60 ns versions in their high speed test configuration. 


5.1 Switching Vcc Voltages 


Table 12. Vqc Supply Switching Timing 


Symbol 

Parameter 

Notes 

Min 

Max 

Unit 

t 5VPH 

Vcc at 4.5V (minimum) to RP# High 

1 

2 


JLLS 

T3VPH 

Vcc at 3.0V (minimum) to RP# High 

1 

2 


JIXS 


NOTES: 

1. The T 5 VPH and/or T 3 VPH times must be strictly followed to guarantee all other read and write specifications. 

2. To switch between 3.3V and 5.0V operation, the system should first transition Vqq from the existing voltage to GND, and 
then to the new voltage. The Vqq supply voltage should not be switched when the WSM is busy. 



Figure 12. Vqc Supply Switching Waveform 
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5.2 DC Characteristics 


Table 13. DC Characteristics (Commercial) 


BV-60 

BV-80 

BV-120 

VCC = 3.3 ± 0.3 V 
Min Typ Max 


BV-60 

BV-80 

BV-120 

V CC = 5V ±10% 
i/lin Typ Max 



Vqc Read 
Current for 
Word or Byte 



13 

30 


10 

25 


Units 

Test Conditions 

ju.A 

Vcc = Vcc MAX 
V|N = Vqq or GND 

jllA 

Vcc = Vcc MAX 
V|n = Vcc or gnd 

mA 

Vcc = Vcc MAX 
CE# = RP# = ! 

BYTE# = WP# = V| H 

ju,A 

Vcc = Vcc max 

CE# = RP# = 
Vcc ± 0.2V 

fxA 

v cc = Vcc max 

Vin = Vqc or GND 
RP# = GND ± 0.2V 

mA 

CMOS INPUTS 

Vcc = V CC MAX 
CE# = GND 
OE# = Vqq 
f = 10 MHz (5V), 

5 MHz (3.3V) 

Iqut = 0 mA 
Inputs = GND ± 0.2V 
or Vqq ± 0.2V 

mA 

TTL INPUTS 

Vcc = Vcc MAX 
CE# = V| L 
OE# = V| H 
f = 10 MHz (5V), 

5 MHz (3.3V) 
Iout = 0 mA 
Inputs = V|[_ or V|h 

mA 

Word Write in Progress 
V PP = VpphI (at 5V) 

mA 

Word Write in Progress 
Vpp = Vppp|2 (at 12V) 


4 
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Table 13. DC Characteristics (Commercial) (Continued) 


V cc = 5V± 10% 


Min 


Symbol 

Parameter 

Notes 

!CCE 

Vcc Erase 
Current 

1,4 



Ippw 

Vpp Word/Byte 
Write Current 

1,4 

IppE 

Vpp Erase 
Current 

1,4 

•PPES 

Vpp Erase 

Suspend 

Current 

1 

>RP# 

RP# Boot Block 
Unlock Current 

1,4 

•id 

Ag Intelligent 
Identifier Current 

1,4 



13 

30 

10 

25 

3 

8.0 

±5 

±15 

0.2 

10 

50 

200 

13 

30 

8 

25 

13 

30 

8 

25 





Units 

Test Conditions 

i 

mA 

Block Erase in Progress 
Vpp = Vp PH 1 (at 5V) 

mA 

Block Erase in Progress 
Vpp = Vpp|-|2 (at 12V) 

mA 

CE# = V,h 
B ldck Erase Suspend 

]u,A 

o 

o 

> 

VI 

CL 

Q_ 

> 

julA 

RP# = GND ± 0.2V 

jutA 

8 

> 

A 

CL 

CL 

> 

mA 

Vpp = Vpp H 1 (at 5V) 
Word Write in Progress 


Vpp = V PPH 2 (at 12V) 
Word Write in Progress 

mA 

Vpp = Vppnl (at5V) 
Block Erase in Progress 


V PP = V pph 2 (at 12V) 
Block Erase in Progress 



Ag = V, D 
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Table 13. DC Characteristics (Commercial) (Continued) 




Notes 

BV-60 

BV-80 

BV-120 

BV-60 

BV-80 

BV-120 

Units 

Test Conditions 

' V CC = 3.3 ± 0.3V 

V C c = 5V ± 10% 

Min 

Typ 

Max 

Min 

Typ 

Max 




11.4 


12.6 

11.4 


12.6 

V 


VlL 

Input Low 
Voltage 

■ 

-0.5 


0.8 

-0.5 


0.8 

V 


V|H 

Input High 
Voltage 

■ 

2.0 


Vcc 
+ 0.5V 

2.0 


Vcc 

+ 0.5V 

V 


VOL 

Output Low 
Voltage 

■ 



0.45 



0.45 

V 

Vcc = Vcc MIN 
Iql = 5.8 mA 



■ 

2.4 



2.4 

■ 

■ 

V 

V CC = Vcc min 

Iqh = — 2.5 mA 

v OH2 

Output High 

Voltage 

(CMOS) 


0.85 V CC 



0.85 V CC 

■ 


V 

Vcc = Vcc MIN 
Iqh = “2.5 mA 


Vcc 
-0.4 V 



Vcc 
-0.4 V 


■ 

Vcc = Vcc min 
Iqh = -100 jliA 

VpPLK 

Vpp Lock-Out 
Voltage 

3 

0.0 


1.5 



1.5 

V 

Complete Write 
Protection 

Vp PH 1 

Vpp 

(Prog ram /Erase 
Operations) 


4.5 


5.5 

■ 


5.5 

V 

Vpp at 5V 

Vppn2 

Vpp 

(Program/ Erase 
Operations) 


11.4 


12.6 

11.4 


12.6 



V LKO 

Vqc Erase/Write 
Lock Voltage 

8 




2.0 



V 


Vhh 

RP# Unlock 
Voltage 




12.6 

11.4 


12.6 

V 

Boot Block 
Write/ Erase 


NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vqc =. 5.0V, T = 25°C. These currents are valid for all 
product versions (packages and speeds). 

2. icCES is specified with the device deselected. If the device is read while in erase suspend mode, current draw is the sum 
of Icces and Iccr- 

3. Block erases and word/byte writes are inhibited when Vpp = Vpp|_K. and not guaranteed in the range between Vppnl 
and Vpp[_K. 

4. Sampled, not 100% tested. 

5. Automatic Power Savings (APS) reduces Iccr to less than 1 mA typical, in static operation. 

6. CMOS Inputs are either Vqc ± 0.2V or GND ± 0.2V. TTL Inputs are either V|t_ or V|h- 

7. For the 28F002, address pin A-io follows the Cout capacitance numbers. 

8. For all BV parts, V|_ko = 2.0V for both 3.3V and 5V operations. 
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Figure 13. 3.3V Inputs and Measurement Points 
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Figure 15. 5V Inputs and Measurement Points 




Figure 17. 5V High Speed Test Configuration 
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5.3 AC Characteristics 


Table 14. AC Characteristics: Read Only Operations (Commercial) 





BV-60 




Vcc 

5V±5% 

5V ± 10% 

3.3 ± 0.3 V 




Load 

30 pF 

100 pF 

50 pF 


Symbol 

Parameter 

Note 

Min 

Max 


Max 

Min 

Max 

Units 

UVAV 

Read Cycle Time 


60 


70 


110 


ns 


Address to Output Delay 



60 


70 


110 

ns 

tELQV 

CE# to Output Delay 

2 


60 


70 


110 

ns 

tpHQV 

RP# to Output Delay 



450 


450 


800 

ns 

tGLQV 

OE# to Output Delay 

2 


30 


35 


65 

ns 

tELQX 

CE# to Output in Low Z 

3 

0 


0 


0 


ns 

tEHQZ 

CE# to Output in High Z 

3 


20 


25 


55 

ns 

tGLQX 

OE# to Output in Low Z 

3 

0 


0 


0 


ns 

tGHQZ 

OE# to Output in High Z 

3 


20 


25 


45 

ns 


Output Hold from 
Address CE # , or OE # 
change whichever 
occurs first 

3 

0 


0 


0 


ns 

ESI 

CE# Low to BYTE# 
High or Low 

3 


5 


5 


7 

ns 

tAVFL 

Address to BYTE# High 
or Low 

3 


5 


5 


7 

ns 

BSI 


3,4 


60 


70 


110 

ns 

tFLQZ 

BYTE# Low to Output in 
High Z 

3 


20 


25 


45 

ns 
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5.3 AC Characteristics 

Table 14. AC Characteristics: Read Only Operations (Commercial) (Continued) 


BV-80 




Vcc 

Load 

Symbol 

Parameter 

Note 

tAVAV 

Read Cycle Time 


tAVQV 

Address to 
Output Delay 


tELQV 

CE# to Output 
Delay 

2 

tpHQV 

RP# to Output 
Delay 


tGLQV 

OE# to Output 
Delay 

2 





5 V ± 10% 
100 pF 
flln I Max 


3.3 ± 0.3 V 
50 pF 

"Min I Max- 


i BV-120 

5V±10% 

3.3 ± 0.3 V 

100 pF 

50 

PF 

Min 

Max 

Min 

Max 

120 


180 




fGHQZ 

OE# to Output 
in High Z 


tQH 

Output Hold 
from Address 
CE#, or OE# 
change 
whichever 
occurs first 

3 


CE# Low to 
BYTE# High or 
Low 

3 





30 


0 


0 


30 


0 


0 



5 


10 

80 


150 






NOTES: 

1. See AC Input/Output Reference Waveform for timing measurements. 

2. OE# may be delayed up to tcE ~ toE after the falling edge of CE# without impact on 

3. Sampled, but not 100% tested. 

4. tpLQV. BYTE# switching low to valid output delay will be equal to tAvov. measured from the time DQi 5 /A_i becomes 
valid. 

5. See 5V High Speed Test Configuration. 

6. See 5V Standard Test Configuration. 

7. See 3.3V Test Configuration 
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ADDRESSES (A) 


Device and 
Address Selection 


Address Stable 





Figure 18. AC Waveforms for Read Operations 




Figure 19. BYTE# Timing Diagram for Both Read and Write Operations with Vcc at 5.0V 



■ 

V 

^EHQZ 

■ 

V 

^GHQZ 

■ 
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| 
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Table 15. AC Characteristics: WE#— Controlled Write Operations^) (Commercial) 




V C C 

Load 

Symbol 

Parameter 

Note 

*AVAV 

Write Cycle Time 




Boot Block Lock Setup 
to WE# Going High 

Vpp Setup to WE# 

Going High 

Address Setup to WE# 
Going High 

Data Setup to WE# 

Going High 

WE# Pulse Width 

Data Hold Time from 
WE# High 


Address Hold Time from 
WE# High 

CE# Hold Time from 
WE# High 

WE# Pulse Width High 


Duration of Word/ Byte 
Programming Operation 


t WHQV4 Duration of Erase 
Operation (Main) 

tQWL Vpp Hold from Valid SRD 

RP# Vhh Hold from 
Valid SRD 


Boot-Block Relock Delay 



6 


0.3 


0.3 


0.6 


0 


0 
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Table 15. AC Characteristics: WE# — Controlled Write OperationsO) (Commercial) (Continued) 


BV-80 BV-120 

5V± 10% 3.3 ± 0.3V 5V± 10% 3.3±0.3V 

100 pF 50 pF 100 pF 50 pF 

Symbol Parameter Note Min Max Min Max Min 

tAVAV Write Cycle Time 80 150 




Vcc 



Load 



Boot Block Lock Setup 
to WE# Going High 


tvPWH 

Vpp Setup to WE# 
Going High 

tAVWH 

Address Setup to WE# 
Going High 

tDVWH 

Data Setup to WE# 
Going High 


WE# Pulse Width 


Data Hold Time from 
WE# High 

4 

Address Hold Time from 
WE# High 


CE# Hold Time from 
WE# High 


WE# Pulse Width High 

■■ 

Duration of Word/Byte 
Programming Operation 




tWHQV3 

Duration of Erase 
Operation (Parameter) 

tWHQV4 

Duration of Erase 
Operation (Main) 

tQWL 

Vpp Hold from Valid SRD 

tQVPH 

RP# Vhh Hold from 
Valid SRD 

tpHBR 

Boot-Block Relock Delay 



50 


150 

0 


0 

10 


10 

, 0 


0 
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NOTES: 

1 . Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
characteristics during read mode. 

2. The on-chip WSM completely automates Program/Erase operations; Program/Erase algorithms are now controlled inter- 
nally which includes verify and margining operations. 

3. Refer to command definition table for valid Ain- 

4. Refer to command definition table for valid Din- 

5. Program/Erase durations are measured to valid SRD data (successful operation, SR. 7 = 1). 

6. For boot block program/erase, RP# should be held at Vhh or WP# should be held at V|h until operation completes 
successfully. 

7. Time tpnBR is required for successful relocking of the boot block. 

8. Sampled, but not 100% tested. 

9. V PP at 5.0V. 

10. V PP at 12.0V. 

11. See 5V High Speed Test Configuration. 

12. See 5V Standard Test Configuration. 

13. See 3.3V Test Configuration. 


ADDRESSES 


CE# (E) 




OE# (G) 


WE# (W) 





DATA (D/Q) Hi 9 h Z 


6.5V V HH 


RP# (P) 


-*• K-t« 


D|N 


V, L -/ 


WP# 


1 


v*> 


Vhhwh 


V v > v ppu , 

V»_ 


ilil 


wmm 


■€ 


Valid 

}SRP 


W i D|n y 


^QVPH 


»| ^QVVL 


Iliiil! 


Bill 


290531-18 


NOTES: 

1 . Vcc Power-Up and Standby. 

2. Write program or Erase Setup Command. 

3. Write Valid Address and Data (Program) or Erase Confirm Command. 

4. Automated Program or Erase Delay. 

5. Read Status Register Data. 

6. Write Read Array Command. 


Figure 20. AC Waveforms for Write and Erase Operations (WE# -Controlled Writes) 
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Table 16. AC Characteristics: CE#-Controlled Write Operations^* 13 ) (Commercial) 


Symbol Parameter 

*AVAV Write Cycle Time 

tpHEL RP# Hi 9 h Recovery to CE# Going 
Low 


l WLEL WE# Setup to CE# Going Low 





— 

CE# Pulse Width 


Data Hold Time from CE# High 

4 

Address Hold Time from CE# High 

3 
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Table 16. AC Characteristics: CE# -Controlled Write Operations^’ 13 ) (Commercial) (Continued) 


BV-120 



Write Cycle Time 


tpHEL RP # HiQh 

Recovery to CE# 
Going Low 


B 

5V± 10% 

100 pF 

Min 

Max 

80 


450 




Vpp Setup to CE# 
Going High 

Address Setup to 
CE# Going High 

Data Setup to CE# 
Going High 


CE# Pulse Width 


Data Hold Time 
from CE# High 

Address Hold Time 
from CE# High 

WE # Hold Time 
from CE# High 


Duration of Word/ 
Byte Programming 
Operation 


tEHQV3 

Duration of Erase 

Operation 

(Parameter) 

2,5 

*EHQV4 

Duration of Erase 
Operation (Main) 

2,5 

tQWL 

Vpp Hold from 
Valid SRD 

5,8 

tQVPH 

RP# V hh Hold 
from Valid SRD 

6,8 









Min Max Min Max Units 


120 







NOTES: 

See WE# Controlled Write Operations for notes 1 through 12. 

13. Chip-Enable controlled writes: Write operations are driven by the valid combination of CE# and WE# in systems where 
CE# defines the write pulse-width (within a longer WE# timing waveform), all set-up, hold and inactive WE# times 
should be measured relative to the CE# waveform. 
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NOTES: 

1 • Vcc Power-Up and Standby. 

2. Write program or Erase Setup Command. 

3. Write Valid Address and Data (Program) or Erase Confirm Command. 

4. Automated Program or Erase Delay. 

5. Read Status Register Data. 

6. Write Read Array Command. 


Figure 21. Alternate AC Waveforms for Write and Erase Operations (CE# — Controlled Writes) 




4-109 






2-MBIT SmartVoltage BOOT BLOCK FAMILY 


iny 


Table 17. Erase and Program Timings (Commercial Ta = 0°C to + 70°C) 


Parameter 

V PP = 5V ±10% 

V PP = 12V ±5% 

Units 

V C c = 3.3 
±0.3V 

^ 
II o 

85 

> 



Typ 

Typ 

Typ 

Typ 

Boot/ Parameter Block Erase Time 

0.84 

0.8 

0.44 

0.34 

s 

Main Block Erase Time 

2.4 

1.9 

1.3 

1.1 

s 

Main Block Write Time (Byte Mode) 

1.7 

1.8 

1.6 

1.2 

s 

Main Block Write Time (Word Mode) 

1.1 

0.9 

0.8 

0.6 

s 

Byte Write Time 

10 

10 

8 

8 

fXS 

Word Write Time 

13 

13 

8 

8 

fxS 


NOTES: 

1. All numbers are sampled, not 100% tested. 

2. Contact your Intel representative for information regarding maximum Byte/Word Write specifications. 
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6.0 EXTENDED OPERATING CONDITIONS 


Table 18. Extended Temperature and Vcc Operating Conditions 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 

Ta 

Operating Temperature 


-40 

85 

°C 

Vcc 

3.3V V C c Supply Voltage ( + 0.3V) 

1 

3.0 

3.6 

Volts 

5V Vqc Supply Voltage (10%) 

2 

4.50 

5.50 

Volts 


NOTES: 

1 . AC specifications are valid at both voltage ranges. See DC Characteristics tables for voltage range-specific specifications. 

2. 10% Vqc specifications apply to 1 10 ns and 80 ns versions in their standard test configuration. 



6.1 Applying Vqc Voltages 


Table 19. Vcc Supply Switching Timing 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 


Vcc at 4.5V (minimum) to RP# High 

1 

2 


JUS 

T 3VPH 

Vcc at 3.0V (minimum) to RP# High 

1 

2 


JULS 


NOTES: 

1. The T 5 VPH and/or T 3 VPH times must be strictly followed to guarantee all other read and write specifications. 

2. To switch between 3.3V and 5.0V operation, the system should first transition Vcc fro™ the existing voltage to GND, and 
then to the new voltage. The Vcc supply voltage should not be switched when the WSM is busy. 



Figure 22. Vcc Supply Switching Waveform 
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6.2 DC Characteristics 

Table 20. DC Characteristics: Extended Temperature Operation 
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Table 20. DC Characteristics: Extended Temperature Operation (Continued) 





TBV-80 

TBV-80 



Symbol 

Parameter 

Notes 

Vcc 

= 3.3 ± 0.3V 

Vcc 

= 5V ± 

10% 

Units 

Test Conditions 




Min 

Typ 

Max 

Min 

Typ 

Max 



>CCE 

Vcc Erase 
Current 

1,4 


13 

30 


22 

45 

mA 

Block Erase 
in Progress 
Vpp = Vppi-|1 (at 5V) 





10 

25 


18 

40 

mA 

Block Erase 
in Progress 

Vpp = V pph 2 (at 12V) 


Vcc Erase 

Suspend 

Current 

1,2 


3 

8.0 


5 

12.0 

mA 

CE# = V| H 
Block Erase Suspend 
Vpp = Vp PH 1 (at 5V) 


Vpp Standby 
Current 

1 


± 5 

± 15 


± 5 

± 15 

jtiA 

Vpp ^ Vcc 

! PPD 

Vpp Deep 

Power-down 

Current 

1 


0.2 

10 


0.2 

10 

/xA 

RP# = GND ± 0.2 V 

!PPR 

Vpp Read 
Current 

1 


50 

200 


50 

200 

jllA 

Vpp > Vcc 

Ippw 

Vpp Write 
Current for 
Word/ Byte 

1,4 


13 

30 


13 

30 

mA 

Vpp = VppH 

Word Write in Progress 

V PP = V PPH 1(at5V) 





8 

25 


8 

25 

mA 

Vpp = VppH 

Word Write in Progress 

Vpp = V pph 2 (at 12V) 

ipPE 

Vpp Erase 
Current 

1,4 


13 

30 


15 

25 

mA 

Vpp = VppH 
Block Erase in 
Progress 

V PP = Vp PH 1 (at 5V) 





8 

25 


10 

20 

mA 

Vpp = VppH 
Block Erase in 
Progress 

Vpp = Vpph 2 (at 12V) 

IPPES 

Vpp Erase 

Suspend 

Current 

1 


50 

200 


50 

200 

jwA 

Vpp = VppH 
Block Erase Suspend 
in Progress 
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Table 20. DC Characteristics: Extended Temperature Operation (Continued) 





TBV-80 

TBV-80 

Symbol 

Parameter 

Notes 

V C c = 3.3 ± 0.3V 

V C c = 5V ± 10% 




Min Typ Max 

Min Typ Max 

Irp# 

RP# Boot 

1,4 

500 

500 


Block Unlock 
Current 


Iid Ag Intelligent 
Identifier 
Current 



/ohI Output High 
Voltage (TTL) 

/oh 2 Output High 
Voltage 

(CMOS) 


Vpp Lock- 
Out Voltage 

Vpp (Program/ 
Erase Operations) 

Vpp (Program/ 
Erase Operations) 


Units 

Test Conditions 

fiA 

RP# = V HH 
Vpp = 12V 

jliA 

Ag = Vid 

V 


V 


V 


V 

Vcc = VccMIN 
Iql = 5.8 mA (5V) 
2 mA (3.3V) 
Vpp = 12V 


V 

Vcc = VccMIN 
lOH = -2.5 mA 


Vcc = VccMIN 
Iqh = “100 juA 
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Table 20. DC Characteristics: Extended Temperature Operation (Continued) 





TBV-80 

TBV-80 



Symbol 

Parameter 

Notes 

Vcc 

= 3.3 ± 0.3V 

Vcc 

= 5V ± 10% 

Units 

Test Conditions 













Vcc 

Erase/Write 
Lock Voltage 




■ 








■ 



12.6 

11.4 


12.6 

I 

Boot Block 
Write/ Erase 
V PP = 12V 


NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, T = 25°C. These currents are valid for all 
product versions (packages and speeds). 

2. Icces is specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum 
of Icces and 'ccr- 

3. Block erases and word/byte writes are inhibited when Vpp = Vpp[_K. and not guaranteed in the range between Vppnl 
and Vpp L K. 

4. Sampled, not 100% tested. 

5. Automatic Power Savings (APS) reduces Iccr to less than 1 mA typical, in static operation. 

6. CMOS Inputs are either Vcc ± 0.2V or GND ± 0.2V. TTL Inputs are either V|l or V|h- 

7. For the 28F002 address pin Aio follows the Cqut capacitance numbers. 

8. For all BV parts, V|_ko = 2.0V for both 3 - 3V and 5.0V operations. 
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Figure 23. 3.3V Inputs and Measurement Points Figure 25. 5V Inputs and Measurement Points 


Figure 24. 3.3V Standard Test Configuration Figure 26. 5V Standard Test Configuration 
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6.3 AC Characteristics 


Table 21. AC Characteristics: Read Only OperationsO) (Extended Temperature) 


Symbol 

Parameter 

Note 

TBV-80 

TBV-80 






Min 


tAVAV 

Read Cycle Time 


110 


80 


ns 

tAVQV 

Address to Output Delay 



110 


80 

ns 

tELQV 

CE# to Output Delay 



110 


80 

ns 





800 


450 

ns 

iSiSB 




65 


40 

ns 

tELQX 

CE# to Output in Low Z 

3 

0 


0 


ns 

tEHQZ 

CE# to Output in High Z 

3 


55 


30 

ns 

mm 



0 


0 


ns 

19991 


3 


45 


30 

ns 

tOH 

Output Hold from Address 
CE#, or OE# change 
whichever occurs first 

3 

0 


0 


ns 

tELFL 

*ELFH 

CE# Low to BYTE# High or 
Low 

3 


7 


5 

ns 

tAVFL 

Address to BYTE# High or Low 

3 


7 


5 

IS 

*FLQV 

*FHQV 

BYTE# to Output Delay 

3,4 


110 


80 

g 

tFLQZ 

BYTE# Low to Output in High Z 

3 


45 


30 



NOTES: 

1. See AC Input/Output Reference Waveform for timing measurements. 

2. OE# may be delayed up to tcE - tQE after the falling edge of CE# without impact on tcE- 

3. Sampled, but not 100% tested. 

4. tpLQV. BYTE# switching low to valid output delay will be equal to ty\vQv> measured from the time DQ15/A.1 becomes 
valid. 

5. See 5V Standard Test Configuration. 

6. See 3.3V Standard Test Configuration. 
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Table 22. AC Characteristics: WE# -Controlled Write Operations! 1 ) (Extended Temperature) 


Symbol 

Parameter 

Notes 

TBV-80 

TBV-80 

Units 

Vcc = 3.3 ± 0.3V(H) 

Vcc = 5V ± 10 %O 2 ) 



Min 


*AVAV 

Write Cycle Time 


110 


80 


ns 

tpHWL 

RP# High Recovery to WE# 
Going Low 




450 


ns 

tELWL 

CE# Setup to WE# Going 
Low 


0 


0 


ns 

tpHHWH 

Boot Block Lock Setup to 
WE# Going High 

6,8 

200 


100 


ns 

tVPWH 

Vpp Setup to WE# Going 
High 

5,8 



100 


ns 

tAVWH 

Address Setup to WE# Going 
High 

3 



60 


ns 

tDVWH 

Data Setup to WE# Going 
High 

4 

90 


60 


ns 

tWLWH 

WE# Pulse Width 


90 


60 


ns 

tWHDX 

Data Hold Time from WE# 
High 

4 

0 


0 


ns 

tWHAX 

Address Hold Time from WE# 
High 

3 

10 


10 


ns 

%HEH 

CE# Hold Time from WE# 
High 


0 


0 


ns 

twHWL 

WE# Pulse Width High 

, 

20 


20 


ns 

tWHQVI 

Duration of Word/ Byte Write 
Operation 

2,5 

6 


7 


JUS 

%HQV2 

Duration of Erase Operation 
(Boot) 

2,5,6 

0.3 


0.4 


s 

tWHQV3 

Duration of Erase Operation 
(Parameter) 

2,5 

0.3 


0.4 



%HQV4 

Duration of Erase Operation 
(Main) 

2,5 

0.6 


0.7 


s 
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Table 22. AC Characteristics: WE# -Controlled Write Operations^) 
(Extended Temperature) (Continued) 





TBV-80 

TBV-80 


Symbol 

Parameter 

Notes 

Vcc = 3.3 + 0.3V(11) 

Vcc = 5V + 10%(12) 

Units 




Min 

Max 

Min 

Max 


tQWL 

Vpp Hold from Valid SRD 

5,8 

0 


0 


ns 

tQVPH 

RP# V H h Hold from Valid 
SRD 

6,8 

0 


0 


ns 

tpHBR 

Boot-Block Relock Delay 

7.8 


200 


100 

ns 


NOTES: 

1 . Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
Characteristics during read mode. 

2. The on-chip WSM completely automates program/erase operations; program/erase algorithms are now controlled inter- 
nally which includes verify and margining operations. 

3. Refer to command definition table for valid Ain- 

4. Refer to command definition table for valid Din- 

5. Program/Erase durations are measured to valid SRD data (successful operation, SR.7 = 1) 

6. For boot block program/erase, RP# should be held at Vhh or WP# should be held at Vjh until operation completes 
successfully. 

7. Time tpHBR is required for successful relocking of the boot block. 

8. Sampled, but not 100% tested. 

9. Vpp at 5.0V. 

10. Vpp at 12.0V. 

1 1 . See 3.3V Standard Test Configuration. 

12. See 5V Standard Test Configuration. 
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Table 23. AC Characteristics: CE# -Controlled Write OperationsC 1 * 13 ) 


TBV-80 


Symbol 

Parameter 

Notes 

tAVAV 

Write Cycle Time 




tpHHEH 

Boot Block Lock Setup to 
CE# Going High 

6,8 

tVPEH 

Vpp Setup to CE# Going High 

5,8 

tAVEH 

Address Setup to CE# Going 
High 


*DVEH 

Data Setup to CE# Going 
High 

3 

*ELEH 

CE# Pulse Width 

4 

*EHDX 

Data Hold Time from CE# 
High 


*EHAX 

Address Hold Time from CE# 
High 

4 

tEHWH 

WE# Hold Time from CE# 
High 

3 

*EHEL 

CE# Pulse Width High 


l EHQV1 

Duration of Word/Byte Write 
Operation 

2,5 

tEHQV2 

Duration of Erase Operation 
(Boot) 

2,5,6 

tEHQV3 

Duration of Erase Operation 
(Parameter) 

2,5 

tEHQV4 

Duration of Erase Operation 
(Main) 

2,5 

*QWL 

Vpp Hold from Valid SRD 

5,8 

tQVPH 

RP# V hh Hold from Valid 
SRD 

6,8 

tpHBR 

Boot-Block Relock Delay 

7,8 



NOTES: 

See WE# Controlled Write Operations for notes 1 through 12. 

13. Chip-Enable controlled writes: Write operations are driven by the valid combination of CE# and WE# in systems where 
CE# defines the write pulse-width (within a longer WE# timing waveform), all set-up, hold and inactive WE# times 
should be measured relative to the CE# waveform. 


tp[F3©®ycnr rao 


4-120 


































2-MBIT SmartVoltage BOOT BLOCK FAMILY 


iny 


Table 24. Extended Temperature Operations— Erase and Program Timings 


Parameter 

Vpp=5V± 10% 



Vcc = 

3.3 + 0.3V 

V C C= 

5V±10% 



Typ 

Typ 

Typ 

Typ 

Boot/ Parameter Block Erase Time 

0.84 

0.8 

0.44 

0.34 

s 

Main Block Erase Time 

2.4 

1.9 

1.3 

1.1 

s 

Main Block Write Time (Byte Mode) 

1.7 

1.4 

1.6 

1.2 

s 

Main Block Write Time (Word Mode) 

1.1 

0.9 

0.8 

0.6 

s 

Byte Write Time 

10 

10 

8 

8 

JLlS 

Word Write Time 

13 

13 

8 

8 

jmS 


NOTES: 

1. All numbers are sampled, not 100% tested. 

2. Contact your Intel representative for information regarding maximum Byte/ Word Write specifications. 
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7.0 ADDITIONAL INFORMATION 

7.1 Ordering Information 



Access Speed 

(ns, V cc = 5V) 

T = Top Boot 
B = Bottom Boot 


Voltage Options (V PP / V cc ) 
V= (5 or 12/3.3 or 5) 


Architecture 

B = Boot Block 
C = Compact 48-Lead TSOP 
Boot Block 

290531-25 


VALID COMBINATIONS: 

40-Lead TSOP 
Commercial E28F002BVT60 
E28F002BVB60 
E28F002BVT80 
E28F002BVB80 
E28F002BVT120 
E28F002BVB120 


44-Lead PSOP 

PA28F200BVT60 
PA28F200BVB60 
PA28F200BVT80 
PA28F200BVB80 
PA28F200BVT 1 20 
PA28F200BVB1 20 


48-Lead TSOP 

E28F200CVT60 

E28F200CVB60 

E28F200CVT80 

E28F200CVB80 


56-Lead TSOP 

E28F200BVT60 

E28F200BVB60 

E28F200BVT80 

E28F200BVB80 


Extended 


TE28F002BVT80 TB28F200BVT80 

TE28F002BVB80 TB28F200BVB80 


TE28F200CVT80 

TE28F200CVB80 


TE28F200BVT80 

TE28F200BVB80 


Table 25. Summary of Line Items 


Name 

Vcc 

Vpp 

40- 

Lead 

TSOP 

44- 

Lead 

PSOP 

48- 

Lead 

TSOP 

56- 

Lead 

TSOP 

0°- + 70°C 














/> 

* 





* 


v * 


28F002BV 

V 
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7.2 References 


Order Number 

Document 

292130 

AB-57 “Boot Block Architecture for Safe Firmware Updates” 

292154 

AB-60 “2/4/8-Mbit SmartVoltage Boot Block Flash Memory Family” 

292098 

AP-363 “Extended Flash BIOS Concepts for Portable Computers” 

292148 

AP-604 “Using Intel’s Boot Block Flash Memory Parameter Blocks to Replace 
EEPROM” 

290448 

28F002/ 200BX-T / B 2-Mbit Boot Block Flash Memory Datasheet 

290449 

28F002/200BL-T/B 2-Mbit Low Power Boot Block Flash Memory Datasheet 

290450 

28F004/400BL-T/B 4-Mbit Low Power Boot Block Flash Memory Datasheet 

290451 

28F004/ 400BX-T / B 4-Mbit Boot Block Flash Memory Datasheet 

290530 

2-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 

290539 

8-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 


7.3 Revision History 


-001 


Initial release of datasheet 
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28F400BX-T/B, 28F004BX-T/B 
4 MBIT (256K x16, 51 2K x8) BOOT BLOCK FLASH 
MEMORY FAMILY 


■ x8/x16 Input/Output Architecture 

— 28F400BX-T, 28F400BX-B 

— For High Performance and High 
Integration 16-bit and 32-bit CPUs 

■ x8-only Input/Output Architecture 

— 28F004BX-T, 28F004BX-B 
— For Space Constrained 8-bit 

Applications 

■ Upgradeable to Intel’s Smart Voltage 
Products 

■ Optimized High Density Blocked 
Architecture 

— One 16-KB Protected Boot Block 
— Two 8-KB Parameter Blocks 
— One 96-KB Main Block 
— Three 128-KB Main Blocks 
— Top or Bottom Boot Locations 

■ Extended Cycling Capability 
— 100,000 Block Erase Cycles 

■ Automated Word/Byte Write and Block 
Erase 

— Command User Interface 
— Status Registers 
— Erase Suspend Capability 

■ SRAM-Compatible Write Interface 

■ Automatic Power Savings Feature 

— 1 mA Typical Ice Active Current in 
Static Operation 


■ Very High-Performance Read 

— 60/80/120 ns Maximum Access Time 

— 30/40/40 ns Maximum Output Enable 
Time 

■ Low Power Consumption 

— 20 mA Typical Active Read Current 

■ Reset/Deep Power-Down Input 

— 0.2 jliA Iqq Typical 

— Acts as Reset for Boot Operations 

■ Extended Temperature Operation 
40°C to + 85°C 

■ Write Protection for Boot Block 

■ Hardware Data Protection Feature 

— Erase/Write Lockout During Power 
Transitions 

■ Industry Standard Surface Mount 
Packaging 

— 28F400BX: JEDEC ROM Compatible 

44-Lead PSOP 
56-Lead TSOP 

— 28F004BX: 40-Lead TSOP 

H 12V Word/Byte Write and Block Erase 
— V PP = 12V ±5% Standard 
— V PP = 12V ±10% Option 

■ ETOX III Flash Technology 

— 5V Read 
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Intel’s 4-Mbit Flash Memory Family is an extension of the Boot Block Architecture which includes block-selec- 
tive erasure, automated write and erase operations and standard microprocessor interface. The 4-Mbit Flash 
Memory Family enhances the Boot Block Architecture by adding more density and blocks, x8/x16 input/out- 
put control, very high speed, low power, an industry standard ROM compatible pinout and surface mount 
packaging. The 4-Mbit flash family is an easy upgrade from Intel’s 2-Mbit Boot Block Flash Memory Family. 

The Intel 28F400BX-T/B are 16-bit wide flash memory offerings. These high density flash memories provide 
user selectable bus operation for either 8-bit or 16-bit applications. The 28F400BX-T and 28F400BX-B are 
4,194,304-bit non-volatile memories organized as either 524,288 bytes or 262,144 words of information. They 
are offered in 44-Lead plastic SOP and 56-Lead TSOP packages. The x8/x1 6 pinout conforms to the industry 
standard ROM/EPROM pinout. 

The Intel 28F004BX-T/B are 8-bit wide flash memories with 4,194,304 bits organized as 524,288 bytes of 
information. They are offered in a 40-Lead TSOP package, which is ideal for space-constrained portable 
systems. 


These devices use an integrated Command User Interface (CUI) and Write State Machine (WSM) for simplified 
word/byte write and block erasure. The 28F400BX-T/28F004BX-T provide block locations compatible with 
Intel’s MCS-186 family, 80286, i386TM, I486TM, j860TM and 80960CA microprocessors. The 28F400BX-B/ 
28F004BX-B provide compatibility with Intel’s 80960KX and 80960SX families as well as other embedded 
microprocessors. 


The boot block includes a data protection feature to protect the boot code in critical applications. With a 
maximum access time of 60 ns, these 4-Mbit flash devices are very high performance memories which 
interface at zero-wait-state to a wide range of microprocessors and microcontrollers. A deep power-down 
mode lowers the total Vqc power consumption to 1 /xW. This is critical in handheld battery powered systems. 
For very low power applications using a 3.3V supply, refer to the Intel 28F400BL-T/B, 28F004BL-T/B 4-Mbit 
Boot Block Flash Memory Family datasheet. 

Manufactured on Intel’s 0.8 micron ETOX III process, the 4-Mbit flash memory family provides world class 
quality, reliability and cost-effectiveness at the 4-Mbit density level. 
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1.0 PRODUCT FAMILY OVERVIEW 

Throughout this datasheet the 28F400BX refers to 
both the 28F400BX-T and 28F400BX-B devices and 
28F004BX refers to both the 28F004BX-T and 
28F004BX-B devices. The 4-Mbit flash memory fam- 
ily refers to both the 28F400BX and 28F004BX prod- 
ucts. This datasheet comprises the specifications for 
four separate products in the 4-Mbit flash memory 
family. Section 1 provides an overview of the 4-Mbit 
flash memory family including applications, pinouts 
and pin descriptions. Sections 2 and 3 describe in 
detail the specific memory organizations for the 
28F400BX and 28F004BX products respectively. 
Section 4 combines a description of the family’s 
principles of operations. Finally Section 5 describes 
the family’s operating specifications. 


Product Family 


X8/X16 Products 

X8-Only Products 

28F400BX-T 

28F004BX-T 

28F400BX-B 

28F004BX-B 


1 . 1 Designing for Upgrade to 
SmartVoltage Products 

Today’s high volume boot block products are up- 
gradable to Intel’s SmartVoltage boot block prod- 
ucts that provide program and erase operation at 5V 
or 12V Vpp and read operation at 3V or 5V Vcc- 
Intel’s SmartVoltage boot block products provide the 
following enhancements to the boot block products 
described in this data sheet: 

1. DU pin is replaced by WP# to provide a means 
to lock and unlock the boot block with logic sig- 
nals. 

2. 5V Program/Erase operation uses proven pro- 
gram and erase techniques with 5V ±10% ap- 
plied to Vpp. 

3. Enhanced circuits optimize performance at 3.3V 
Vcc- 

Refer to the 2, 4 or 8 Mbit SmartVoltage Boot Block 
Flash Memory Data Sheets for complete specifica- 
tions. 

When you design with 12V Vpp boot block products 
you should provide the capability in your board de- 
sign to upgrade to SmartVoltage products. 


inlel. 

Follow these guidelines to ensure compatibility: 

1. Connect DU (WP# on SmartVoltage products) to 
a control signal or to Vqo or GND. 

2. If adding a switch on Vpp for write protection, 
switch to GND for complete write protection. 

3. Allow for connecting 5V to Vpp and disconnect 
12V from the Vpp line, if desired. 


1.2 Main Features 

The 28F400BX/28F004BX boot block flash memory 
family is a very high performance 4-Mbit (4,194,304 
bit) memory family organized as either 256 KWords 
(262,144 words) of 16 bits each or 512 Kbytes 
(524,288 bytes) of 8 bits each. 

Seven Separately Erasable Blocks including a 
Hardware-Lockable boot block (16,384 Bytes), 
Two parameter blocks (8,192 Bytes each) and 
Four main blocks (1 block of 98,304 Bytes and 3 
blocks of 131,072 Bytes) are included on the 4-Mbit 
family. An erase operation erases one of the main 
blocks in typically 2.4 seconds and the boot or pa- 
rameter blocks in typically 1.0 seconds independent 
of the remaining blocks. Each block can be indepen- 
dently erased and programmed 100,000 times. 

The Boot Block is located at either the top 
(28F400BX-T, 28F004BX-T) or the bottom 

(28F400BX-B, 28F004BX-B) of the address map in 
order to accommodate different microprocessor pro- 
tocols for boot code location. The hardware locka- 
ble boot block provides the most secure code stor- 
age. The boot block is intended to store the kernel 
code required for booting-up a system. When the 
RP# pin is between 1 1 .4V and 12.6V the boot block 
is unlocked and program and erase operations can 
be performed. When the RP# pin is at or below 6.5V 
the boot block is locked and program and erase op- 
erations to the boot block are ignored. 

The 28F400BX products are available in the ROM/ 
EPROM compatible pinout and housed in the 
44-Lead PSOP (Plastic Small Outline) package and 
the 56-Lead TSOP (Thin Small Outline, 1.2mm thick) 
package as shown in Figures 3 and 4. The 
28F004BX products are available in the 40-Lead 
TSOP (1.2mm thick) package as shown in Figure 5. 

The Command User Interface (CUI) serves as the 
interface between the microprocessor or microcon- 
troller and the internal operation of the 28F400BX 
and 28F004BX flash memory products. 
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Program and Erase Automation allows program 
and erase operations to be executed using a two- 
write command sequence to the CUI. The internal 
Write State Machine (WSM) automatically executes 
the algorithms and timings necessary for program 
and erase operations, including verifications, there- 
by unburdening the microprocessor or microcontrol- 
ler. Writing of memory data is performed in word or 
byte increments for the 28F400BX family and in byte 
increments for the 28F004BX family typically within 
9 jus which is a 100% improvement over current 
flash memory products. 

The Status Register (SR) indicates the status of the 
WSM and whether the WSM successfully completed 
the desired program or erase operation. 

Maximum Access Time of 60 ns (TACC) is achieved 
over the commercial temperature range (0°C to 
70°C), 5% Vqq supply voltage range (4.75V to 
5.25V) and 30 pF output load. Maximum Access 
Time of 70 sis (TACC) is achieved over the commer- 
cial temperature range, 10% Vcc supply range (4.5V 
to 5.5V) and 100 pF output load. 

Ipp maximum Program current is 40 mA for x16 
operation and 30 mA for xB operation, ipp Erase 
current is 30 mA maximum. Vpp- erase and pro- 
gramming voltage is 11.4V to 12.6V (Vpp = 12V 
± 5%) under ail operating conditions. As an op- 
tion, Vpp can also vary between 10.8V to 13.2V (Vpp 
= 12V ± 10%) with a guaranteed number of 100 
block erase cycles. 

Typical Iqc Active Current of 25 mA is achieved 
for the XI 6 products (28F400BX). Typical Sec Ac- 
tive Current of 20 mA is achieved for the X8 prod- 
ucts (28F400BX, 28F004BX). Refer to the Iqc active 
current derating curves in this datasheet. 

The 4-Mbit boot block flash memory family is also 
designed with an Automatic Power Savings (APS) 
feature to minimize system battery current drain and 
allows for very low power designs. Once the device 
is accessed to read array data, APS mode will imme- 
diately put the memory in static mode of operation 
where Ice active current is typically 1 mA until the 
next read is initiated. 


When the CE# and RP# pins are at Vcc and the 
BYTE# pin (28F400BX-only) is at either Vcc or 
GND the CMOS Standby mode is enabled where 
Ice is typically 50 juA. 


A Deep Power-Down Mode is enabled when the 
RP# pin is at ground minimizing power consumption 
and providing write protection during power-up con- 
ditions. Iqc current during deep power-down mode 
is 0.20 fiA typical. An initial maximum access time 
or Reset Time of 300 ns is required from RP# 
switching until outputs are valid. Equivalently, the 
device has a maximum wake-up time of 215 ns until 
writes to the Command User Interface are recog- 
nized. When RP# is at ground the WSM is reset, the 
Status Register is cleared and the entire device is 
protected from being written to. This feature pre- 
vents data corruption and protects the code stored 
in the device during system reset. The system Reset 
pin can be tied to RP# to reset the memory to nor- 
mal read mode upon activation of the Reset pin. 
With on-chip program/erase automation in the 
4-Mbit family and the RP# functionality for data pro- 
tection, when the CPU is reset and even if a program 
or erase command is issued, the device will not rec- 
ognize any operation until RP# returns to its normal 
state. 

For the 28F400BX, Byte-wide or Word-wide In- 
put/Output Control is possible by controlling the 
BYTE 7# pin. When the BYTE# pin is at a logic low 
the device is in the byte-wide mode (x8) and data is 
read and written through DQ[0:7]. During the byte- 
wide mode, DQ [8:1 4] are tri-stated and DQ15/A-1 
becomes the lowest order address pin. When the 
BYTE# pin is at a logic high the device is in the 
word-wide mode (x16) and data is read and written 
through DQ[0:15]. 
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1.3 Applications 

The 4-Mbit boot block flash memory family com- 
bines high density, high performance, cost-effective 
flash memories with blocking and hardware protec- 
tion capabilities. Its flexibility and versatility will re- 
duce costs throughout the product life cycle. Flash 
memory is ideal for Just-In-Time production flow, re- 
ducing system inventory and costs, and eliminating 
component handling during the production phase. 

During the product life cycle, when code updates or 
feature enhancements become necessary, flash 
memory will reduce the update costs by allowing ei- 
ther a user-performed code change via floppy disk 
or a remote code change via a serial link. The 4-Mbit 
boot block flash memory family provides full func- 
tion, blocked flash memories suitable for a wide 
range of applications. These applications include 
Extended PC BIOS and ROM-able applications 
storage, Digital CeHular Phone program and data 
storage, Telecommunication boot/firmware, Print- 
er firmware/font storage and various other embed- 
ded applications where both program and data stor- 
age are required. 

Reprogrammable systems such as personal com- 
puters, are ideal applications for the 4-Mbit flash 
memory products. Portable and handheld personal 
computer applications are becoming more complex 
with the addition of power management software to 
take advantage of the latest microprocessor tech- 
nology, the availability of ROM-based application 
software, pen tablet code for electronic hand writing, 
and diagnostic code. Figure 1 shows an example of 
a 28F400BX-T application. 


intel. 

This increase in software sophistication augments 
the probability that a code update will be required 
after the PC is shipped. The 4-Mbit flash memory 
products provide an inexpensive update solution for 
the notebook and handheld personal computers 
while extending their product lifetime. Furthermore, 
the 4-Mbit flash memory products’ power-down 
mode provides added flexibility for these battery- 
operated portable designs which require operation 
at very low power levels. 

The 4-Mbit flash memory products also provide ex- 
cellent design solutions for Digital Cellular Phone 
and Telecommunication switching applications re- 
quiring high performance, high density storage capa- 
bility coupled with modular software designs, and a 
small form factor package (X8-only bus). The 
4-Mbit’s blocking scheme allows for an easy seg- 
mentation of the embedded code with; 1 6 Kbytes of 
Hardware-Protected Boot code, 4 Main Blocks of 
program code and 2 Parameter Blocks of 8 Kbytes 
each for frequently updatable data storage and diag- 
nostic messages (e.g., phone numbers, authoriza- 
tion codes). Figure 2 is an example of such an appli- 
cation with the 28F004BX-T. 

These are a few actual examples of the wide range 
of applications for the 4-Mbit Boot Block flash mem- 
ory family which enable system designers achieve 
the best possible product design. Only your imagina- 
tion limits the applicability of such a versatile product 
family. 
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Figure 1. 28F400BX interface to lnte!386TMEX Embedded Processor 



Figure 2. 28F004BX interface to INTEL 80C188EB 8-Bit Embedded Processor 
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1.4 Pinouts The 28F0 °4BX 40-Lead TSOP pinout shown in Fig- 

ure 5 is 100% compatible and provides a density 
The 28F400BX 44-Lead PSOP pinout follows the in- upgrade for the 2-Mbit Boot Block flash memory or 
dustry standard ROM/EPROM pinout as shown in the 28F002BX. 

Figure 3. Furthermore, the 28F400BX 56-Lead 
TSOP pinout shown in Figure 4 provides density up- 
grades to future higher density boot block memories. 



Figure 3. PSOP Lead Configuration for x8/x16 28F400BX 
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Figure 5. TSOP Lead Configuration for x8 28F004BX 
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1.5 28F400BX Pin Descriptions 


Symbol 

Type 

Name and Function 

a 0 -a 17 

1 

ADDRESS INPUTS for memory addresses. Addresses are internally latched during a write 
cycle. 

a 9 

1 

ADDRESS INPUT: When Ag is at 12 V the signature mode is accessed. During this mode Aq 
decodes between the manufacturer and device ID’s. When BYTE# is at a logic low only the 
lower byte of the signatures are read. DQ15/A.-1 is a don’t care in the signature mode when 
BYTE# is low. 


1/0 

DATA INPUTS/OUTPUTS: Inputs array data on the second CE# and WE# cycle during a 
program command. Inputs commands to the command user interface when CE# and WE# 
are active. Data is internally latched during the write and program cycles. Outputs array, 
Intelligent Identifier and Status Register data. The data pins float to tri-state when the chip is 
deselected or the outputs are disabled. 

DQ8-DQ15 

I/O 

DATA INPUTS/OUTPUTS: Inputs array data on the second CE# and WE# cycle during a 
program command. Data is internally latched during the write and program cycles. Outputs 
array data. The data pins float to tri-state when the chip is deselected or the outputs are 
disabled as in the byte-wide mode (BYTE# = “ 0 ”). In the byte-wide mode DQi5/A_i 
becomes the lowest order address for data output on DQ0-DQ7. 

CE# 

1 

CHIP ENABLE: Activates the device’s control logic, input buffers, decoders and sense 
amplifiers. CE# is active low; CE# high deselects the memory device and reduces power 
consumption to standby levels. If CE# and RP# are high, but not at a CMOS high level, the 
standby current will increase due to current flow through the CE# and RP# input stages. 

RP# 


RESET/DEEP POWER-DOWN: Provides three-state control. Puts the device in deep power- 
down mode. Locks the boot block from program /erase. 

When RP# is at logic high level and equals 6 . 5 V maximum the boot block is locked and 
cannot be programmed or erased. 

When RP# = 1 1 . 4 V minimum the boot block is unlocked and can be programmed or 
erased. 

When RP# is at a logic low level the boot block is locked, the deep power-down mode is 
enabled and the WSM is reset preventing any blocks from being programmed or erased, 
therefore providing data protection during power transitions. 

When RP# transitions from logic low to logic high the flash memory enters the read-array 
mode. 

OE# 

■ 

OUTPUT ENABLE: Gates the device’s outputs through the data buffers during a read cycle. 
OE# is active low. 

WE# 

■ 

WRITE ENABLE: Controls writes to the Command Register and array blocks. WE# is active 
low. Addresses and data are latched on the rising edge of the WE# pulse. 

BYTE# 

1 

BYTE# ENABLE: Controls whether the device operates in the byte-wide mode (x8) or the 
word-wide mode (x 16 ). BYTE# pin must be controlled at CMOS levels to meet 100 A CMOS 
current in the standby mode. BYTE# = “ 0 ” enables the byte-wide mode, where data is read 
and programmed on DQ0-DQ7 and DQ15/A--1 becomes the lowest order address that 
decodes between the upper and lower byte. DQ 8 -DQ 14 are tri-stated during the byte-wide 
mode. BYTE# = “ 1 ” enables the word-wide mode where data is read and programmed on 
DQ0-DQ15. 

mm 

■ 

PROGRAM/ERASE POWER SUPPLY: For erasing memory array blocks or programming 
data in each block. 

Note: Vpp < Vpplmax memory contents cannot be altered. 

v cc 


DEVICE POWER SUPPLY (5V ± 10%, 5V ± 5%) 



GROUND: For all internal circuitry. 

NC 


NO CONNECT: Pin may be driven or left floating. 

DU 


DON’T USE PIN: Pin should not be connected to anything. 


4-132 


I 











28F400BX-T/B, 28F004BX-T/B 



1.6 28F004BX P 

n Descriptions 

Symbol 

Type 

Name and Function 

A 0 -A 18 

1 

ADDRESS INPUTS for memory addresses. Addresses are internally latched during 
a write cycle. 

a 9 

1 

ADDRESS INPUT: When Ag is at 12V the signature mode is accessed. During this 
mode Ag decodes between the manufacturer and device ID’s. 

DQ 0 -DQ 7 

I/O 

DATA INPUTS/OUTPUTS: Inputs array data on the second CE# and WE# cycle 
during a program command. Inputs commands to the command user interface when 
CE# and WE# are active. Data is internally latched during the write and program 
cycles. Outputs array, Intelligent Identifier and status register data. The data pins 
float to tri-state when the chip is deselected or the outputs are disabled. 

CE# 

1 

CHIP ENABLE: Activates the device’s control logic, input buffers, decoders and 
sense amplifiers. CE# is active low; CE# high deselects the memory device and 
reduces power consumption to standby levels. If CE# and RP# are high, but not at 
a CMOS high level, the standby current will increase due to current flow through the 
CE# and RP# input stages. 

RP# 

1 

RESET/DEEP POWERDOWN: Provides Three-State control. Puts the device in 
deep power-down mode. Locks the Boot Block from program/erase. 

When RP# is at logic high level and equals 6.5V maximum the Boot Block is locked 
and cannot be programmed or erased. 

When RP# = 11.4V minimum the Boot Block is unlocked and can be programmed 
or erased. 

When RP# is at a logic low level the Boot Block is locked, the deep power-down 
mode is enabled and the WSM is reset preventing any blocks from being 
programmed or erased, therefore providing data protection during power transitions. 
When RP# transitions from logic low to logic high, the flash memory enters the 
read-array mode. 

OE# 

1 

OUTPUT ENABLE: Gates the device’s outputs through the data buffers during a 
read cycle. OE# is active low. 

WE# 

1 

WRITE ENABLE: Controls writes to the Command Register and array blocks. WE# 
is active low. Addresses and data are latched on the rising edge of the WE# pulse. 

Vpp 


PROGRAM/ERASE POWER SUPPLY: For erasing memory array blocks or 
programming data in each block. 

NOTE: Vpp < Vpplmax memory contents cannot be altered. 



DEVICE POWER SUPPLY (5V ± 10%, 5V ±5%) 



GROUND: For all internal circuitry. 

mm 


NO CONNECT: Pin may be driven or left floating. 

DU 


DON’T USE PIN: Pin should not be connected to anything. 
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Figure 6. 28F400BX Word/Byte Block Diagram 
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2.1 28F400BX Memory Organization 

2.1.1 BLOCKING 

The 28F400BX uses a blocked array architecture to 
provide independent erasure of memory blocks. A 
block is erased independently of other blocks in the 
array when an address is given within the block ad- 
dress range and the Erase Setup and Erase Confirm 
commands are written to the CUI. The 28F400BX is 
a random read/write memory, only erasure is per- 
formed by block. 

2.1.1. 1 Boot Block Operation and Data 
Protection 

The 16-Kbyte boot block provides a lock feature for 
secure code storage. The intent of the boot block is 
to provide a secure storage area for the kernel code 
that is required to boot a system in the event of pow- 
er failure or other disruption during code update. 
This lock feature ensures absolute data integrity by 
preventing the boot block from being written or 
erased when RP# is not at 12V. The boot block can 
be erased and written when RP# is held at 12V for 
the duration of the erase or program operation. This 
allows customers to change the boot code when 
necessary while providing security when needed. 
See the Block Memory Map section for address lo- 
cations of the boot block for the 28F400BX-T and 
28F400BX-B. 


2. 1.1.2 Parameter Block Operation 

The 28F400BX has 2 parameter blocks (8-Kbytes 
each). The parameter blocks are intended to provide 
storage for frequently updated system parameters 
and configuration or diagnostic information. The pa- 
rameter blocks can also be used to store additional 
boot or main code. The parameter blocks however, 
do not have the hardware write protection feature 
that the boot block has. The parameter blocks pro- 
vide for more efficient memory utilization when deal- 
ing with parameter changes versus regularly blocked 
devices. See the Block Memory Map section for ad- 
dress locations of the parameter blocks for the 
28F400BX-T and 28F400BX-B. 


2. 1.1. 3 Main Block Operation 

Four main blocks of memory exist on the 28F400BX 
(3 x 128-Kbyte blocks and 1 x 96-Kbyte blocks). See 
the following section on Block Memory Map for the 
address location of these blocks for the 28F400BX-T 
and 28F400BX-B products. 


2.1.2 BLOCK MEMORY MAP 

Two versions of the 28F400BX product exist to sup- 
port two different memory maps of the array blocks 
in order to accommodate different microprocessor 
protocols for boot code location. The 28F400BX-T 
memory map is inverted from the 28F400BX-B 
memory map. 

2.1. 2.1. 28F400BX-B Memory Map 

The 28F400BX-B device has the 16-Kbyte boot 
block located from 00000H to 01FFFH to accommo- 
date those microprocessors that boot from the bot- 
tom of the address map at 00000H. In the 
28F400BX-B the first 8-Kbyte parameter block re- 
sides in memory space from 02000H to 02FFFH. 
The second 8-Kbyte parameter block resides in 
memory space from 03000H to 03FFFH. The 
96-Kbyte main block resides in memory space from 
04000H to OFFFFH. The three 128-Kbyte main 
block resides in memory space from 10000H to 
1FFFFH, 20000H to 2FFFFH and 30000H to 
3FFFFH (word locations). See Figure 7. 


(Word Addresses) 
3FFFFH 



128-Kbyte MAIN BLOCK 



30000H 



2FFFFH 

128-Kbyte MAIN BLOCK 


20000H 



1FFFFH 

128-Kbyte MAIN BLOCK 


10000H 



OFFFFH 

96-Kbyte MAIN BLOCK 


04000H 



03FFFH 

03000H 

8-Kbyte PARAMETER BLOCK 


02FFFH 

8-Kbyte PARAMETER BLOCK 


02000H 


01FFFH 

OOOOOH 

16-Kbyte BOOT BLOCK 





Figure 7. 28F400BX-B Memory Map 
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2.1. 2.2 28F400BX-T Memory Map 

The 28F400BX-T device has the 16-Kbyte boot 
block located from 3E000H to 3FFFFH to accom- 
modate those microprocessors that boot from the 
top of the address map. In the 28F400BX-T the first 
8-Kbyte parameter block resides in memory space 
from 3D000H to 3DFFFH. The second 8-Kbyte pa- 
rameter block resides in memory space from 
3C000H to 3CFFFH. The 96-Kbyte main block re- 
sides in memory space from 30000H to 3BFFFH. 
The three 128-Kbyte main blocks reside in memory 
space from 20000H to 2FFFFH, 10000H to 1FFFFH 
and 00000H to OFFFFH as shown below in Figure 8. 


(Word Addresses) 
3FFFFH 



16-Kbyte BOOT BLOCK 



3E000H 



3DFFFH 

8-Kbyte PARAMETER BLOCK 


3D000H 


3CFFFH 

8-Kbyte PARAMETER BLOCK 


3C000H 


3BFFFH 

96-Kbyte MAIN BLOCK 


30000H 



2FFFFH 

128-Kbyte MAIN BLOCK 


20000H 



1FFFFH 

128-Kbyte MAIN BLOCK 


10000H 



OFFFFH 

00000H 

128-Kbyte MAIN BLOCK 





Figure 8. 28F400BX-T Memory Map 
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3.0 28F004BX PRODUCT DESCRIPTION 
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Figure 9. 28F004BX Byte-Wide Block Diagram 
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3.1 28F004BX Memory Organization 


3.1.1 BLOCKING 

The 28F004BX uses a blocked array architecture to 
provide independent erasure of memory blocks. A 
block is erased independently of other blocks in the 
array when an address is given within the block ad- 
dress range and the Erase Setup and Erase Confirm 
commands are written to the CUI. The 28F004BX is 
a random read/write memory, only erasure is per- 
formed by block. 

3. 1.1.1 Boot Block Operation and Data 
Protection 

The 1 6-Kbyte boot block provides a lock feature for 
secure code storage. The intent of the boot block is 
to provide a secure storage area for the kernel code 
that is required to boot a system in the event of pow- 
er failure or other disruption during code update. 
This lock feature ensures absolute data integrity by 
preventing the boot block from being programmed 
or erased when RP# is not at 12V. The boot block 
can be erased and programmed when RP# is held 
at 1 2V for the duration of the erase or program oper- 
ation. This allows customers to change the boot 
code when necessary while still providing security 
when needed. See the Block Memory Map section 
for address locations of the boot block for the 
28F004BX-T and 28F004BX-B. 


3. 1.1. 2 Parameter Block Operation 

The 28F004BX has 2 parameter blocks (8-Kbytes 
each). The parameter blocks are intended to provide 
storage for frequently updated system parameters 
and configuration or diagnostic information. The pa- 
rameter blocks can also be used to store additional 
boot or main code. The parameter blocks however, 
do not have the hardware write protection feature 
that the boot block has. Parameter blocks provide 
for more efficient memory utilization when dealing 
with small parameter changes versus regularly 
blocked devices. See the Block Memory Map sec- 
tion for address locations of the parameter blocks 
for the 28F004BX-T and 28F004BX-B. 


3. 1.1. 3 Main Block Operation 

Four main blocks of memory exist on the 28F004BX 
(3 x 128-Kbyte blocks and 1 X 96-Kbyte blocks). 
See the following section on Block Memory Map for 
the address location of these blocks for the 
28F004BX-T and 28F004BX-B. 


3.1.2 BLOCK MEMORY MAP 

Two versions of the 28F004BX product exist to sup- 
port two different memory maps of the array blocks 
in order to accommodate different microprocessor 
protocols for boot code location. The 28F004BX-T 
memory map is inverted from the 28F004BX-B 
memory map. 

3.1.2. 1 28F004BX-B Memory Map 

The 28F004BX-B device has the 16-Kbyte boot 
block located from 00000H to 03FFFH to accommo- 
date those microprocessors that boot from the bot- 
tom of the address map at 00000H. In the 
28F004BX-B the first 8-Kbyte parameter block re- 
sides in memory from 04000H to 05FFFH. The sec- 
ond 8-Kbyte parameter block resides in memory 
space from 06000H to 07FFFH. The 96-Kbyte main 
block resides in memory space from 08000H to 
1FFFFH. The three 128-Kbyte main block reside in 
memory space from 20000H to 3FFFFH, 40000H to 
5FFFFH and 60000H to 7FFFFH. See Figure 10. 


7FFFFH 



128-Kbyte MAIN BLOCK 



60000H 



5FFFFH 

128-Kbyte. MAIN BLOCK 


40000 H 



3FFFFH 

128-Kbyte MAIN BLOCK 


20000H 



1FFFFH 

96-Kbyte MAIN BLOCK 


08000H 



07FFFH 

8-Kbyte PARAMETER BLOCK 


06000 H 


05FFFH 

04000H 

8-Kbyte PARAMETER BLOCK 


03FFFH 

00000H 

16-Kbyte BOOT BLOCK 





Figure 10. 28F004BX-B Memory Map 
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3.1. 2.2 28F004BX-T Memory Map 

The 28F004BX-T device has the 16-Kbyte boot 
block located from 7C000H to 7FFFFH to accom- 
modate those microprocessors that boot from the 
top of the address map. In the 28F004BX-T the first 
8-Kbyte parameter block resides in memory space 
from 7A000H to 7BFFFH. The second 8-Kbyte pa- 
rameter block resides in memory space from 
78000H to 79FFFH. The 96-Kbyte main block re- 
sides in memory space from 60000H to 77FFFH. 
The three 128-Kbyte main blocks reside in memory 
space from 40000H to 5FFFFH, 20000H to 3FFFFH 
and 00000H to 1FFFFH. 


7FFFFH 



16-Kbyte BOOT BLOCK 



7C000H 



7BFFFH 

8-Kbyte PARAMETER BLOCK 


7A000H 


79FFFH 

78000H 

8-Kbyte PARAMETER BLOCK 


77FFFH 

96-Kbyte MAIN BLOCK 


60000H 



5FFFFH 

128-Kbyte MAIN BLOCK 


40000 H 



3FFFFH 

128-Kbyte MAIN BLOCK 


20000H 



1FFFFH 

00000H 

128-Kbyte MAIN BLOCK 





Figure 11. 28F004BX-T Memory Map 


4.0 PRODUCT FAMILY PRINCIPLES 
OF OPERATION 

Flash memory augments EPROM functionality with 
in-circuit electrical write and erase. The 4-Mbit flash 
family utilizes a Command User Interface (CUI) and 
internally generated and timed algorithms to simplify 
write and erase operations. 

The CUI allows for 100% TTL-level control inputs, 
fixed power supplies during erasure and program- 
ming, and maximum EPROM compatibility. 

In the absence of high voltage on the Vpp pin, the 
4-Mbit boot block flash family will only successfully 
execute the following commands: Read Array, Read 
Status Register, Clear Status Register and Intelli- 
gent Identifier mode. The device provides standard 
EPROM read, standby and output disable opera- 
tions. Manufacturer Identification and Device Identi- 
fication data can be accessed through the CUI or 
through the standard EPROM Ag high voltage ac- 
cess (Vid) for PROM programming equipment. 

The same EPROM read, standby and output disable 
functions are available when high voltage is applied 
to the Vpp pin. In addition, high voltage on Vpp al- 
lows write and erase of the device. All functions as- 
sociated with altering memory contents: write and 
erase, Intelligent Identifier read and Read Status are 
accessed via the CUI. 

The purpose of the Write State Machine (WSM) is to 
completely automate the write and erasure of the 
device. The WSM will begin operation upon receipt 
of a signal from the CUI and will report status back 
through a Status Register. The CUI will handle the 
WE# interface to the data and address latches, as 
well as system software requests for status while the 
WSM is in operation. 


4.1 28F400BX Bus Operations 

Flash memory reads, erases and writes in-system 
via the local CPU. All bus cycles to or from the flash 
memory conform to standard microprocessor bus 
cycles. 
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Table 1. Bus Operations for WORD-WIDE Mode (BYTE# = V iH ) 


Mode 

Notes 

RP# 

CE# 

OE# 

WE# 

A 9 

Ao 

Vpp 

U) 

1 

0 

0 

0 

Read 

1,2,3 

V| H 

V|L 

V|L 

V|H 

X 

X 

X 

d out 

Output Disable 


V|H 

VlL 

V|H 

V|H 

X 

X 

X 

High Z 

Standby 



V| H 

X 

X 

X 


mm 

KBB 


9 

| 

X 

X 

X 

X 

D 

mm 



4 



VlL 

V|H 

V|D 

WM 

X 

0089H 

Intelligent Identifier (Device) 

B 



V|L 

V|H 

V|D 




Write 

6, 7,8 





X 

X 

1 



Table 2. Bus Operations for BYTE-WIDE Mode (BYTE# = V, L ) 


Mode 








EB8 



DQa-14 

Read 





V|H 

D 

X 

X 

D 


1 






V|H 

D 

D 


■ 


KliB 

Standby 




mm 

X 

D 

D 


D 

High Z 

High Z 


9 


M 

X 

X 

X 

X 

X 

X 

High Z 

IBBifll 

Intelligent 
Identifier (Mfr) 

H 




V|H 



X 

X 

89H 

jj 

Intelligent 
Identifier (Device) 

4,5 

V|H 

V|L 

VlL 

V|H 



X 

X 

70H 
71 H 

High Z 

Write 

6, 7, 8 

ViH 

V|L 

V|H 

V|L 

X 

X 

X 

X 

Din 

High Z 


NOTES: 

1 . Refer to DC Characteristics. 

2. X can be V|_, V|h for control pins and addresses, Vpp|_ or Vppn for Vpp. 

3. See DC Characteristics for Vppi_, Vppn, Vhh, v id voltages. 

4. Manufacturer and Device codes may also be accessed via a CUI write sequence. A1-A17 = X. 

5. Device ID = 4470H for 28F400BX-T and 4471 H for 28F400BX-B. 

6. Refer to Table 4 for valid Din during a write operation. 

7. Command writes for Block Erase or Word/Byte Write are only executed when Vpp = Vppn- 

8. To write or erase the boot block, hold RP# at Vhh- 

9. RP# must be at GND ±0.2V to meet the 1.2 juA maximum deep power-down current. 
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4.2 28F004BX Bus Operations 


Table 3. Bus Operations 


Mode 

Notes 

RP# 

CE# 

OE# . 

WE# 

a 9 

Ao 

Vpp 

DQ 0-7 

Read 

1,2,3 

V|H 

V|L 

V|L 

V| H 

X 

X 

X 

Dout 

Output Disable 


V|H 

V|L 

V|H 

V|H 

X 

X 

X 

High Z 

Standby 


V|H 

V|H 

X 

X 

X 

X 

X 

High Z 

Deep Power-Down 

9 

VlL 

X 

X 

X 

X 

X 

X 

High Z 

Intelligent Identifier (Mfr) 

4 

V|H 

V|L 

VlL 

V|H 

V|D 

VlL 

X 

89H 

Intelligent Identifier (Device) 

4,5 

V|H 

V|L 

V|L 

V|H 

V|D 

V| H 

X 

78H 

79H 

Write 

6 , 7,8 

V|H 

V| L 

V| H 

VlL 

X 

X 

X 

Din 


NOTES: 

1 . Refer to DC Characteristics. 

2. X can be V||_ or Vm for control pins and addresses, VppL or Vppn for Vpp. 

3. See DC Characteristics for Vppi_, Vppn, Vhh. Vid voltages. 

4. Manufacturer and Device codes may also be accessed via a CUI write sequence. A-i-Aiq = X. 

5. Device ID = 78H for 28F004BX-T and 79H for 28F004BX-B. 

6. Refer to Table 4 for valid Din during a write operation. 

7. Command writes for Block erase or byte program are only executed when Vpp = Vppn- 
6. Program or erase the Boot block by holding RP# at Vhh- 

9. RP# must be at GND ±0.2V to meet the 1.2 jaA maximum deep power-down current. 


4.3 Read Operations 

The 4-Mbit boot block flash family has three user 
read modes; Array, Intelligent Identifier, and Status 
Register. Status Register read mode will be dis- 
cussed in detail in the “Write Operations” section. 

During power-up conditions (Vcc supply ramping), it 
takes a maximum of 600 ns from when Vcc is at 
4.5V minimum to valid data on the outputs. 

4.3.1 READ ARRAY 

If the memory is not in the Read Array mode, it is 
necessary to write the appropriate read mode com- 
mand to the CUI. The 4-Mbit boot block flash family 
has three control functions, all of which must be 
logically active, to obtain data at the outputs. 
Chip-Enable CE# is the device selection control. 
Power-Down RP# is the device power control. Out- 
put-Enable OE# is the DATA INPUT/OUTPUT 
(DQ[0: 1 5] or DQ[0:7]) direction control and when 
active is used to drive data from the selected memo- 
ry on to the I/O bus. 

4.3.1. 1 Output Control 

With OE# at logic-high level (Vm), the output from 
the device is disabled and data input/output pins 
(DQ[0:1 5] or DQ[0:7] are tri-stated. Data input is 
then controlled by WE#. 


4.3.1. 2 Input Control 

With WE# at logic-high level (Vm), input to the de- 
vice is disabled. Data Input/Output pins (DQ[0:1 5] 
or DQ[0:7]) are controlled by OE#. 


4.3.2 INTELLIGENT IDENTIFIERS 


28F400BX PRODUCTS 

The manufacturer and device codes are read via the 
CUI or by taking the Ag pin to 12V. Writing 90H to 
the CUI places the device into Intelligent Identifier 
read mode. A read of location 00000H outputs the 
manufacturer’s identification code, 0089H, and loca- 
tion 00001 H outputs the device code; 4470H for 
28F400BX-T, 4471 H for 28F400BX-B. When 

BYTE# is at a logic low only the lower byte of the 
above signatures is read and DQ 15 /A -1 is a “don’t 
care” during Intelligent Identifier mode. A read array 
command must be written to the memory to return to 
the read array mode. 


28F004BX PRODUCTS 

The manufacturer and device codes are also read 
via the CUI or by taking the Ag pin to 12V. Writing 
90H to the CUI places the device into Intelligent 
Identifier read mode. A read of location 00000H out- 
puts the manufacturer’s identification code, 89H, 
and location 00001 H outputs the device code; 78H 
for 28F004BX-T, 79H for 28F004BX-B. 
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4.4 Write Operations 

Commands are written to the CUI using standard mi- 
croprocessor write timings. The CUI serves as the 
interface between the microprocessor and' the inter- 
nal chip operation. The CUI can decipher Read Ar- 
ray, Read Intelligent Identifier, Read Status Register, 
Clear Status Register, Erase and Program com- 
mands. In the event of a read command, the CUI 
simply points the read path at either the array, the 
Intelligent Identifier, or the status register depending 
on the specific read command given. For a program 
or erase cycle, the CUI informs the write state ma- 
chine that a write or erase has been requested. Dur- 
ing a program cycle, the Write State Machine will 
control the program sequences and the CUI will only 
respond to status reads. During an erase cycle, the 
CUI will respond to status reads and erase suspend. 
After the Write State Machine has completed its 
task, it will allow the CUI to respond to its full com- 
mand set. The CUI will stay in the current command 
state until the microprocessor issues another com- 
mand. 

The CUI will successfully initiate an erase or write 
operation only when Vpp is within its voltage range. 
Depending upon the application, the system design- 
er may choose to make the Vpp power supply 
switchable, available only when memory updates 
are desired. The system designer can also choose 
to “hard-wire” Vpp to 12V. The 4-Mbit boot block 
flash family is designed to accommodate — either de- 
sign practice. It is recommended that RP# be tied to 
logical Reset for data protection during unstable 
CPU reset function as described in the “Product 
Family Overview” section. 

4.4.1 BOOT BLOCK WRITE OPERATIONS 

In the case of Boot Block modifications (write and 
erase), RP# is set to Vhh = 12V typically, in addi- 
tion to Vpp at high voltage. 


intel. 

However, if RP# is not at Vhh when a program or 
erase operation of the boot block is attempted, the 
corresponding status register bit (Bit 4 for Program 
and Bit 5 for Erase, refer to Table 5 for Status Regis- 
ter Definitions) is set to indicate the failure to com- 
plete the operation. 

4.4.2 COMMAND USER INTERFACE (CUI) 

The Command User Interface (CUI) serves as the 
interface to the microprocessor. The CUI points the 
read/write path to the appropriate circuit block as 
described in the previous section. After the WSM 
has completed its task, it will set the WSM Status bit 
to a “1”, which will also allow the CUI to respond to 
its full command set. Note that after the WSM has 
returned control to the CUI, the CUI will remain in its 
current state. 


4.4.2. 1 Command Set 


Command 

Codes 

Device Mode 

00 

Invalid/ Reserved 

10 

Alternate Program Setup 

20 

Erase Setup 

40 

Program Setup 

50 

Clear Status Register 

70 

Read Status Register 

90 

Intelligent Identifier 

B0 

Erase Suspend 

DO 

Erase Resume/ Erase Confirm 

FF 

Read Array 


4.4.2.2 Command Function Descriptions 

Device operations are selected by writing specific 
commands into the CUI. Table 4 defines the 4-Mbit 
boot block flash family commands. 
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Table 4. Command Definitions 


Command 

Bus 

Cycles 

Req’d 

Notes 

First Bus Cycle 

Second Bus Cycle 

8 

Operation 

Address 

Data 

Operation 

Address 

Data 

Read Array 

1 

1 

Write 

X 

FFH 




Intelligent Identifier 

3 

2,4 

Write 

X 

90H 

Read 

IA 

IID 

Read Status Register 

2 

3 

Write 

X 

70H 

Read 

X 

SRD 

Clear Status Register 

1 


Write 

X 

50H 




Erase Setup/Erase Confirm 

2 

5 

Write 

BA 

20H 

Write 

BA 

DOH 

Word/Byte Write Setup/Write 

2 

6,7 

Write 

WA 

40H 

Write 

WA 

WD 

Erase Suspend/Erase Resume 

2 


Write 

X 

BOH 

Write 

X 

DOH 

Alternate Word/Byte 
Write Setup/Write 

2 

6,7 

Write 

WA 

10H 

Write 

WA 

WD 


NOTES: 

1. Bus operations are defined in Tables 1, 2, 3. 

2. IA = Identifier Address: 00H for manufacturer code, 01 H for device code. 

3. SRD = Data read from Status Register. 

4. IID = Intelligent Identifier Data. 

Following the Intelligent Identifier Command, two read operations access manufacturer and device codes. 

5. BA = Address within the block being erased. 

6. WA = Address to be written. 

WD = Data to be written at location WD. 

7. Either 40H or 10H commands is valid. 

8. When writing commands to the device, the upper data bus [DQq-DQ-is] = X (28F400BX-only) which is either Vqq or Vss 
to avoid burning additional current. 



Invalid/Reserved 

These are unassigned commands. It is not recom- 
mended that the customer use any command other 
than the valid commands specified above. Intel re- 
serves the right to redefine these codes for future 
functions. 


Read Array (FFH) 

This single write command points the read path at 
the array. If the host CPU performs a CE#/OE# 
controlled read immediately following a two-write se- 
quence that started the WSM, then the device will 
output status register contents. If the Read Array 
command is given after Erase Setup the device is 
reset to read the array. A two Read Array command 
sequence (FFH) is required to reset to Read Array 
after Program Setup. 

Intelligent Identifier (9GH) 

After this command is executed, the CUI points the 
output path to the Intelligent Identifier circuits. Only 
Intelligent Identifier values at addresses 0 and 1 can 
be read (only address Aq is used in this mode, all 
other address inputs are ignored). 


Read Status Register (70H) 

This is one of the two commands that is executable 
while the state machine is operating. After this com- 
mand is written, a read of the device will output the 
contents of the status register, regardless of the ad- 
dress presented to the device. 

The device automatically enters this mode after pro- 
gram or erase has completed. 

Clear Status Register (50H) 

The WSM can only set the Program Status and 
Erase Status bits in the status register, it can not 
clear them. Two reasons exist for operating the 
status register in this fashion. The first is a synchro- 
nization. The WSM does not know when the host 
CPU has read the status register, therefore it would 
not know when to clear the status bits. Secondly, if 
the CPU is programming a string of bytes, it may be 
more efficient to query the status register after pro- 
gramming the string. Thus, if any errors exist while 
programming the string, the status register will return 
the accumulated error status. 
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Program Setup (40H or 10H) 

This command simply sets the CUI into a state such 
that the next write will load the address and data 
registers. Either 40H or 10H can be used for Pro- 
gram Setup. Both commands are included to ac- 
commodate efforts to achieve an industry standard 
command code set. 


Program 

The second write after the program setup command, 
will latch addresses and data. Also, the CUI initiates 
the WSM to begin execution of the program algo- 
rithm. While the WSM finishes the algorithm, the de- 
vice will output Status Register contents. Note that 
the WSM cannot be suspended during program- 
ming. 


Erase Setup (20H) 

Prepares the CUI for the Erase Confirm command. 
No other action is taken. If the next command is not 
an Erase Confirm command then the CUI will set 
both the Program Status and Erase Status bits of the 
Status Register to a “1”, place the device into the 
Read Status Register state, and wait for another 
command. 


Erase Confirm (DOH) 

If the previous command was an Erase Setup com- 
mand, then the CUI will enable the WSM to erase, at 
the same time closing the address and data latches, 
and respond only to the Read Status Register and 
Erase Suspend commands. While the WSM is exe- 
cuting, the device will output Status Register data 
when OE# is toggled low. Status Register data can 
only be updated by toggling either OE# or CE# low. 


Erase Suspend (BOH) 

This command only has meaning while the WSM is 
executing an Erase operation, and therefore will only 
be responded to during an erase operation. After 
this command has been executed, the CUI will set 
an output that directs the WSM to suspend Erase 
operations, and then return to responding to only 
Read Status Register or to the Erase Resume com- 
mands. Once the WSM has reached the Suspend 
state, it will set an output into the CUI which allows 
the CUI to respond to the Read Array, Read Status 
Register, and Erase Resume commands. In this 
mode, the CUI will not respond to any other com- 
mands. The WSM will also set the WSM Status bit to 
a “1”. The WSM will continue to run, idling in the 
SUSPEND state, regardless of the state of all input 
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control pins, with the exclusion of RP#. RP# will 
immediately shut down the WSM and the remainder 
of the chip. During a suspend operation, the data 
and address latches will remain closed, but the ad- 
dress pads are able to drive the address into the 
read path. 

Erase Resume (DOH) 

This command will cause the CUI to clear the Sus- 
pend state and set the WSM Status bit to a “0”, but 
only if an Erase Suspend command was previously 
issued. Erase Resume will not have any effect in all 
other conditions. 


4.4.3 STATUS REGISTER 

The 4-Mbit boot block flash family contains a status 
register which may be read to determine when a pro- 
gram or erase operation is complete, and whether 
that operation completed successfully. The status 
register may be read at any time by writing the Read 
Status command to the CUI. After writing this com- 
mand, all subsequent Read operations output data 
from the status register until another command is 
written to the CUI. A Read Array command must be 
written to the CUI to return to the Read Array mode. 

The status register bits are output on DQ[0:7] 
whether the device is in the byte-wide (x8) or word- 
wide (x16) mode for the 28F400BX. In the word-wide 
mode the upper byte, DQ[8:15] is set to 00H during 
a Read Status command. In the byte-wide mode, 
DQ[8:14] are tri-stated and DQ 15 /A_i retains the 
low order address function. 

It should be noted that the contents of the status 
register are latched on the falling edge of OE# or 
CE# whichever occurs last in the read cycle. This 
prevents possible bus errors which might occur if the 
contents of the status register change while reading 
the status register. CE# or OE# must be toggled 
with each subsequent status read, or the completion 
of a program or erase operation will not be evident. 

The Status Register is the interface between the mi- 
croprocessor and the Write State Machine (WSM). 
When the WSM is active, this register will indicate 
the status of the WSM, and will also hold the bits 
indicating whether or not the WSM was successful in 
performing the desired operation. The WSM sets 
status bits “Three” through “Seven” and clears bits 
“Six” and “Seven”, but cannot clear status bits 
“Three” through “Five”. These bits can only be 
cleared by the controlling CPU through the use of 
the Clear Status Register command. 
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4.4.3. 1 Status Register Bit Definition 

Table 5. Status Register Definitions 


WSMS ESS 


PS VPPS 


SR. 7 = WRITE STATE MACHINE STATUS 
1 = Ready 
0 = Busy 


SR.6 = ERASE SUSPEND STATUS 
1 = Erase Suspended 
0 = Erase in Progress/Completed 


SR.5 = ERASE STATUS 
1 = Error in Block Erasure 

0 = Successful Block Erase 

SR.4 = PROGRAM STATUS 

1 = Error In Byte/Word Program 

0 = Successful Byte/Word Program 

SR.3 = V PP STATUS 

1 = Vpp Low Detect; Operation Abort 
0 = Vpp OK 


SR.2-SR.0 = RESERVED FOR 
FUTURE ENHANCEMENTS 


NOTES: 

Write State Machine Status bit must first be checked to 
determine byte/word program or block erase comple- 
tion, before the Program or Erase Status bits are 
checked for success. 

When Erase Suspend is issued, WSM halts execution 
and sets both WSMS and ESS bits to “1”. ESS bit re- 
mains set to “1” until an Erase Resume command is 
issued. 

When this bit is set to “1”. WSM has applied the maxi- 
mum number of erase pulses to the block and is still 
unable to successfully perform an erase verify. 

When this bit is set to “1”, WSM has attempted but 
failed to Program a byte or word. 


The Vpp Status bit unlike an A/D converter, does not 
provide continuous indication of Vpp level. The WSM 
interrogates the Vpp level only after the byte write or 
block erase command sequences have been entered 
and informs the system if Vpp has not been switched 
on. The Vpp Status bit is not guaranteed to report ac- 
curate feedback between Vppi_ and Vppn- 

These bits are reserved for future use and should be 
masked out when polling the Status Register. 


4.4.3.2 Clearing the Status Register 

Certain bits in the status register are set by the write 
state machine, and can only be reset by the system 
software. These bits can indicate various failure con- 
ditions. By allowing the system software to control 
the resetting of these bits, several operations may 
be performed (such as cumulatively programming 
several bytes or erasing multiple blocks in se- 
quence). The status register may then be read to 
determine if an error occurred during that program- 
ming or erasure series. This adds flexibility to the 
way the device may be programmed or erased. To 
clear the status register, the Clear Status Register 
command is written to the CUI. Then, any other 
command may be issued to the CUI. Note again that 
before a read cycle can be initiated, a Read Array 
command must be written to the CUI to specify 
whether the read data is to come from the array, 
status register, or Intelligent Identifier. 


4.4.4 PROGRAM MODE 

Program is executed by a two-write sequence. The 
Program Setup command is written to the CUI fol- 
lowed by a second write which specifies the address 
and data to be programmed. The write state ma- 
chine will execute a sequence of internally timed 
events to: 

1 . Program the desired bits of the addressed mem- 
ory word (byte), and 

2. Verify that the desired bits are sufficiently pro- 
grammed. 

Programming of the memory results in specific bits 
within a byte or word being changed to a “0”. 

If the user attempts to program “1 ”s, there will be no 
change of the memory cell content and no error oc- 
curs. 
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Similar to erasure, the status register indicates 
whether programming is complete. While the pro- 
gram sequence is executing, bit 7 of the status regis- 
ter is a “0”. The status register can be polled by 
toggling either CE# or OE# to determine when the 
program sequence is complete. Only the Read 
Status Register command is valid while program- 
ming is active. 

When programming is complete, the status bits, 
which indicate whether the program operation was 
successful, should be checked. If the programming 
operation was unsuccessful, Bit 4 of the status regis- 
ter is set to a “1” to indicate a Program Failure. If 
Bit 3 is set then Vpp was not within acceptable limits, 
and the WSM will not execute the programming se- 
quence. 

The status register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after programming is completed; however, it 
must be recognized that reads from the memory, 
status register, or Intelligent Identifier cannot be ac- 
complished until the CUI is given the appropriate 
command. A Read Array command must first be giv- 
en before memory contents can be read. 

Figure 1 2 shows a system software flowchart for de- 
vice byte programming operation. Figure 13 shows a 
similar flowchart for device word programming oper- 
ation (28F400BX-only). 

4.4.5 ERASE MODE 

Erasure of a single block is initiated by writing the 
Erase Setup and Erase Confirm commands to the 
CUI, along with the addresses, A[1 2:1 7] for the 
28F400BX or A[12:18] for the 28F004BX, identifying 
the block to be erased. These addresses are latched 
internally when the Erase Confirm command is is- 
sued. Block erasure results in all bits within the block 
being set to “1”. 

The WSM will execute a sequence of internally 
timed events to: 

1. Program all bits within the block 

2. Verify that all bits within the block are sufficiently 
programmed 

3. Erase all bits within the block and 

4. Verify that all bits within the block are sufficiently 
erased 
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While the erase sequence is executing, Bit 7 of the 
status register is a “0”. 

When the status register indicates that erasure is 
complete, the status bits, which indicate whether the 
erase operation was successful, should be checked. 
If the erasure operation was unsuccessful, Bit 5 of 
the status register is set to a “1” to indicate an 
Erase Failure. If Vpp was not within acceptable limits 
after the Erase Confirm command is issued, the 
WSM will not execute an erase sequence; instead, 
Bits of the status register is set to a “1” to indicate 
an Erase Failure, and Bit 3 is set to a “1” to identify 
that Vpp supply voltage was not within acceptable 
limits. 

The status register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after erasure is completed; however, it must 
be recognized that reads from the memory array, 
status register, or Intelligent Identifier can not be ac- 
complished until the CUI is given the appropriate 
command. A Read Array command must first be giv- 
en before memory contents can be read. 

Figure 14 shows a system software flowchart for 
Block Erase operation. 

4.4.5. 1 Suspending and Resuming Erase 

Since an erase operation typically requires 1 to 3 
seconds to complete, an Erase Suspend command 
is provided. This allows erase-sequence interruption 
in order to read data from another block of the mem- 
ory. Once the erase sequence is started, writing the 
Erase Suspend command to the CUI requests that 
the Write State Machine (WSM) pause the erase se- 
quence at a predetermined point in the erase algo- 
rithm. The status register must be read to determine 
when the erase operation has been suspended. 

At this point, a Read Array command can be written 
to the CUI in order to read data from blocks other 
than that which is being suspended. The only other 
valid command at this time is the Erase Resume 
command or Read Status Register operation. 

Figure 1 5 shows a system software flowchart detail- 
ing the operation. 
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During Erase Suspend mode, the chip can go into a 
pseudo-standby mode by taking QE# to V|h and the 
active current is now a maximum of 10 mA. If the 
chip is enabled while in this mode by taking CE# to 
V|l, the Erase Resume command can be issued to 
resume the erase operation. 

Upon completion of reads from any block other than 
the block being erased, the Erase Resume com- 
mand must be issued. When the Erase Resume 
command is given, the WSM will continue with the 
erase sequence and complete erasing the block. As 
with the end of erase, the status register must be 
read, cleared, and the next instruction issued in or- 
der to continue. 


28F400BX-T/B, 28F004BX-T/B 


4.4.6 EXTENDED CYCLING 

Intel has designed extended cycling capability into 
its ETOX III flash memory technology. The 4-Mbit 
boot block flash family is designed for 100,000 pro- 
gram/erase cycles on each of the seven blocks. The 
combination of low electric fields, clean oxide pro- 
cessing and minimized oxide area per memory cell 
subjected to the tunneling electric field, results in 
very high cycling capability. 


4 
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Bus 

Operation 

Command 

Comments 

Write 

Setup 

Program 

Data = 40H 
Address = Byte to be 
programmed 

Write 

Program 

Data to be programmed 
Address = Byte to be 
programmed 

Read 


Status Register Data. 

Toggle OE# or CE# to update 
Status Register 

Standby 


Check SR. 7 
1 = Ready, 0 = Busy 

Repeat for subsequent bytes. 

Full status check can be done after each byte or after a 
sequence of bytes. 

Write FFH after the last byte programming operation to 
reset the device to Read Array Mode. 



290451 -6 


Full Status Check Procedure 



Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4 

1 = Byte Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 

SR.4 is only cleared by the Clear Status Register 
Command, in cases where multiple bytes are programmed 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 12. Automated Byte Programming Flowchart 
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Full Status Check Procedure 



Bus 

Operation 

Command 

Comments 

Write 

Setup 

Program 

Data = 40H 
Address = Word to be 
programmed 

Write 

Program 

Data to be programmed 
Address = Word to be 
programmed 

Read 


Status Register Data. 

Toggle OE# or CE# to update 
Status Register 

Standby 


Check SR. 7 
1 = Ready, 0 = Busy 

Repeat for subsequent words. 

Full status check can be done after each word or after a 
sequence of words. 

Write FFH after the last word programming operation to 
reset the device to Read Array Mode. 


Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4 

1 = Word Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 

SR.4 is only cleared by the Clear Status Register 
Command, in cases where multiple words are programmed 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 13. Automated Word Programming Flowchart 
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Full Status Check Procedure 



Bus 

Operation 

Command 

Comments 

Write 

Setup 

Erase 

Data = 20H 

Address = Within block to be 
erased 

Write 

Erase 

Data = DOH 

Address = Within block to be 
erased 

Read 


Status Register Data. 

Toggle OE# orCE# to update 
Status Register 

Standby 


Check SR. 7 
1 = Ready, 0 = Busy 

Repeat for subsequent blocks. 

Full status check can be done after each block or after a 
sequence of blocks. 

Write FFH after the last block erase operation to reset the 
device to Read Array Mode. 


Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4,5 

Both 1 = Command Sequence 
Error 

Standby 


Check SR.5 
1 = Block Erase Error 

SR.3 MUST be cleared, if set during an erase attempt, 
before further attempts are allowed by the Write State 
Machine. 

SR.5 is only cleared by the Clear Status Register 
Command, in cases where multiple blocks are erased 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 14. Automated Block Erase Flowchart 
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Figure 15. Erase Suspend/Resume Flowchart 


4.5 Power Consumption 

4.5.1 ACTIVE POWER 

With CE# at a logic-low level and RP# at a logic- 
high level, the device is placed in the active mode. 
The device Ice current is a maximum 60 mA at 
10 MHz with TTL input signals. 

4.5.2 AUTOMATIC POWER SAVINGS 

Automatic Power Savings (APS) is a low pwer fea- 
ture during active mode of operation. The 4-Mbit 
family of products incorporate Power Reduction 
Control (PRC) circuitry which basically allows the de- 
vice to put itself into a low current state when it is 
not being accessed. After data is read from the 
memory array, PRC logic controls the device’s pow- 
er consumption by entering the APS mode where 


maximum Iqq current is 3 mA and typical Ice current 
is 1 mA. The device stays in this static state with 
outputs valid until a new location is read. 

4.5.3 STANDBY POWER 

With CE# at a logic-high level (Vih), and the CUI in 
read mode, the memory is placed in standby mode 
where the maximum Ice standby current is 100 jmA 
with CMOS input signals. The standby operation dis- 
ables much of the device’s circuitry and substantially 
reduces device power consumption. The outputs 
(DQ[0:15] or DQ[0:7]) are placed in a high-imped- 
ance state independent of the status of the OE# 
signal. When the 4-Mbit boot block flash family is 
deselected during erase or program functions, the 
devices will continue to perform the erase or pro- 
gram function and consume program or erase active 
power until program or erase is completed. 
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4.5.4 RESET/DEEP POWERDOWN 

The 4-Mbit boot block flash family supports a typical 
Ice of 0.2 ju, A in deep power-down mode. One of the 
target markets for these devices is in portable equip- 
ment where the power consumption of the machine 
is of prime importance. The 4-Mbit boot block flash 
family has a RP# pin which places the device in the 
deep powerdown mode. When RP# is at a logic-low 
(GND ±0.2V), all circuits are turned off and the de- 
vice typically draws 0.2 juA of Vcc current. 

During read modes, the RP# pin going low dese- 
lects the memory and places the output drivers in a 
high impedance state. Recovery from the deep pow- 
er-down state, requires a maximum of 300 ns to ac- 
cess valid data (tpHQv)- 

During erase or program modes, RP# low will abort 
either erase or program operation. The contents of 
the memory are no longer valid as the data has been 
corrupted by the RP# function. As in the read mode 
above, all internal circuitry is turned off to achieve 
the 0.2 fjb A current level. 

RP# transitions to V||_ or turning power off to the 
device will clear the status register. 

This use of RP# during system reset is important 
with automated write/erase devices. When the sys- 
tem comes out of reset it expects to read from the 
flash memory. Automated flash memories provide 
status information when accessed during write/ 
erase modes. If a CPU reset occurs with no flash 
memory reset, proper CPU initialization would not 
occur because the flash memory would be providing 
the status information instead of array data. Intel’s 
Flash Memories allow proper CPU initialization fol- 
lowing a system reset through the use of the RP# 
input. In this application RP# is controlled by the 
same RESET# signal that resets the system CPU. 


4.6 Power-up Operation 

The 4-Mbit boot block flash family is designed to 
offer protection against accidental block erasure or 
programming during power transitions. Upon power- 
up the 4-Mbit boot block flash family is indifferent as 
to which power supply, Vpp or Vcc. powers-up first. 
Power supply sequencing is not required. 

The 4-Mbit boot block flash family ensures the CUI is 
reset to the read mode on power-up. 

In addition, on power-up the user must either drop 
CE# low or present a new address to ensure valid 
data at the outputs. 

A system designer must guard against spurious 
writes for Vcc voltages above V|_ko when Vpp is 
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active. Since both WE# and CE# must be low for a 
command write, driving either signal to Vm will inhibit 
writes to the device. The CUI architecture provides 
an added level of protection since alteration of mem- 
ory contents can only occur after successful com- 
pletion of the two-step command sequences. Finally 
the device is disabled until RP# is brought to Vih, 
regardless of the state of its control inputs. This fea- 
ture provides yet another level of memory protec- 
tion. 


4.7 Power Supply Decoupling 

Flash memory’s power switching characteristics re- 
quire careful device decoupling methods. System 
designers are interested in 3 supply current issues: 

• Standby current levels (Ices) 

• Active current levels (Iccr) 

• Transient peaks produced by falling and rising 
edges of CE#. 

Transient current magnitudes depend on the device 
outputs’ capacitive and inductive loading. Two-line 
control and proper decoupling capacitor selection 
will suppress these transient voltage peaks. Each 
flash device should have a 0.1 ju,F ceramic capacitor 
connected between each Vcc and GND, and be- 
tween its Vpp and GND. These high frequency, low- 
inherent inductance capacitors should be placed as 
close as possible to the package leads. 

4.7.1 Vpp TRACE ON PRINTED CIRCUIT 
BOARDS 

Writing to flash memories while they reside in the 
target system, requires special consideration of the 
Vpp power supply trace by the printed circuit board 
designer. The Vpp pin supplies the flash memory 
cells current for programming and erasing. One 
should use similar trace widths and layout consider- 
ations given to the Vcc power supply trace. Ade- 
quate Vpp supply traces and decoupling will de- 
crease spikes and overshoots. 

4.7.2 V CC5 Vpp AND RP# TRANSITIONS 

The CUI latches commands as issued by system 
software and is not altered by Vpp or CE# tran- 
sitions or WSM actions. Its state upon power-up, af- 
ter exit from deep power-down mode or after Vcc 
transitions below V[_ko (Lockout voltage), is Read 
Array mode. 

After any word/byte write or block erase operation is 
complete and even after Vpp transitions down to 
VppL, the CUI must be reset to Read Array mode via 
the Read Array command when accesses to the 
flash memory are desired. 
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ABSOLUTE MAXIMUM RATINGS* 

Commercial Operating Temperature 

During Read 0°C to 70°C( 1 ) 

During Block Erase 

and Word/Byte Write 0°C to 70°C 

Temperature Under Bias -10°Cto +80°C 

Extended Operating Temperature 

During Read -40°C to + 85°C 

During Block Erase 

and Word/Byte Write -40°C to + 85°C 

Temperature Under Bias -40°C to + 85°C 

Storage Temperature -65°C to + 1 25°C 

Voltage on Any Pin 

(except Vcc. Vpp, A 9 and RP#) 
with Respect to GND * . . -2.0 V to + 7.0V( 2 ) 

Voltage on Pin RP# or Pin A 9 
with Respect to GND -2.0 V to + 13.5V(2, 3) 

Vpp Program Voltage with Respect 
to GND during Block Erase 
and Word/Byte Write -2.0V to + 14.0V( 2 > 3 ) 

Vqc Supply Voltage 

with Respect to GND -2.0 V to +7.0V( 2 ) 

Output Short Circuit Current 100 mA( 4 ) 

NOTES: 

1 . Operating temperature is for commercial product defined by this specification. 

2. Minimum DC voltage is -0.5V on input/output pins. During transitions, this level may undershoot to -2.0 V for periods 
<20 ns. 

Maximum DC voltage on input/output pins is Vcc + 0.5V which, during transitions, may overshoot to Vcc + 2.0V for 
periods <20 ns. 

3. Maximum DC voltage on Vpp may overshoot to + 14.0V for periods <20 ns. Maximum DC voltage on RP# or A9 may 
overshoot to 13.5V for periods < 20 ns. 

4. Output shorted for no more than one second. No more than one output shorted at a time. 

5. 10% Vcc specifications reference the 28F400BX-60/28F004BX-60 in their standard test configuration, and the 
28F400BX-80/ 28F004BX-80. 

6. 5% Vcc specifications reference the 28F400BX-60/28F004BX-60 in their high speed test configuration. 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 

* WARNING: Stressing the device beyond the Absolute 
Maximum Ratings” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“ Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


OPERATING CONDITIONS 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 

Ta 

Operating Temperature 


0 


°C 


Vcc Supply Voltage (10%) 

5 





Vcc Supply Voltage (5%) 

6 

4.75 




DC CHARACTERISTICS 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

Ili 

Input Load Current 

1 



±1.0 

ju,A 

Vcc = Vcc Max 
V|N = Vqc or GND 


Output Leakage Current 

1 

■ 

■ 



v cc = v cc Max 
Vqut = Vcc or GND 


I 
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DC CHARACTERISTICS (Continued) 


Symbol Parameter 

Ices Vcc Standby Current 


Notes Min Typ 


Vcc Deep Powerdown Current 


Vcc Read Current for 
28F400BX Word-Wide 
and Byte-Wide Mode 
and 28F004BX 
Byte-Wide Mode 


Unit Test Conditions 

mA Vcc = Vcc Max 
CE# = RP# = V| H 

pA Vcc = v cc Max 

CE# = RP# = V C c ±0.2V 
28F400BX: 

BY TE# - V C c ±0.2VorGND 
# = GND ±0.2V 
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DC CHARACTERISTICS (Continued) 


Symbol 

Parameter 

Notes 

Min 

Q. 

£ 

Max 

Unit 

Test Conditions 

V OH1 

Output High Voltage (TTL) 


2.4 



V 

Vcc = Vcc Min 
Ioh = -2.5 mA 

V OH2 

Output High Voltage (CMOS) 


0.85 V CC 



V 

Iqh = “2.5 mA 
Vcc = Vcc Min 

Vcc - 0.4 

Ioh ~ — 100 }iA 
V CC = v cc Min 

VppL 

Vpp during Normal Operations 

3 

0.0 



D 


DIM 

Vpp during Erase/Write Operations 

7 

11.4 


mm 

D 


V PPH 

Vpp during Erase/Write Operations 

8 

10.8 

12.0 

13.2 

V 


v LKO 

Vcc Erase/Write Lock Voltage 


2.0 



V 


Vhh 

RP# Unlock Voltage 


11.5 


13.0 

V 

Boot Block Write/Erase 


EXTENDED TEMPERATURE OPERATING CONDITIONS 


Symbol 

Parameter 

Notes 

Min 

Max 

Unit 

Ta 

Operating Temperature 


-40 

85 

°C 

Vcc 

Vcc Supply Voltage (10%) 

5 

4.50 

5.50 

V 


DC CHARACTERISTICS: EXTENDED 


TEMPERATURE OPERATION 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Conditions 

Ili 

Input Load Current 

1 



±1.0 

/mA 

Vcc = Vcc Max 
V|N = Vcc or GND 

Ilo 

Output Leakage Current 

1 



±10 

fx A 

Vcc = Vcc Max 
VoUT = Vcc or GND 

ices 

Vcc Standby Current 

1,3 

■ 

■ 







1 

I 


julA 

Vcc = Vcc Max 

CE# = RP# = V C c ±0.2V 

28F400BX: 

BYTE# = Vcc ± 0.2V or GND 

•CCD 

Vcc Deep Power-Down Current 

1 



|| 

1^3 

RP# = GND ±0.2V 


I 
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DC CHARACTERISTICS: EXTENDED TEMPERATURE OPERATION (Continued) 


Symbol 

Parameter 



Typ 

Max 

Unit 

Test Conditions 

>CCR 

Vqc Read Current for 28F400BX 
Word-Wide and Byte-Wide Mode 
28F004BX Byte-Wide Mode 

Km 

1 

■ 

60 

mA 

Vqq = Vqq Max, CE# = GND 
f = 10 MHz, Iqut = 0 mA 
CMOS Inputs 

1 

65 

mA 

V CC = V CC Max, CE# = Vil 
f = 10 MHz, l 0 UT = 0 mA 
TTL Inputs 

•ccw 

Vcc Word Write Current 

1 



70 

mA 

Word Write in Progress 

ICCE 

Vqc Block Erase Current 

1 



40 

mA 

Block Erase in Progress 

ICCES 

Vqc Erase Suspend Current 


■ 


10 

mA 

Block Erase Suspended, 
CE# = Vih 

Ipps 

Vpp Standby Current 

1 



±15 

juA 

Vpp ^ Vqq 

IPPD 

Vqq Deep Power-Down Current 

1 





RP# = GND ±0.2V 

IPPR 

Vpp Read Current 

1 



200 

/aA 

Vpp > Vqq 

Ippw 

Vpp Word Write Current 

1 



40 

mA 

Vpp = VppH 
Word Write in Progress 

Ippw 

Vpp Byte Write Current 

1 



30 

mA 

Vpp = VppH 

Byte Write in Progress 
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DC CHARACTERISTICS: EXTENDED TEMPERATURE OPERATION (Continued) 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Conditions 

IPPE 

Vpp Block Erase Current 

1 



30 

mA 

Vpp = Vppn 

Block Erase in Progress 

IPPES 

Vpp Erase Suspend Current 

1 



200 

fiA 

Vpp = Vppn 

Block Erase Suspended 

Irp# 

RP# Boot Block Unlock 
Current 




500 

\x A 

RP# = v H h 

•id 

Ag Intelligent Identifier Current 

1 



500 

jliA 

Ag = V| D 

V|d 

Ag Intelligent Identifier Current 


11.5 


13.0 

V 


V|L 

Input Low Voltage 


-0.5 


0.8 



V| H 

Input High Voltage 


2.0 


V C C + 0.5 



V 0 L 

Output Low Voltage 

■ 






VoHI 

Output High Voltage (TTL) 


2.4 



V 

Vcc = Vcc Min 
Ioh = ”2.5 mA 

V OH2 

Output High Voltage (CMOS) 


0.85 V CC 



V 

Ioh = -2.5 mA 
Vcc = Vcc Min 

V C C " 0.4 

Ioh = — 1 00 fxA 
Vcc = Vcc Min 

VppL 

Vpp during Normal Operations 

3 

0.0 


6.5 

V 


VppH 

Vpp during Erase/Write Operations 

7 

11.4 

12.0 

12.6 

V 


VppH 

Vpp during Erase/Write Operations 

8 

10.8 

12.0 

13.2 

V 


Vlko 

Vcc Erase/Write Lock Voltage 


2.0 



V 


Vhh 

RP# Unlock Voltage 


11.5 


13.0 

V 

Boot Block Write/ Erase 


CAPACITANCES) t a = 25°C,f = 1 MHz 


Symbol 

Parameter 

Typ 

Max 

Unit 

Conditions 

C IN 

Input Capacitance 

6 

8 

PF 

VlN = ov 

Gout 

Output Capacitance 

10 

12 

PF 

VoUT = 0V 


NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, Vpp = 12.0V, T = 25°C. These currents 
are valid for all product versions (packages and speeds). 

2. IccES is specified with the device deselected. If the device is read while in Erase Suspend Mode, current draw is the sum 
of IcCES and Iccr- 

3. Block Erases and Word/Byte Writes are inhibited when Vpp = Vppi_ and not guaranteed in the range between Vppn and 

VppL* 

4. Sampled,- not 100% tested. 

5. Automatic Power Savings (APS) reduces Iccr to less than 1 mA typical in static operation. 

6. CMOS Inputs are either Vcc ±0.2V or GND ±0.2V. TTL Inputs are either V|l or Vih- 

7. Vpp = 12.0V ± 5% for applications requiring 100,000 block erase cycles. 

8. Vpp = 12.0V ± 10% for applications requiring wider Vpp tolerances at 100 block erase cycles. 

9. For the 28F004BX address pin A-jo follows the Cout capacitance numbers. 

10. Iccr typical is 20 mA for XI 6 Active Read Current. 


I 
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STANDARD TEST CONFIGURATION^) 


STANDARD 

AC INPUT/OUTPUT REFERENCE WAVEFORM 



STANDARD 

AC TESTING LOAD CIRCUIT 



HIGH SPEED 

AC TESTING LOAD CIRCUIT 


NOTES: 

1. Testing characteristics for 28F400BX-60/28F004BX-60 in standard test configuration and 28F400BX-80/28F004BX-80. 

2. Testing characteristics for 28F400BX-60/28F004BX-60 in high speed test configuration. . 


3.0 

o.o 

290451-22 

AC test inputs are driven at 3.0V for a Logic “1” and 0.0V for a logic “0”. 
Input timing begins, and output timing ends, at 1.5V. Input rise and fall times 
(10% to 90%) < 10 ns. 



1.3V 



290451-21 

C L = 30 pF 

Cl Includes Jig Capacitance 
R l = 3.3 Ka 


HIGH SPEED TEST CONFIGURATION^) 

HIGH SPEED 

AC INPUT/OUTPUT REFERENCE WAVEFORM 
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AC CHARACTERISTICS— Read Only Operations^) 


Versions 

V CC ± 5% 

28F400BX-60(4) 

28F004BX-60(4) 




Unit 

v cc ± 10% 


28F400BX-60(5) 

28F004BX-60(5) 

28F400BX-80(5) 

28F004BX-80(5) 

28F400BX-1 20( 5 ) 
28F004BX-120(S) 

Symbol 

Parameter 

Notes 

Min 

Max 

Min 

Max 

Min 

Max 

Min 

Max 

tAVAV 

tRC 

Read Cycle Time 


60 


70 


80 


120 


ns 

tAVQV 

tACC 

Address to 
Output Delay 



60 


70 


80 


120 

ns 




2 




70 


80 




tpHQV 

tpWH 

RP# High to 
Output Delay 


■ 


■ 


■ 





tGLQV 

tOE 

OE# to Output Delay 





35 




40 


tELQX 

tLZ 

CE# to Output Low Z 

3 

0 


0 


0 


im 


Q 

tEHQZ 

tHZ 

CE# High to Output 
High Z 


■ 


■ 

25 


30 

■ 

30 

1 

tGLQX 

tOLZ 

OE# to Output Low Z 

3 

0 


0 


0 


0 


|Q 

tGHQZ 

tDF 

OE# High to Output 
High Z 

3 

■ 


■ 


■ 


■ 

30 

ns 

1 

tOH 

Output Hold from 
Addresses, 

CE# orOE# Change, 
Whichever is First 

3 

0 


0 


0 


0 





CE# to BYTE# 
Switching 
Low or High 

3 


5 


5 


5 


5 


tFHQV 


BYTE# Switching 
High to Valid 
Output Delay 

3,6 


60 


70 


80 


120 

ns 

tFLQZ 


BYTE# Switching 
Low to 

Output High Z 

3 


20 


25 


30 


30 

ns 


NOTES: 

1. See AC Input/Output Reference Waveform for timing measurements. 

2. OE# may be delayed up to tcE-toE after the falling edge of CE# without impact on tcE- 

3. Sampled, not 100% tested. 

4. See High Speed Test Configuration. 

5. See Standard Test Configuration. 

6. tFLQV. BYTE# switching low to valid output delay, will be equal to t/wov. measured from the time DQ15/A.1 becomes 
valid. 


I 
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EXTENDED TEMPERATURE OPERATION 
AC CHARACTERISTICS— Read Only Operations^) 


Versions 

T28F400BX-80( 4 ) 

T28F004BX-80 

Unit 

Symbol 

Parameter 

Notes 

Min 

Max 

tAVAV 

fRC 

Read Cycle Time 


80 


ns 

tAVQV 

*ACC 

Address to 
Output Delay 



80 

ns 

tELQV 

tCE 

CE# to Output Delay 



80 

ns 


tpWH 

RP# High to 
Output Delay 



300 

ns 


tOE 

OE# to Output Delay 

2 


40 

ns 


tLZ 

CE# to Output LowZ 


0 


ns 

tEHQZ 


CE# High to Output 
High Z 



30 

ns 

| 

tOLZ 

OE# to Output Low Z 

3 

0 


ns 


tDF 

OE# High to Output 
High Z 

3 


30 

ns 


tQH 

Output Hold from 
Addresses, 

CE# or OE# Change, 
Whichever is First 

3 

0 





CE# to BYTE# 
Switching 
Low or High 

3 


5 


tFHQV 


BYTE# Switching 
High to Valid 
Output Delay 

3,5 


80 


tFLQZ 


BYTE# Switching 
Low to 

Output High Z 

3 


30 

ns 


NOTES: 

1. See AC Input/Output Reference Waveform for timing measurements. 

2. OE# may be delayed up to tcE-toE after the falling edge of CE# without impact on tcE- 

3. Sampled, not 100% tested. 

4. See Standard Test Configuration. 

5. tFLQV. BYTE# switching low to valid output delay, will be equal to t/\vQV from the time DQ 15 /A --1 becomes valid. 














RP# (P) 



290451-15 



(mA) 
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AC CHARACTERISTICS — WE # Controlled Write Operations^) 

„ ^ eo/ 28F400BX-60(9) 

CC “ ° 28F004BX-60(9) 


V CC ± 10% 


28F400BX-60(10) 28F400BX-80(lO) 28F400BX-1 20(10) Unit 
28F004BX-6000) 28F004BX-80(10) 28F004BX-1 20(10) 


Symbol 


Parameter Notes Min Max Min Max Min Max Min Max 


|tAVAV |twc Write Cycle Time | | 60 

tps RP# High 
Recovery to 
WE# Going Low 

t C s CE# Setup to WE# 

Going Low 

tpus RP# Vhh Setup to 
WE# Going High 


tvPWH t\/PS Vpp Setup to WE# 5,8 100 

Going High 


tAVWH tAS 


(dvwh Ids 


tWLWH 


twHDX Idh Data Hold from 
WE# High 


tWHAX Uh Address Hold from 
WE# High 

twHEH Ich CE# Hold from 
WE# High 

twHWL t W PH WE# Pulse 
Width High 


twHQVi Duration of 
Word/Byte 




Programming 

Operation 


(WHQV2 Duration of Erase 
Operation (Boot) 


Duration of Erase 

Operation 

(Parameter) 


twHQV4 Duration of Erase 
Operation (Main) 


Vpp Hold from 
Valid SRD 


RP# V H h Hold 6, 8 
from Valid SRD 


Boot-Block 
Relock Delay 



10 


10 


10 


10 


20 


20 
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AC CHARACTERISTICS — WE# Controlled Write Operations! 1 ) (Continued) 

NOTES: 

1 . Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
characteristics during Read Mode. 

2. The on-chip WSM completely automates program/erase operations; program/erase algorithms are now controlled inter- 
nally which includes verify and margining operations. 

3. Refer to command definition table for valid Ain. 

4. Refer to command definition table for valid Din- 

5. Program/Erase durations are measured to valid SRD data (successful operation, SR.7 = 1). 

6. For Boot Block Program/ Erase, RP# should be held at Vhh until operation completes successfully. 

7. Time tpHBR is required for successful relocking of the Boot Block. 

8. Sampled but not 100% tested. 

9. See High Speed Test Configuration. 

1 0. See Standard Test Configuration. 


BLOCK ERASE AND WORD/BYTE WRITE PERFORMANCE V PP = 12.0V ±5% 


Parameter 

Notes 

28F400BX-60 

28F004BX-60 

28F400BX-80 

28F004BX-80 

28F400BX-120 

28F004BX-120 

Unit 

Min 

TypO) 

Max 

Min 

TypO) 

Max 

Min 

TypO) 

Max 

Boot/ Parameter 
Block Erase Time 

2 


1.0 

7 


1.0 

7 


1.0 

7 

s 

Main Block 
Erase Time 

2 


2.4 

14 


2.4 

14 


2.4 

14 

s 

Main Block Byte 
Program Time 

2 


1.2 

4.2 


1.2 

4.2 


1.2 

4.2 

s 

Main Block Word 
Program Time 

2 


0.6 

2.1 


0.6 

2.1 


0.6 

2.1 

s 


NOTES: 

1. 25°C 

2. Excludes System-Level Overhead. 


BLOCK ERASE AND WORD/BYTE WRITE PERFORMANCE V PP = 12.0V ±10% 


Parameter 

Notes 

28F400BX-60 

28F004BX-60 

28F400BX-80 

28F004BX-80 

28F400BX-120 

28F004BX-120 

Unit 

Min 

TypO) 

Max 

Min 

TypO) 

Max 

Min 

TypO) 

Max 

Boot/ Parameter 
Block Erase Time 

2 


5.8 

40 


5.8 

40 


5.8 

40 

s 

Main Block 
Erase Time 

2 


14 

60 


14 

60 


14 

60 

s 

Main Block Byte 
Program Time 

2 


6.0 

20 


6.0 

20 


6.0 

20 

s 

Main Block Word 
Program Time 

2 


3.0 

10 


3.0 

10 


3.0 

10 

s 


NOTES: 

1. 25°C 

2. Excludes System-Level Overhead. 
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EXTENDED TEMPERATURE OPERATION 
AC CHARACTERISTICS— WE# Controlled Write Operations^) 


Versions( 4 ) 

T28F400BX-80(9> 

T28F004BX-80P) 

Unit 

Symbol 

Parameter 

Notes 

Min 

Max 

*AVAV 

twc 

Write Cycle Time 


80 


ns 

tpHWL 

tps 

RP# High Recovery to 
WE# Going Low 




ns 

| 

tcs 

CE# Setup to WE# Going Low 


0 



tpHHWH 


RP# Vhh Setup to WE# 
Going High 

6,8 

100 



Wpwh 

i 

Vpp Setup to WE# Going High 

5,8 

100 


■s 

tAVWH 

■ 

Address Setup to WE# 
Going High 

3 

60 


Q 

*dvwh 

tDS 

Data Setup to WE# Going High 

4 

60 



tWLWH 

twp 

WE# Pulse Width 


60 


ns 

twHDX 

*DH 

Data Hold from WE# High 

4 

0 


ns 

tWHAX 

tAH 

Address Hold from WE# High 

3 

10 


ns 

tWHEH 

l CH 

CE# Hold from WE# High 


1 10 


ns 

tWHWL 


WE# Pulse Width High 


20 



tWHQVI 


Duration of Word/Byte 
Programming Operation 

2,5 

7 


fXS 

*WHQV2 


Duration of Erase Operation (Boot) 

2, 5,6 

0.4 


s 

tWHQV3 


Duration of Erase Operation 
(Parameter) 


0.4 


s 

*WHQV4 


Duration of Erase Operation (Main) 


0.7 


s 

tQWL 

tVPH 

Vpp Hold from Valid SRD 


0 


ns 

tQVPH 

tPHH 

RP# V H h Hold from Valid SRD 

6,8 

0 


ns 

tpHBR 


Boot-Block Relock Delay 

7,8 


100 

ns 
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EXTENDED TEMPERATURE OPERATION 
AC CHARACTERISTICS — WE# Controlled Write Operations^) (Continued) 

NOTES: 

1 . Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
characteristics during Read Mode. 

2. The on-chip WSM completely automates program/erase operations; program/erase algorithms are now controlled inter- 
nally which includes verify and margining operations. 

3. Refer to command definition table for valid Ain. 

4. Refer to command definition table for valid Din- 

5. Program/Erase durations are measured to valid SRD data (successful operation, SR.7 = 1). 

6. For Boot Block Program/ Erase, RP# should be held at Vhh until operation completes successfully. 

7. Time tpHBR is required for successful relocking of the Boot Block. 

8. Sampled but not 100% tested. 

9. See Standard Test Configuration. 


EXTENDED TEMPERATURE OPERATION 

BLOCK ERASE AND WORD/BYTE WRITE PERFORMANCE V PP = 12.0V ±5% 


Parameter 

Notes 

T28F400BX-80 

T28F004BX-80 

Unit 



Min 

TypO) 

Max 


Boot/Parameter 
Block Erase Time 

2 


1.5 

10.5 

s 

Main Block 
Erase Time 

2 


3.0 

18 

H 

Main Block Byte 
Program Time 

2 


1.4 

5.0 


Main Block Word 
Program Time 

2 


0.7 


s 


NOTES: 

1. 25°C 

2. Excludes System-Level Overhead. 
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Figure 21. AC Waveforms for a Write and Erase Operations (WE# -Controlled Writes) 


V CC P0WER-UP WRITE PROGRAM OR VALID ADDRESS & DATA (PROGRAM) AUTOMATED PROGRAM READ STATUS WRITE READ ARRAY 

& STANDBY ERASE SETUP COMMAND OR ERASE CONFIRM COMMAND OR ERASE DELAY REGISTER DATA 'COMMAND 
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AC CHARACTERISTICS— CE# -CONTROLLED WRITE OPERATIONS^ 9) 



V CC ± 5% 

28F400BX-6000) 

28F004BX-6000) 





Versions 

v cc ± io% 


28F400BX-60O1) 

28F004BX-60IH) 

28F400BX-80(H) 

28F004BX-80(H) 

28F400BX-120(H) 
28F004BX-1 20(H) 

Unit 



Parameter 

Notes 

Write Cycle Time 



RP# High 
Recovery 
to CE# Going Low 


WE# Setup to 
CE# Going Low 


RP# Vhh Setup to 
CE# Going High 

6,8 



tDVEH 

*DS 

Data Setup to 
CE# Going High 

*ELEH 

tcp 

CE# Pulse Width 

tEHDX 

l DH 

Data Hold from 
CE# High 

(ehax 

Iah 

Address Hold 
from CE# High 



WE# Hold from 
CE# High 


tcpH CE# Pulse 
Width High 


Duration of Word/ 
Byte Programming 
Operation 


Duration of Erase 
Operation (Boot) 


Duration of Erase 

Operation 

(Parameter) 


Duration of Erase 2, 5 
Operation (Main) 

tvPH Vpp Hold from 5,8 

Valid SRD 

tpHH RP# Vhh Hold 6, 8 

from Valid SRD 


Boot-Block 
Relock Delay 


I 


7 
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AC CHARACTERISTICS— CE#-CONTROLLED WRITE OPERATIONS(M) (Continued) 

NOTES: 

1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CE# and WE# in systems where 
CE# defines the write pulse-width (within a longer WE# timing waveform), all set-up, hold and inactive WE# times should 
be measured relative to the CE# waveform. 

2, 3, 4, 5, 6, 7, 8: Refer to AC Characteristics notes for WE# -Controlled Write Operations. 

9. Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
Characteristics during Read Mode. 

10. See High Speed Test Configuration. 

11. See Standard Test Configuration. 


EXTENDED TEMPERATURE OPERATION 

AC CHARACTERISTICS— CE# -CONTROLLED WRITE OPERATIONS^ 9) 


Versions 

T28F400BX-800°) 

T28F004BX-80O0) 

Unit 

Symbol 

Parameter 

Notes 

Min 

Max 

mn 


Write Cycle Time 


80 




tps 

RP# High Recovery to CE# Going Low 


220 





WE# Setup to CE# Going Low 


0 


USB 


tpHS 

RP# Vhh Setup to CE# Going High 

6,8 

100 


ns 

bb» 

tvps 

Vpp Setup to CE# Going High 

5,8 

100 




*AS 

Address Setup to CE# Going High 

3 

60 


ns 

*DVEH 

ESI 

Data Setup to CE# Going High 

4 

60 


ns 


E 

CE# Pulse Width 


60 


ns 


i 

Data Hold from CE# High 

4 

0 


ns 


BUM 

Address Hold from CE# High 

3 

10 


ns 



WE# Hold from CE# High 


10 





CE# Pulse Width High 


20 


ns 



Duration of Word/Byte Programming 
Operation 

2,5 

7 


JU,S 

tEHQV2 


Duration of Erase Operation (Boot) 


0.4 


s 

*EHQV3 


Duration of Erase Operation (Parameter) 

2,5 

0.4 


s 

B3S30B 


Duration of Erase Operation (Main) 


0.7 


s 


tVPH 

Vpp Hold from Valid SRD 

5,8 

0 


ns 

BS 


RP# V hh Hold from Valid SRD 

6,8 

0 


ns 

tpHBR 


Boot-Block Relock Delay 

7 


100 

ns 


NOTES: 

1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CE# and WE# in systems where 
CE# defines the write pulse-width (within a longer WE# timing waveform), all set-up, hold and inactive WE# times should 
be measured relative to the CE# waveform. 

2, 3, 4, 5, 6, 7, 8: Refer to AC Characteristics for WE# -Controlled Write Operations. 

9. Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
Characteristics during Read Mode. 

10. See Standard Test Configuration. 















































v cc POWER-UP WRITE PROGRAM OR VALID ADDRESS & DATA (PROGRAM) AUTOMATED PROGRAM READ STATUS WRITE READ ARRAY 

& STANDBY ERASE SETUP COMMAND OR ERASE CONFIRM COMMAND OR ERASE DELAY REGISTER DATA COMMAND 


ADDRESSES (A) 

V,l 


V IH 


WE# (W) 

V| L 


OE# (G) 


CE# (E) 
V,L 


DATA (D/Q) 
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ORDERING INFORMATION 


E 2 8 F 4 0 O B X T 6 0 


OPERATING TEMPERATURE PACKAGE 

T = EXTENDED TEMP E = STANDARD 56 LEAD TSOP 

BLANK = COMMERCIAL TEMP pa = 44 LEAD PSOP 

TB = 44 LEAD PSOP, EXTENDED TEMP 


■ ACCESS SPEED (ns) 
60 ns 
80 ns 
120 ns 


VALID COMBINATIONS: 

E28F400BX-T60 PA28F400BX-T60 

E28F400BX-B60 PA28F400BX-B60 

E28F400BX-T80 PA28F400BX-T80 TE28F400BX-T80 TB28F400BX-T80 

E28F400BX-B80 PA28F400BX-B80 TE28F400BX-B80 TB28F400BX-B80 

E28F400BX-T 1 20 PA28F400BX-T120 

E28F400BX-B120 PA28F400BX-B120 


E 2 8 F 0 0 4 B X T 6 0 


OPERATING TEMPERATURE PACKAGE 

T = EXTENDED TEMP E = STANDARD 40 LEAD TSOP 
BLANK = COMMERCIAL TEMP 


ACCESS SPEED (ns) 
60 ns 
80 ns 
120 ns 


VALID COMBINATIONS: 

E28F004BX-T60 E28F004BX-T80 TE28F004BX-T80 E28F004BX-T1 20 

E28F004BX-B60 E28F004BX-B80 TE28F004BX-B80 E28F004BX-B120 
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ADDITIONAL INFORMATION 


Order Number 

Document 

292130 

AB-57 “Boot Block Architecture for Safe Firmware Updates” 

292154 

AB-60 “2/4/8-Mbit SmartVoltage Boot Block Flash Memory Family” 

292098 

AP-363 “Extended Flash BIOS Concepts for Portable Computers” 

292148 

AP-604 “Using Intel’s Boot Block Flash Memory Parameter Blocks to Replace 
EEPROM” 

290448 

28F002/ 200BX-T/B 2-Mbit Boot Block Flash Memory Datasheet 

290449 

28F002/200BL-T/B 2-Mbit Low Power Boot Block Flash Memory Datasheet 

290450 

28F004/400BL-T/B 4-Mbit Low Power Boot Block Flash Memory Datasheet 

290531 

2-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 

290530 

4-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 

290539 

8-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 




N HISTORY 

Number 

Description 

-001 

Original Version 

-002 

Removed -70 speed bin. 

Integrated -70 characteristics into -60 speed bin. 
Added Extended Temperature characteristics. 
Modified BYTE# Timing Diagram. 

-003 

PWD renamed to RP# for JEDEC standardization compatibility. 

Combined V<x Read current for 28F400BX Word-Wide Mode and Byte-Wide Mode and 
28F004BX Byte-Wide Mode in DC Characteristics tables. 

Added Boot Black Unlock Current specifications in DC Characteristics tables. 

Improved Iccr ar| d Iccw ' n DC Characteristics: Extended Temperature Operation table. 
Improved tAVAV. Uvqv. ^elqv> tGLQV- ^ehqz. ^ghqz. ^fhov ar >d tpLQZ specifications for 
Extended Temperature Operations AC Characteristics — Read and Write Operations. 

-004 

Added specifications for 120 ns access time product version; 28F400BX-120 and 
28F004BX-120. 

Included permanent change on write timing parameters for -80 ns product versions. Write 
pulse width (twp and top) increases from 50 ns to 60 ns. Write pulse width high (twpH and 
tcpH) decreases from 30 ns to 20 ns. Total write cycle time (twc) remains unchanged. 
Added Iccr test condition note for typical frequency value in DC Characteristics table. 
Added Ioh CMOS specification. 

Added 28F400BX interface to lntel386TMEX Embedded Processor block diagram. 

Added description of how to design for upgrading to SmartVoltage Boot Block products. 




Intel- 

28F400BL-T/B, 28F004BL-T/B 
4-MBIT (256K x 16, 512K x 8) LOW POWER BOOT BLOCK 
FLASH MEMORY FAMILY 


■ Low Voltage Operation for Very Low 
Power Portable Applications 

— V C c = 3.0V-3.6V Read 
— Vcc — 3.15V-3.6V Program/Erase 

■ Expanded Temperature Range 
20° C to 70°C 

■ x8/x16 Input/Output Architecture 

— 28F400BL-T, 28F400BL-B 

— For High Performance and High 
Integration 16-bit and 32-bit CPUs 

■ x8-only Input/Output Architecture 

— 28F004BL-T, 28F004BL-B 

— For Space Constrained 8-bit 
Applications 

■ Upgradeable to Intel’s SmartVoltage 
Products 

■ Optimized High Density Blocked 
Architecture 

— One 16-KB Protected Boot Block 
— Two 8-KB Parameter Blocks 
— One 96-KB Main Block 
— Three 128-KB Main Blocks 
— Top or Bottom Boot Locations 

■ Extended Cycling Capability 
— 10,000 Block Erase Cycles 

■ Automated Word/Byte Write and Block 
Erase 

— Command User Interface 
— Status Registers 
— Erase Suspend Capability 


■ SRAM-Compatible Write Interface 

■ Automatic Power Savings Feature 

— 0.8 mA typical Ice Active Current in 
Static Operation 

■ Very High-Performance Read 

— 150 ns Maximum Access Time 

— 65 ns Maximum Output Enable Time 

■ Low Power Consumption 

— 15 mA Typical Active Read Current 

■ Reset/Deep Power-Down Input: 

— 0.2 juA Ice Typical 

— Acts as Reset for Boot Operations 

■ Write Protection for Boot Block 

■ Hardware Data Protection Feature 

— Erase/Write Lockout During Power 
Transitions 

■ Industry Standard Surface Mount 
Packaging 

— 28F400BL: JEDEC ROM 

Compatible 
44-Lead PSOP 
56-Lead TSOP 

— 28F004BL: 40-Lead TSOP 

■ 12V Word/Byte Write and Block Erase 
— V PP = 12V ±5% Standard 

n ETOX III Flash Technology 

— 3.3V Read 
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Intel’s 4-Mbit Low Power Flash Memory Family is an extension of the Boot Block Architecture which includes 
block-selective erasure, automated write and erase operations and standard microprocessor interface. The 
4-Mbit Low Power Flash Memory Family enhances the Boot Block Architecture by adding more density and 
blocks, x8/x16 input/output control, very low power, very high speed, an industry standard ROM compatible 
pinout and surface mount packaging. The 4-Mbit low power flash family opens a new capability for 3V battery- 
operated portable systems and is an easy upgrade to Intel’s 2-Mbit Low Power Boot Block Flash Memory 
Family. 

The Intel 28F400BL-T/B are 16-bit wide low power flash memory offerings. These high density flash memories 
provide user selectable bus operation for either 8-bit or 16-bit applications. The 28F400BL-T and 28F400BL-B 
are 4,194,304-bit non-volatile memories organized as either 524,288 bytes or 262,144 words of information. 
They are offered in 44-Lead plastic SOP and 56-Lead TSOP packages. The x8/x16 pinout conforms to the 
industry standard ROM/EPROM pinout. The Intel 28F004BL-T/B are 8-bit wide low power flash memories 
with 4,194,304 bits organized as 524,288 bytes of information. They are offered in a 40-Lead TSOP package, 
which is ideal for space-constrained portable systems. 

These devices use an integrated Command User Interface (CUI) and Write State Machine (WSM) for simplified 
word/byte write and block erasure. The 28F400BL-T/28F004BL-T provide block locations compatible with 
Intel’s Low Voltage MCS-186 family, i 386 TM, i 486 TM microprocessors. The 28F400BL-B/28F004BL-B provide 
compatibility with Intel’s 80960KX and 80960SX families as well as other low voltage embedded microproces- 
sors. 


The boot block includes a data protection feature to protect the boot code in critical applications. With a 
maximum access time of 1 50 ns, these 4-Mbit low power flash devices are very high performance memories at 
3.3V which interface to a wide range of low voltage microprocessors and microcontrollers. A deep power- 
down mode lowers the total Vcc power consumption to 0.66 ju-W which is critical in handheld battery powered 
systems such as Handy Cellular Phones. For very high speed applications using a 5V supply, refer to the Intel 
28F400BX-T/B, 28F004BX-T/B 4-Mbit Boot Block Flash Memory family datasheet. 

Manufactured on Intel’s 0.8 micron ETOX III process, the 4-Mbit flash memory family provides world class 
quality, reliability and cost-effectiveness at the 4 Mbit density level. 
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1.0 PRODUCT FAMILY OVERVIEW 

Throughout this datasheet 28F400BL refers to both 
the 28F400BL-T and 28F400BL-B devices and 
28F004BL refers to both the 28F004BL-T and 
28F004BL-B devices. The 4-Mbit flash family refers 
to both the 28F400BL and 28F004BL products. This 
datasheet comprises the specifications for four sep- 
arate products in the 4-Mbit flash family, Section 1 
provides an overview of the 4-Mbit flash family in- 
cluding applications, pinouts and pin descriptions. 
Sections 2 and 3 describe in detail the specific mem- 
ory organizations for the 28F400BL and 28F004BL 
products respectively, Section 4 combines a de- 
scription of the family’s principles of operations. Fi- 
nally section 5 describes the family’s operating 
specifications. 


Product Family 


x8/x16 Products 

x8-Only Products 

28F400BL-T 

28F004BL-T 

28F400BL-B 

28F004BL-B 


1.1 Designing for Upgrade to 
SmartVoltage Products 

Today’s high volume boot block products are up- 
gradeable to Intel’s SmartVoltage boot block prod- 
ucts that provide program and erase operation at 5V 
or 12V Vpp and read operation at 3V or 5V Vqq. 
Intel’s SmartVoltage boot block products provide the 
following enhancements to the boot block products 
described in this datasheet: 

1. DU pin is replaced by WP# to provide a means to 
lock and unlock the boot block with logic signals. 

2. 5V Program/Erase operation uses proven pro- 
gram and erase techniques with 5V ±10% ap- 
plied to Vpp. 

3. Enhanced circuits optimize performance at 3.3V 
V C c- 

Refer to the 2, 4 or 8Mbit SmartVoltage Boot Block 
Flash Memory datasheets for complete specifica- 
tions. 

When you design with 12V Vpp boot block products 
you should provide the capability in your board de- 
sign to upgrade to SmartVoltage products. 

Follow these guidelines to ensure compatibility: 

1. Connect DU (WP# on SmartVoltage products) to 
a control signal or to Vqc or GND. 

2. If adding a switch on Vpp for write protection, 
switch to GND for complete write protection. 

3. Allow for connecting 5V to Vpp and disconnect 
12V from the Vpp line, if desired. 


intel. 

1.2 Main Features 

The 28F400BL/28F004BL boot block flash memory 
family is a very high performance 4-Mbit (4,194,304 
bit) memory family organized as either 256 KWords 
(262,144 words) of 16 bits each or 512 Kbytes 
(524,288 bytes) of 8 bits each. 

Seven Separately Erasable Blocks including a 
Hardware-Lockable boot block (16,384 Bytes), 
two parameter blocks (8,1 92 Bytes each) and four 
main blocks (1 block of 98,304 Bytes and 3 blocks 
of 131,072 Bytes) are included on the 4-Mbit family. 
An erase operation erases one of the main blocks in 
typically 3.4 seconds and the boot or parameter 
blocks in typically 2.0 seconds, independent of the 
remaining blocks. Each block can be independently 
erased and programmed 10,000 times. 

The Boot Block is located at either the top (-T) or 
the bottom (-B) of the address map in order to ac- 
commodate different microprocessor protocols for 
boot code location. The hardware lockable boot 
block provides the most secure code storage. The 
boot block is intended to store the kernel code re- 
quired for booting-up a system. When the RP# pin is 
between 1 1 .4V and 1 2.6V the boot block is unlocked 
and program and erase operations can be per- 
formed. When the RP# pin is at or below 4.1V the 
boot block is locked and program and erase opera- 
tions to the boot block are ignored. 

The 28F400BL products are available in the 
ROM/EPROM compatible pinout and housed in the 
44-Lead PSOP (Plastic Small Outline) package and 
the 56-Lead TSOP (Thin Small Outline, 1.2mm thick) 
package as shown in Figures 3 and 4, The 
28F004BL products are available in the 40-Lead 
TSOP (1.2mm thick) package as shown in Figure 5. 

The Command User Interface (CUI) serves as the 
interface between the microprocessor or microcon- 
troller and the internal operation of the 28F400BL 
and 28F004BL flash memory products. 

Program and Erase Automation allow program 
and erase operations to be executed using a two- 
write command sequence to the CUI. The internal 
Write State Machine (WSM) automatically executes 
the algorithms and timings necessary for program 
and erase operations, including verifications, therer 
by unburdening the microprocessor or microcontrol- 
ler. Writing of memory data is performed in word or 
byte increments for the 28F400BL family and in byte 
increments for the 28F004BL family typically within 

11 JLlS. 
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The Status Register (SR) indicates the status of the 
WSM and whether the WSM successfully completed 
the desired program or erase operation. 

Maximum Access Time of 150 ns (TACC) is 
achieved over the commercial temperature range 
(0°C to + 70°C), Vqc supply voltage range (3.0V to 
3.6V, 4.5V to 5.5V) and 50 pF output load. 

Ipp Program current is 40 mA for x16 operation 
and 30 mA for x8 operation. Ipp Erase current is 
30 mA maximum. Vpp erase and programming 
voltage is 11.4V to 12.6V (V PP = 12V ±5%) un- 
der all operating conditions. 

Typical Ice Active Current of 15 mA is achieved 
for the xl 6 products and the x8 products. 

The 4-Mbit flash family is also designed with an Au- 
tomatic Power Savings (APS) feature to minimize 
system battery current drain and allow for very low 
power designs. Once the device is accessed to read 
the array data, APS mode will immediately put the 
memory in static mode of operation where Iqc active 
current is typically 0.8 mA until the next read is initia- 
ted. 

When the CE# and RP# pins are at Vcc and the 
BYTE# pin (28F400BX-L-only) is at either Vqc or 
GND the CMOS Standby mode is enabled where 
Ice >s typically 45 jmA. 

A Deep Power-Down Mode is enabled when the 
PWD pin is at ground minimizing power consumption 
and providing write protection during power-up con- 
ditions. Ice current during deep power-down mode 
is 0.20 julA typical. An initial maximum access time 
or Reset Time of 600 ns is required from RP# 
switching until outputs are valid. Equivalently, the 
device has a maximum wake-up time of 1 jlls until 
writes to the Command User Interface are recog- 
nized. When RP# is at ground the WSM is reset, the 
Status Register is cleared and the entire device is 
protected from being written to. This feature pre- 
vents data corruption and protects the code stored 
in the device during system reset. The system Reset 
pin can be tied to RP# to reset the memory to nor- 
mal read mode upon activation of the Reset pin. 
When the CPU enters reset mode, it expects to read 
the contents of a memory location. Furthermore, 
with on-chip program/erase automation in the 
4-Mbit family and the RP# functionality for data pro- 
tection, when the CPU is reset and even if a program 
or erase command is issued, the device will not rec- 
ognize any operation until RP# returns to its normal 
state. 


For the 2SF400BL, Byte-wide or Word-wide In- 
put/Output Control is possible by controlling the 
BYTE# pin. When the BYTE# pin is at a logic low 
the device is in the byte-wide mode (x8) and data is 
read and written through DQ[0:7]. During the byte- 
wide mode, DQ[8:14] are tri-stated and DQ15/A-1 
becomes the lowest order address pin. When the 
BYTE# pin is at a logic high the device is in the 
word-wide mode (xl 6) and data is read and written 
through DQ[0:15]. 


1.3 Applications 

The 4-Mbit low power boot block flash memory fami- 
ly combines high density, very low power, high per- 
formance, cost-effective flash memories with block- 
ing and hardware protection capabilities. Its flexibility 
and versatility will reduce costs throughout the prod- 
uct life cycle. Flash memory is ideal for Just-In-Time 
production flow, reducing system inventory and 
costs, and eliminating component handling during 
the production phase. During the product life cycle, 
when code updates or feature enhancements be- 
come necessary, flash memory will reduce the up- 
date costs by allowing either a user-performed code 
change via floppy disk or a remote code change via 
a serial link. The 4-Mbit flash family provides full 
function, blocked flash memories suitable for a wide 
range of applications. These applications include 
Extended PC BIOS and ROM-able applications 
storage, Handy Digital Cellular Phone program 
and data storage and various other low power em- 
bedded applications where both program and data 
storage are required. 

Portable systems such as Notebook/ Palmtop com- 
puters, are ideal applications for the 4-Mbit low pow- 
er flash products. Portable and handheld personal 
computer applications are becoming more complex 
with the addition of power management software to 
take advantage of the latest microprocessor tech- 
nology, the availability of ROM-based application 
software, pen tablet code for electronic hand writing, 
and diagnostic code. Figure 1 shows an example of 
a 28F400BL-T application. 

This increase in software sophistication augments 
the probability that a code update will be required 
after the Notebook is shipped. The 4-Mbit flash 
products provide an inexpensive update solution for 
the notebook and handheld personal computers 
while extending their product lifetime. Furthermore, 
the 4-Mbit flash products’ deep power-down mode 
provides added flexibility for these battery-operated 
portable designs which require operation at very low 
power levels. 
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The 4-Mbit low power flash products also provide 
excellent design solutions for Handy Digital Cellular 
Phone applications requiring low voltage supply, 
high performance, high density storage capability 
coupled with modular software designs, and a small 
form factor package (x8-only bus). The 4-Mbit’s 
blocking scheme allows for an easy segmentation of 
the embedded code with; 16-Kbytes of Hardware- 
Protected Boot code, 4 Main Blocks of program 
code and 2 Parameter Blocks of 8-Kbytes each for 
frequently updatable data storage and diagnostic 


messages (e.g., phone numbers, authorization 
codes). Figure 2 is an example of such an applica- 
tion with the 28F004BL-T. 

These are a few actual examples of the wide range 
of applications for the 4-Mbit low power Boot Block 
flash memory family which enable system designers 
achieve the best possible product design. Only your 
imagination limits the applicability of such a versatile 
low power product family. 



Figure 1. 28F400BL Interface to lntel 386 TM EX Embedded Processor 
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Figure 2. 28F004BL Interface to INTEL 80L188EB Low Voltage 8-bit Embedded Processor 
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1.4 Pinouts 

The 28F400BL 44-Lead PSOP pinout follows the 
industry standard ROM/EPROM pinout as shown 
in Figure 3 and provides an upgrade for the 
28F200BL Low Power Boot Block flash memory 
family. Furthermore, the 28F400BL 56-Lead TSOP 


pinout shown in Figure 4 provides density upgrades 
to future higher density boot block memories. 

The 28F004BL 40-Lead TSOP pinout shown in Fig- 
ure 5 is 100% compatible and provides a density 
upgrade for the 28F002BL 2-Mbit Low Power Boot 
Block flash memory family. 



Figure 3. PSOP Lead Configuration for x8/x16 28F400BL 
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Figure 4. TSOP Lead Configuration for x8 28F400BL 



Figure 5. TSOP Lead Configuration for x8 28F004BL 
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1.5 Pin Descriptions for x8/x16 28F400BL 


Symbol 

Type 

Name and Function 

Ao-A-iy 

1 

ADDRESS INPUTS for memory addresses. Addresses are internally latched 
during a write cycle. 

A9 

1 

ADDRESS INPUT: When A 9 is at 12 V the signature mode is accessed. During this 
mode Ao decodes between the manufacturer and device ID’s. When BYTE# is at 
a logic low only the lower byte of the signatures are read. DQ^/A-i is a don’t 
care in the signature mode when BYTE# is low. 

DQ0-DQ7 

I/O 

DATA INPUTS/OUTPUTS: Inputs array data on the second CE# and WE# cycle 
during a program command. Inputs commands to the command user interface 
when CE# and WE# are active. Data is internally latched during the write and 
program cycles. Outputs array, Intelligent Identifier and status register data. The 
data pins float to tri-state when the chip is deselected or the outputs are disabled. 

DQq-DQ -15 

I/O 

DATA INPUT/OUTPUTS: Inputs array data on the second CE# and WE# cycle 
during a program command. Data is internally latched during the write and program 
cycles. The data pins float to tri-state when the chip is deselected or the outputs 
are disabled as in the byte-wide mode (BYTE# = “ 0 ”). In the byte-wide mode 
DQ15/A--1 becomes the lowest order address for data output on DQ0-DQ7. 

CE# 

1 

CHIP ENABLE: Activates the device’s control logic, input buffers, decoders and 
sense amplifiers. CE# is active low; CE# high deselects the memory device and 
reduces power consumption to standby levels. If CE# and RP# are high, but not 
at a CMOS high level, the standby current will increase due to current flow through 
the CE# and RP# input stages. 

RP# 

1 

RESET/DEEP POWER-DOWN: Provides Three-State control. Puts the device in 
deep power-down mode. Locks the boot block from program/erase. 

When RP# is at logic high level and equals 4 . 1 V maximum the boot block is 
locked and cannot be programmed or erased. 

When RP# = 1 1 . 4 V minimum the boot block is unlocked and can be programmed 
or erased. 

When RP# is at a logic low level the boot block is locked, the deep power-down 
mode is enabled and the WSM is reset preventing any blocks from being 
programmed or erased, therefore providing data protection during power 
transitions. When RP# transitions from logic low to logic high, the flash memory 
enters the read-array mode. 

OE# 

1 

OUTPUT ENABLE: Gates the device’s outputs through the data buffers during a 
read cycle. OE# is active low. 

WE# 

1 

WRITE ENABLE: Controls writes to the Command Register and array blocks. 
WE# is active low. Addresses and data are latched on the rising edge of the WE# 
pulse. 
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1.5 Pin Descriptions for x8/x16 28F400BL (Continued) 




Name and Function 

BYTE# 

1 

BYTE# ENABLE: Controls whether the device operates in the byte-wide mode (x8) or 
the word-wide mode (x16). BYTE# = “0” enables the byte-wide mode, where data is 
read and programmed on DQ0-DQ7 and DQ15/A--1 becomes the lowest order 
address that decodes between the upper and lower byte. DQ8-DQ14 are tri-stated 
during the byte-wide mode. BYTE# = “1 ” enables the word-wide mode where data is 
read and programmed on DQo-DQ 15 . 

Vpp 


PROGRAM/ERASE POWER SUPPLY: For erasing memory array blocks or 
programming data in each block. 

Note: Vpp < Vpplmax memory contents cannot be altered. 



DEVICE POWER SUPPLY (3.3V ±0.3, 5V ± 10%) 

GND 


GROUND: For all internal circuitry. 

NC 


NO CONNECT: Pin may be driven or left floating. 

DU 


DON’T USE PIN: Pin should not be connected to anything. 


4-182 








28F400BL-T/B, 28F004BL-T/B 


iny 


1.6 Pin Descriptions for x8 28F004BL 


Symbol 

Type 

Name and Function 

a 0 -a 18 

1 

ADDRESS INPUTS for memory addresses. Addresses are internally latched during 
a write cycle. 

Ag 

1 

ADDRESS INPUT: When Ag is at 12V the signature mode is accessed. During this 
mode Ag decodes between the manufacturer and device ID’s. 

DQ0-DQ7 

I/O 

DATA INPUTS/OUTPUTS: Inputs array data on the second CE# and WE# cycle 
during a program command. Inputs commands to the command user interface 
when CE# and WE# are active. Data is internally latched during the write and 
program cycles. Outputs array, Intelligent Identifier and status register data. The 
data pins float to tri-state when the chip is deselected or the outputs are disabled. 

CE# 

1 

CHIP ENABLE: Activates the device’s control logic, input buffers, decoders and 
sense amplifiers. CE# is active low; CE# high deselects the memory device and 
reduces power consumption to standby levels. 

RP# 

1 

RESET/DEEP POWER-DOWN: Provides Three-State control. Puts the device in 
deep power-down mode. Locks the Boot Block from program/erase. 

When RP# is at logic high level and equals 4 . 1 V maximum the Boot Block is locked 
and cannot be programmed or erased. 

When RP# = 1 1 . 4 V minimum the Boot Block is unlocked and can be programmed 
or erased. 

When RP# is at a logic low level the Boot Block is locked, the deep power-down 
mode is enabled and the WSM is reset preventing any blocks from being 
programmed or erased, therefore providing data protection during power 
transitions. When RP# transitions from logic low to logic high, the flash memory 
enters the read-array mode. 

OE# 

1 

OUTPUT ENABLE: Gates the device’s outputs through the data buffers during a 
read cycle. OE # is active low. 

WE# 

1 

WRITE ENABLE: Controls writes to the Command Register and array blocks. WE# 
is active low. Addresses and data are latched on the rising edge of the WE# pulse. 

Vrr 


PROGRAM/ERASE POWER SUPPLY: For erasing memory array blocks or 
programming data in each block. 

Note: Vpp < Vpplmax memory contents cannot be altered. 

Vcc 


DEVICE POWER SUPPLY (3.3V ±0.3V, 5V ±10%) 

GND 


GROUND: For all internal circuitry. 

NC 


NO CONNECT: Pin may be driven or left floating. 

DU 


DON’T USE PIN: Pin should not be connected to anything. 











Figure 6. 28F400BL Word/Byte-Wide Block Diagram 
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2.1 28F400BL Memory Organization 

2.1.1 BLOCKING 

The 28F400BL uses a blocked array architecture to 
provide independent erasure of memory blocks. A 
block is erased independently of other blocks in the 
array when an address is given within the block ad- 
dress range and the Erase Setup and Erase Confirm 
commands are written to the CUI. The 28F400BL is 
a random read/write memory, only erasure is per- 
formed by block. 

2.1. 1.1 Boot Block Operation and Data 
Protection 

The 1 6-Kbyte boot block provides a lock feature for 
secure code storage. The intent of the boot block is 
to provide a secure storage area for the kernel code 
that is required to boot a system in the event of pow- 
er failure or other disruption during code update. 
This lock feature ensures absolute data integrity by 
preventing the boot block from being written or 
erased when RP# is not at 12V. The boot block can 
be erased and written when RP# is held at 12V for 
the duration of the erase or program operation. This 
allows customers to change the boot code when 
necessary while providing security when needed. 
See the Block Memory Map section for address lo- 
cations of the boot block for the 28F400BL-T and 
28F400BL-B. 


2. 1.1. 2 Parameter Block Operation 

The 28F400BL has 2 parameter blocks (8 Kbytes 
each). The parameter blocks are intended to provide 
storage for frequently updated system parameters 
and configuration or diagnostic information. The pa- 
rameter blocks can also be used to store additional 
boot or main code. The parameter blocks however, 
do not have the hardware write protection feature 
that the boot block has. The parameter blocks pro- 
vide for more efficient memory utilization when deal- 
ing with parameter changes versus regularly blocked 
devices. See the Block Memory Map section for ad- 
dress locations of the parameter blocks for the 
28F400BL-T and 28F400BL-B. 


2.1. 1.3 Main Block Operation 

Four main blocks of memory exist on the 28F400BL 
(3 x 128-Kbyte blocks and 1 x 96-Kbyte blocks). See 
the following section on Block Memory Map for the 
address location of these blocks for the 28F400BL-T 
and 28F400BL-B products. 


2.1.2 BLOCK MEMORY MAP 

Two versions of the 28F400BL product exist to sup- 
port two different memory maps of the array blocks 
in order to accommodate different microprocessor 
protocols for boot code location. The 28F400BL-T 
memory map is inverted from the 28F400BL-B mem- 
ory map. 

2. 1.2.1 28F400BL-B Memory Map 

The 28F400BL-B device has the 16-Kbyte boot 
block located from 00000H to 01 FFFH to accommo- 
date those microprocessors that boot from the bot- 
tom of the address map at 00000H. In the 
28F400BL-B the first 8-Kbyte parameter block re- 
sides in memory space from 02000H to 02FFFH. 
The second 8-Kbyte parameter block resides in 
memory space from 03000H to 03FFFH. The 
96-Kbyte main block resides in memory space from 
04000H to OFFFFH. The three 128-Kbyte main 
block resides in memory space from 10000H to 
1FFFFH, 20000H to 2FFFFH and 30000H to 
3FFFFH (word locations). See Figure 7. 


(Word Addresses) 


3FFFFH 



128-Kbyte MAIN BLOCK 



30000H 



2FFFFH 

128-Kbyte MAIN BLOCK 


20000H 



1FFFFH 

128-Kbyte MAIN BLOCK 


10000H 



OFFFFH 

96-Kbyte MAIN BLOCK 


04000H 



03FFFH 

8-Kbyte PARAMETER BLOCK 


03000H 


02FFFH 

8-Kbyte PARAMETER BLOCK 


02000H 


01 FFFH 
00000H 

16-Kbyte BOOT BLOCK 





Figure 7. 28F400BL-B Memory Map 
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2. 1.2.2 28F400BL-T Memory Map 

The 28F400BL-T device has the 16-Kbyte boot 
block located from 3E000H to 3FFFFH to accommo- 
date those microprocessors that boot from the top 
of the address map. In the 28F400BX-T the first 
8-Kbyte parameter block resides in memory space 
from 3D000H to 3DFFFH. The second 8-Kbyte pa- 
rameter block resides in memory space from 
3C000H to 3CFFFH. The 96-Kbyte main block re- 
sides in memory space from 30000H to 3BFFFH. 
The three 1 28-Kbyte main blocks reside in memory 
space from 20000H to 2FFFFH, 10000H to 1FFFFH 
and 00000H to OFFFFH as shown in Figure 8. 


(Word Addresses) 
3FFFFH 


3E000H 

3DFFFH 

3D000H 

3CFFFH 

3C000H 

3BFFFH 


30000H 

2FFFFH 


20000H 

1FFFFH 


10000H 

OFFFFH 


OOOOOH 


Figure 8. 28F400BL-T Memory Map 


16-Kbyte BOOT BLOCK 


8-Kbyte PARAMETER BLOCK 


8-Kbyte PARAMETER BLOCK 


96-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 
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Figure 9. 28F004BL and Byte-Wide Block Diagram 
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3.1 28F004BL Memory Organization 

3.1.1 BLOCKING 

The 28F004BL uses a blocked array architecture to 
provide independent erasure of memory blocks. A 
block is erased independently of other blocks in the 
array when an address is given within the block ad- 
dress range and the Erase Setup and Erase Confirm 
commands are written to the CUI. The 28F004BL is 
a random read/write memory, only erasure is per- 
formed by block. 

3.1. 1.1 Boot Block Operation and Data 
Protection 

The 16-Kbyte boot block provides a lock feature for 
secure code storage. The intent of the boot block is 
to provide a secure storage area for the kernel code 
that is required to boot a system in the event of pow- 
er failure or other disruption during code update. 
This lock feature ensures absolute data integrity by 
preventing the boot block from being programmed 
or erased when RP# is not at 12V. The boot block 
can be erased and programmed when RP# is held 
at 1 2V for the duration of the erase or program oper- 
ation. This allows customers to change the boot 
code when necessary while still providing security 
when needed. See the Block Memory Map section 
for address locations of the boot block for the 
28F004BL-T and 28F004BL-B. 


3.1. 1.2 Parameter Block Operation 

The 28F004BL has 2 parameter blocks (8 Kbytes 
each). The parameter blocks are intended to provide 
storage for frequently updated system parameters 
and configuration or diagnostic information. The pa- 
rameter blocks can also be used to store additional 
boot or main code. The parameter blocks however, 
do not have the hardware write protection feature 
that the boot block has. Parameter blocks provide 
for more efficient memory utilization when dealing 
with small parameter changes versus regularly 
blocked devices. See the Block Memory Map sec- 
tion for address locations of the parameter blocks 
for the 28F004BL-T and 28F004BL-B. 


3.1. 1.3 Main Block Operation 

Two main blocks of memory exist on the 28F004BL 
(3 x 128-Kbyte blocks and 1 x 96-Kbyte blocks). See 
the following section on Block Memory Map for the 
address location of these blocks for the 28F004BL-T 
and 28F004BL-B. 



3.1.2 BLOCK MEMORY MAP 

Two versions of the 28F004BL product exist to sup- 
port two different memory maps of the array blocks 
in order to accommodate different microprocessor 
protocols for boot code location. The 28F004BL-T 
memory map is inverted from the 28F004BL-B mem- 
ory map. 

3. 1.2.1 28F004BL-B Memory Map 

The 28F004BL-B device has the 16-Kbyte boot 
block located from 00000H to 03FFFH to accommo- 
date those microprocessors that boot from the bot- 
tom of the address map at 00000H. In the 
28F004BL-B the first 8-Kbyte parameter block re- 
sides in memory from 04000H to 05FFFH. The sec- 
ond 8-Kbyte parameter block resides in memory 
space from 06000H to 07FFFH. The 96-Kbyte main 
block resides in memory space from 08000H to 
1FFFFH. The three 128-Kbyte main blocks reside in 
memory space from 20000H to 3FFFFH, 40000H to 
5FFFFH and 60000H to 7FFFH. See Figure 10. 


7FFFFH 



128-Kbyte MAIN BLOCK 



60000H 



5FFFFH 

128-Kbyte MAIN BLOCK 


40000H 



3FFFFH 

128-Kbyte MAIN BLOCK 


20000H 



1FFFFH 

96-Kbyte MAIN BLOCK 


08000H 



07FFFH 

8-Kbyte PARAMETER BLOCK 


06000H 


05FFFH 

8-Kbyte PARAMETER BLOCK 


04000H 


03FFFH 

00000H 

16-Kbyte BOOT BLOCK 





Figure 10. 28F004BL-B Memory Map 
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3.1. 2.2 28F004BL-T Memory Map 

The 28F004BL-T device has the 16-Kbyte boot 
block located from 7C000H to 7FFFFH to accom- 
modate those microprocessors that boot from the 
top of the address map. In the 28F004BL-T the first 
8-Kbyte parameter block resides in memory space 
from 7A000H to 7BFFFH. The second 8-Kbyte pa- 
rameter block resides in memory space from 
78000H to 79FFFH. The 96-Kbyte main block re- 
sides in memory space from 60000H to 77FFFH. 
The three 128-Kbyte main blocks reside in memory 
space from 40000H to 5FFFFH, 20000H to 3FFFFH 
and 00000H to 1FFFFH. 


7FFFFH 

16-Kbyte BOOT BLOCK 

7C000H 

7BFFFH 

8-Kbyte PARAMETER BLOCK 
7A000H 

79FFFH 

8-Kbyte PARAMETER BLOCK 
78000H 

77FFFH 

96-Kbyte MAIN BLOCK 

60000H 

5FFFFH 

128-Kbyte MAIN BLOCK 

40000H 

3FFFFH 

128-Kbyte MAIN BLOCK 

20000H 

1FFFFH 

128-Kbyte MAIN BLOCK 


00000H 1 

Figure 11. 28F004BL-T Memory Map 
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4.0 PRODUCT FAMILY PRINCIPLES 
OF OPERATION 

Flash memory augments EPROM functionality with 
in-circuit electrical write and erase. The 4-Mbit flash 
memory family utilizes a Command User Interface 
(CUI) and internally generated and timed algorithms 
to simplify write and erase operations. 

The CUI allows for fixed power supplies during era- 
sure and programming, and maximum EPROM com- 
patibility. 

In the absence of high voltage on the Vpp pin, the 
4-Mbit flash family will only successfully execute the 
following commands: Read Array, Read Status Reg- 
ister, Clear Status Register and Intelligent Identifier 
mode. The device provides standard EPROM read, 
standby and output disable operations. Manufactur- 
er Identification and Device Identification data can 
be accessed through the CUI or through the stan- 
dard EPROM A9 high voltage access (Vid) (for 
PROM programmer equipment). 

The same EPROM read, standby and output disable 
functions are available when high voltage is applied 
to the Vpp pin. In addition, high voltage on Vpp al- 
lows write and erase of the device. All functions as- 
sociated with altering memory contents: write and 
erase, Intelligent Identifier read and Read Status are 
accessed via the CUI. 

The purpose of the Write State Machine (WSM) is to 
completely automate the write and erasure of the 
device. The WSM will begin operation upon receipt 
of a signal from the CUI and will report status back 
through a Status Register. The CUI will handle the 
WE# interface to the data and address latches, as 
well as system software requests for status while the 
WSM is in operation. 


4.1 28F400BL Bus Operations 

Flash memory reads, erases and writes in-system 
via the local CPU. All bus cycles to or from the flash 
memory conform to standard microprocessor bus 
cycles. 
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Table 1. Bus Operations for WORD-WIDE Mode (BYTE# = V, H ) 


Mode 

Notes 

RP# 

CE# 

OE# 

WE# 

Ag 

Ao 

Vpp 

DQo-15 

Read 

1,2,3 







X 

DouT 

Output Disable 


V|H 

V|L 

V|H 

V|H 

X 

X 

X 

High Z 

Standby 


V| H 

V|H 

X 

X 

X 

X 

X 

High Z 

Deep Power-Down 

9 

V|L 

X 

X 

X 

X 

X 

X 

High Z 

Intelligent Identifier (Mfr) 

4 

V|H 

V|L 

VlL 

V|H 

V ID 

VlL 

X 

0089H 

Intelligent Identifier (Device) 

4, 5,10 

V|H 

V|L 

V|L 

V|H 

V|D 

V|H 

X 

4470H 
4471 H 

Write 

6, 7, 8 

V| H 

V|L 

V|H 

V|L 

X 

X 

X 

Din 


Table 2. Bus Operations for BYTE-WIDE Mode (BYTE# = V !L ) 


Mode 

Notes 

RP# 

CE# 

OE# 

WE# 

Ag 

Aq 

A-1 

Vpp 

DQq-7 

T 

CO 

a 

0 

Read 

1,2,3 





D 



X 

I'M 


Output Disable 


ilB 

m 



D 



X 


MliM 

Standby 



1 

— 

X 

D 



X 



Deep Power-Down 


■ 

mm 


X 


D 

D 




Intelligent Identifier 
(Mfr) 

4 

V|H 










Intelligent Identifier 
(Device) 

4, 5, 10 

V|H 

V|L 

VlL 

V|H 

V|D 

V| H 

X 

X 

70H 
71 H 

High Z 

Write 

6, 7,8 

V|H 

VlL 

V|H 

VlL 

X 

X 

X 

X 

Din 

High Z 


NOTES: 

1 . Refer to DC Characteristics. 

2. X can be Vjl or Vih for control pins and addresses, Vppi_ or Vppn for Vpp. 

3. See DC Characteristics for Vppl, Vpph, Vhh. Vid voltages. 

4. Manufacturer and Device codes may also be accessed via a CUI write sequence. A1-A17 = V|[_. 

5. Device ID = 4470H for 28F400BL-T and 4471 H for 28F400BL-B. 

6. Refer to Table 4 for valid Din during a write operation. 

7. Command writes for Block Erase or Word/Byte Write are only executed when Vpp = Vppn- 

8. To write or erase the boot block, hold RP# at Vhh- 

9. RP# must be at GND ±0.2V to meet the 1.2 juA maximum deep power-down current. 

10. The device ID codes are identical to those of the 28F400BX 5V version and SmartVoltage equivalent. 
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4.2 28F004BL Bus Operations 


Table 3. Bus Operations 


Mode 

Notes 

RP# 

CE# 

OE# 

WE# 

A 9 

A 0 

Vpp 

DQo-7 

Read 

1,2,3 

V|H 

V|L 

V|L 

V| H 

X 

X 

X 

d out 

Output Disable 


V|H 

V|L 

V|H 

V|H 

X 

X 

X 

High Z 

Standby 


V| H 

V|H 

X 

X 

X 

X 

X 

High Z 

Deep Power-Down 

9 

V|L 

X 

X 

X 

X 

X 

X 

High Z 

Intelligent Identifier (Mfr) 

4 

V|H 

V|L 

V|L 

V|H 

V|D 

VlL 

X 

89H 

Intelligent Identifier (Device) 

4, 5,10 

V,H 

V|L 

V|L 

V|H 

V|D 

V|H 

X 

78H 

79H 

Write 

6, 7,8 

V|H 

V| L 

V|H 

V|L 

X 

X 

X 

Din 


NOTES: 

1 . Refer to DC Characteristics. 

2. X can be V||_ or V|h for control pins and addresses, Vppi_ or Vppn for Vpp. 

3. See DC Characteristics for Vpp(_, Vppn, Vhh, Vid voltages. 

4. Manufacturer and Device codes may also be accessed via a CUI write sequence. A-i-Ag, A-io-A-iq = V|i_. 

5. Device ID = 78H for 28F004BL-T and 79H for 28F004BL-B. 

6. Refer to Table 4 for valid Din during a write operation. 

7. Command writes for Block erase or byte program are only executed when Vpp = Vppn- 

8. Program or erase the Boot block by holding RP# at Vhh- 

9. RP# must be at GND ±0.2V to meet the 1.2 juA maximum deep power-down current. 

10. The device ID codes are identical to those of the 28F004BX 5V version and SmartVoltage equivalent. 


4.3 Read Operations 

The 4-Mbit flash family has three user read modes; 
Array, Intelligent Identifier, and Status Register. 
Status Register read mode will be discussed in detail 
in the “Write Operations” section. 

During power-up conditions (Vcc supply ramping), it 
takes a maximum of 600 ns from Vcc at 3.0V mini- 
mum to obtain valid data on the outputs. 


4.3.1.2 Input Control 

With WE# at logic-high level (Vm), input to the de- 
vice is disabled. Data Input/Output pins (DQ[0:15] 
or DQ[0:7]) are controlled by OE#. 

4.3.2 INTELLIGENT IDENTIFIERS 
28F400BL PRODUCTS 


4.3.1 READ ARRAY 

If the memory is not in the Read Array mode, it is 
necessary to write the appropriate read mode com- 
mand to the CUI. The 4-Mbit flash family has three 
control functions, all of which must be logically ac- 
tive, to obtain data at the outputs. Chip-Enable CE# 
is the device selection control. Power-Down RP# is 
the device power control. Output-Enable OE# is the 
DATA INPUT/OUTPUT (DQ[0:15] or DQ[0:7]) direc- 
tion control and when active is used to drive data 
from the selected memory onto the I/O bus. 


The manufacturer and device codes are read via the 
CUI or by taking the A9 pin to 12V. Writing 90H to 
the CUI places the device into Intelligent Identifier 
read mode. A read of location 00000H outputs the 
manufacturer’s identification code, 0089H, and loca- 
tion 00001 H outputs the device code; 4470H for 
28F400BL-T, 4471 H for 28F4001BL-B. When 
BYTE# is at a logic low only the lower byte of the 
above signatures is read and DQi 5 /A_-| is a “don’t 
care” during Intelligent Identifier mode. A read array 
command must be written to the CUI to return to the 
read array mode. 


4.3.1. 1 Output Control 

With OE# at logic-high level (Vm), the output from 
the device is disabled and data input/output pins 
(DQ[0:1 5] or DQ[0:7] are tri-stated. Data input is 
then controlled by WE#. 
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The manufacturer and device codes are also read 
via the CUI or by taking the A9 pin to 12V. Writing 
90H to the CUI places the device into Intelligent 
Identifier read mode. A read of location 00000H out- 
puts the manufacturer’s identification code, 89H, 
and location 00001 H outputs the device code; 78H 
for 28F004BL-T, 79H for 28F004BL-B. 


4.4 Write Operations 

Commands are written to the CUI using standard mi- 
croprocessor write timings. The CUI serves as the 
interface between the microprocessor and the inter- 
nal chip operation. The CUI can decipher Read Ar- 
ray, Read Intelligent Identifier, Read Status Register, 
Clear Status Register, Erase and Program com- 
mands. In the event of a read command, the CUI 
simply points the read path at either the array, the 
Intelligent Identifier, or the status register depending 
on the specific read command given. For a program 
or erase cycle, the CUI informs the write state ma- 
chine that a write or erase has been requested. Dur- 
ing a program cycle, the Write State Machine will 
control the program sequences and the CUI will only 
respond to status reads. During an erase cycle, the 
CUI will respond to status reads and erase suspend. 
After the Write State Machine has completed its 
task, it will allow the CUI to respond to its full com- 
mand set. The CUI will stay in the current command 
state until the microprocessor issues another com- 
mand. 

The CUI will successfully initiate an erase or write 
operation only when Vpp is within its voltage range. 
Depending upon the application, the system design- 
er may choose to make the Vpp power supply 
switchable, available only when memory updates 
are desired. The system designer can also choose 
to “hard-wire” Vpp to 12V. The 4-Mbit flash memory 
family is designed to accommodate either design 
practice. It is recommended that RP# be tied to logi- 
cal Reset for data protection during unstable CPU 
reset function as described in the “Product Family 
Overview” section. 


intel. 

4.4.1 BOOT BLOCK WRITE OPERATIONS 

In the case of Boot Block modifications (write and 
erase), RP# is set to Vhh = 12V typically, in addi- 
tion to Vpp at high voltage. 

However, if RP# is not at Vhh when a program or 
erase operation of the boot block is attempted, the 
corresponding status register bit (Bit 4 for Program 
and Bit 5 for Erase, refer to Table 5 for Status Regis- 
ter Definitions) is set to indicate the failure to com- 
plete the operation. 


4.4.2 COMMAND USER INTERFACE (CUI) 

The Command User Interface (CUI) serves as the 
interface to the microprocessor. The CUI points the 
read/write path to the appropriate circuit block as 
described in the previous section. After the WSM 
has completed its task, it will set the WSM Status bit 
to a “1”, which will also allow the CUI to respond to 
its full command set. Note that after the WSM has 
returned control to the CUI, the CUI will remain in its 
current state. 


4.4.2. 1 Command Set 


Command 

Codes 

Device Mode 

00 

Invalid/Reserved 

10 

Alternate Program Setup 

20 

Erase Setup 

40 

Program Setup 

50 

Clear Status Register 

70 

Read Status Register 

90 

Intelligent Identifier 

B0 

Erase Suspend 

DO 

Erase Resume/Erase Confirm 

FF 

Read Array 


4.4.2.2 Command Function Descriptions 

Device operations are selected by writing specific 
commands into the CUI. Table 4 below defines the 
4-Mbit flash memory family commands. 
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Table 4. Command Definitions 


Command 

Bus 

Cycles 

Notes 

First Bus Cycle 

Second Bus Cycle 


Req’d 

8 

Operation 

Address 

Data 

Operation 

Address 

Data 

Read Array 

1 

1 

Write 

X 

FFH 




Intelligent Identifier 

3 

2,4 

Write 

X 

90H 

Read 

IA 

IID 

Read Status Register 

2 

3 

Write 

X 

70H 

Read 

X 

SRD 

Clear Status Register 

1 


Write 

X 

50H 




Erase Setup/Erase Confirm 

2 

5 

Write 

BA 

20H 

Write 

BA 

DOH 

Word/Byte Write 
Setup/Write 

2 

6,7 

Write 

WA 

40H 

Write 

WA 

WD 

Erase Suspend/Erase Resume 

2 


Write 

X 

BOH 

Write 

X 

DOH 

Alternate Word/Byte Write 
Setup/Write 

2 

WD 

2,3,7 

Write 

WA 

10H 

Write 

WA 


NOTES: 

1. Bus operations are defined in Tables 1, 2, 3. 

2. IA = Identifier Address: 00H for manufacturer code, 01 H for device code. 

3. SRD = Data read from Status Register. 

4. IID = Intelligent Identifier Data. 

Following the Intelligent Identifier command, two read operations access manufacturer and device codes. 

5. BA = Address within the block being erased. 

6. WA = Address to be written. 

WD = Data to be written at location WA. 

7. Either 40H or 10H commands is valid. 

8 . When writing commands to the device the upper data bus [DQ 8 -DQ 15 ] = X (28F400BL-only) which is either Vcc or Vss 
to avoid burning additional current. 


Invalid/Reserved 

These are unassigned commands. It is not recom- 
mended that the customer use any command other 
than the valid commands specified above. Intel re- 
serves the right to redefine these codes for future 
functions. 


Read Array (FFH) 

This single write command points the read path at 
the array. If the host CPU performs a CE#/OE# 
controlled read immediately following a two-write se- 
quence that started the WSM, then the device will 
output status register contents. If the Read Array 
command is given after Erase Setup the device is 
reset to read the array. A two Read Array command 
sequence (FFH) is required to reset to Read Array 
after Program Setup. 


Intelligent Identifier (90H) 

After this command is executed, the CUI points the 
output path to the Intelligent Identifier circuits. Only 
Intelligent Identifier values at addresses 0 and 1 can 
be read (only address AO is used in this mode, all 
other address inputs are ignored). 


Read Status Register (70H) 

This is one of the two commands that is executable 
while the state machine is operating. After this com- 
mand is written, a read of the device will output the 
contents of the status register, regardless of the ad- 
dress presented to the device. 

The device automatically enters this mode after pro- 
gram or erase has completed. 

Clear Status Register (50H) 

The WSM can only set the Program Status and 
Erase Status bits in the status register, it can not 
clear them. Two reasons exist for operating the 
status register in this fashion. The first is a synchro- 
nization. The WSM does not know when the host 
CPU has read the status register, therefore it would 
not know when to clear the status bits. Secondly, if 
the CPU is programming a string of bytes, it may be 
more efficient to query the status register after pro- 
gramming the string. Thus, if any errors exist while 
programming the string, the status register will re- 
turn the accumulated error status. 


I 
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Program Setup (40H or 10H) 

This command simply sets the CUI into a state such 
that the next write will load the address and data 
registers. Either 40H or 10H can be used for Pro- 
gram Setup. Both commands are included to ac- 
commodate efforts to achieve an industry standard 
command code set. 


Program 

The second write after the program setup command, 
will latch addresses and data. Also, the CUI initiates 
the WSM to begin execution of the program algo- 
rithm. While the WSM finishes the algorithm, the de- 
vice will output Status Register contents. Note that 
the WSM cannot be suspended during program- 
ming. 

Erase Setup (20H) 

Prepares the CUI for the Erase Confirm command. 
No other action is taken. If the next command is not 
an Erase Confirm command then the CUI will set 
both the Program Status and Erase Status bits of the 
Status Register to a “1”, place the device into the 
Read Status Register state, and wait for another 
command. 


Erase Confirm (DOH) 

If the previous command was an Erase Setup com- 
mand, then the CUI will enable the WSM to erase, at 
the same time closing the address and data latches, 
and respond only to the Read Status Register and 
Erase Suspend commands. While the WSM is exe- 
cuting, the device will output Status Register data 
when OE# is toggled low. Status Register data can 
only be updated by toggling either OE# or CE# low. 

Erase Suspend (BOH) 

This command only has meaning while the WSM is 
executing an Erase operation, and therefore will only 
be responded to during an erase operation. After 
this command has been executed, the CUI will initi- 
ate the WSM to suspend Erase operations, and then 
return to responding to only Read Status Register or 
to the Erase Resume commands. Once the WSM 
has reached the Suspend state, it will set an output 
into the CUI which allows the CUI to respond to the 
Read Array, Read Status Register, and Erase Re- 
sume commands. In this mode, the CUI will not re- 
spond to any other commands. The WSM will also 
set the WSM Status bit to a “1”. The WSM will con- 
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tinue to run, idling in the SUSPEND state, regardless 
of the state of all input control pins, with the exclu- 
sion of RP#. RP# low will immediately shut down 
the WSM and the remainder of the chip. 

Erase Resume (DOH) 

This command will cause the CUI to clear the Sus- 
pend state and set the WSM Status bit to a “0”, but 
only if an Erase Suspend command was previously 
issued. Erase Resume will not have any effect in all 
other conditions. 


4.4.3 STATUS REGISTER 

The 4 Mbit flash family contains a status register 
which may be read to determine when a program or 
erase operation is complete, and whether that oper- 
ation completed successfully. The status register 
may be read at any time by writing the Read Status 
command to the CUI. After writing this command, all 
subsequent Read operations output data from the 
status register until another command is written to 
the CUI. A Read Array command must be written to 
the CUI to return to the Read Array mode. 

The status register bits are output on DQ[0:7] 
whether the device is in the byte-wide (x8) or word- 
wide (x16) mode for the 28F400BL. In the word-wide 
mode the upper byte, DQ[8:15] is set to 00H during 
a Read Status command. In the byte-wide mode, 
DO [8: 14] is tri-stated and DQ15/A-1 retains the 
low order address function. 

It should be noted that the contents of the status 
register are latched on the falling edge of OE# or 
CE# whichever occurs last in the read cycle. This 
prevents possible bus errors which might occur if the 
contents of the status register change while reading 
the status register. CE# or OE# must be toggled 
with each subsequent status read, or the completion 
of a program or erase operation will not be evident. 

The Status Register is the interface between the mi- 
croprocessor and the Write State Machine (WSM). 
When the WSM is active, this register will indicate 
the status of the WSM, and will also hold the bits 
indicating whether or not the WSM was successful in 
performing the desired operation. The WSM sets 
status bits “Three” through “Seven” and clears bits 
“Six” and “Seven”, but cannot clear status bits 
“Three” through “Five”. These bits can only be 
cleared by the controlling CPU through the use of 
the Clear Status Register command. 
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4.4.3. 1 Status Register Bit Definition 

Table 5. Status Register Definitions 


WSMS 

ESS 

ES 

PS 

VPPS 

R 

R 

R 


7 6 5 4 3 2 1 0 


NOTES: 

Write State Machine Status bit must first be checked to 
determine byte/word program or block erase completion, 
before the Program or Erase Status bits are checked for 
success. 

When Erase Suspend is issued, WSM halts execution 
and sets both WSMS and ESS bits to “1”. ESS bit re- 
mains set to “1” until an Erase Resume command is is- 
sued. 

When this bit is set to “1”. WSM has applied the maxi- 
mum number of erase pulses to the block and is still un- 
able to successfully perform an erase verify. 

When this bit is set to “1”, WSM has attempted but failed 
to Program a byte or word. 

The Vpp Status bit unlike an A/D converter, does not 
provide continuous indication of Vpp level. The WSM in- 
terrogates the Vpp level only after the byte write or block 
erase command sequences have been entered and in- 
forms the system if Vpp has not been switched on. The 
Vpp Status bit is not guaranteed to report accurate feed- 
back between Vppi_ and Vppn- 

SR.2-SR.0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use and should be masked out when polling the Status Register. 


SR. 7 = WRITE STATE MACHINE STATUS 
1 = Ready 

0 = Busy 

SR.6 = ERASE SUSPEND STATUS 

1 = Erase Suspended 

0 = Erase in Progress/Completed 


SR.5 = ERASE STATUS 
1 = Error in Block Erasure 

0 = Successful Block Erase 

SR.4 = PROGRAM STATUS 

1 = Error in Byte/Word Program 

0 = Successful Byte/Word Program 
SR.3 = Vpp STATUS 

1 = Vpp Low Detect; Operation Abort 
0 = Vpp OK 


4.4.3.2 Clearing the Status Register 

Certain bits in the status register are set by the write 
state machine, and can only be reset by the system 
software. These bits can indicate various failure con- 
ditions. By allowing the system software to control 
the resetting of these bits, several operations may 
be performed (such as cumulatively programming 
several bytes or erasing multiple blocks in se- 
quence). The status register may then be read to 
determine if an error occurred during that program- 
ming or erasure series. This adds flexibility to the 
way the device may be programmed or erased. To 
clear the status register, the Clear Status Register 
command is written to the CUI. Then, any other 
command may be issued to the CUI. Note again that 
before a read cycle can be initiated, a Read com- 
mand must be written to the CUI to specify whether 
the read data is to come from the array, status regis- 
ter, or Intelligent Identifier. 


4.4.4 PROGRAM MODE 

Program is executed by a two-write sequence. The 
Program Setup command is written to the CUI fol- 
lowed by a second write which specifies the address 
and data to be programmed. The write state ma- 
chine will execute a sequence Of internally timed 
events to: 

1 . program the desired bits of the addressed memo- 
ry word (byte), and 

2. verify that the desired bits are sufficiently pro- 
grammed. 

Programming of the memory results in specific bits 
within a byte or word being changed to a “0”. 

If the user attempts to program “1 ”s, there will be no 
change of the memory cell content and no error oc- 
curs. 
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Similar to erasure, the status register indicates 
whether programming is complete. While the pro- 
gram sequence is executing, bit 7 of the status regis- 
ter is a “0”. The status register can be polled by 
toggling either CE# or OE# to determine when the 
program sequence is complete. Only the Read 
Status Register command is valid while program- 
ming is active. 

When programming is complete, the status bits, 
which indicate whether the program operation was 
successful, should be checked. If the programming 
operation was unsuccessful, Bit 4 of the status regis- 
ter is set to a “1” to indicate a Program Failure. If 
Bit 3 is set then Vpp was not within acceptable limits, 
and the WSM will not execute the programming se- 
quence. 

The status register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after programming is completed; however, it 
must be recognized that reads from the memory, 
status register, or Intelligent Identifier cannot be ac- 
complished until the CUI is given the appropriate 
command. A Read Array command must first be giv- 
en before memory contents can be read. 

Figure 12 shows a system software flowchart for de- 
vice byte programming operation. Figure 1 3 shows a 
similar flowchart for device word programming oper- 
ation (28F400BL-only). 

4.4.5 ERASE MODE 

Erasure of a single block is initiated by writing the 
Erase Setup and Erase Confirm commands to the 
CUI, along with the addresses, A[1 2:1 7] for the 
28F400BL or A[12:18] for the 28F004BL, identifying 
the block to be erased. These addresses are latched 
internally when the Erase Confirm command is is- 
sued. Block erasure results in all bits within the block 
being set to “1”. 

The WSM will execute a sequence of internally 
timed events to: 

1. program all bits within the block 

2. verify that all bits within the block are sufficiently 
programmed 

3. erase all bits within the block and 

4. verify that all bits within the block are sufficiently 
erased 

While the erase sequence is executing, Bit 7 of the 
status register is a “0”. 


intel 

When the status register indicates that erasure is 
complete, the status bits, which indicate whether the 
erase operation was successful, should be checked. 
If the erasure operation was unsuccessful, Bit 5 of 
the status register is set to a “1” to indicate an 
Erase Failure. If Vpp was not within acceptable limits 
after the Erase Confirm command is issued, the 
WSM will not execute an erase sequence; instead, 
Bit 5 of the status register is set to a “1 " to indicate 
an Erase Failure, and Bit 3 is set to a “1” to identify 
that Vpp supply voltage was not within acceptable 
limits. 

The status register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after erasure is completed; however, it must 
be recognized that reads from the memory array, 
status register, or Intelligent Identifier can not be ac- 
complished until the CUI is given the appropriate 
command. A Read Array command must first be giv- 
en before memory contents can be read. 

Figure 13 shows a system software flowchart for 
Block Erase operation. 

4.4.5. 1 Suspending and Resuming Erase 

Since an erase operation typically requires 2 sec- 
onds to 5 seconds to complete, an Erase Suspend 
command is provided. This allows erase-sequence 
interruption in order to read data from another block 
of the memory. Once the erase sequence is started, 
writing the Erase Suspend command to the CUI re- 
quests that the Write State Machine (WSM) pause 
the erase sequence at a predetermined point in the 
erase algorithm. The status register must be read to 
determine when the erase operation has been sus- 
pended. 

At this point, a Read Array command can be written 
to the CUI in order to read data from blocks other 
than that which is being suspended. The only other 
valid command at this time is the Erase Resume 
command or Read Status Register operation. 

Figure 14 shows a system software flowchart detail- 
ing the operation. 

During Erase Suspend mode, the chip can go into a 
pseudo-standby mode by taking CE# to Vm and the 
active current is now a maximum of 6 mA. If the chip 
is enabled while in this mode by taking CE# to V||_, 
the Erase Resume command can be issued to re- 
sume the erase operation. 
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Upon completion of reads from any block other than 
the block being erased, the Erase Resume com- 
mand must be issued. When the Erase Resume 
command is given, the WSM will continue with the 
erase sequence and complete erasing the block. As 
with the end of erase, the status register must be 
read, cleared, and the next instruction issued in or- 
der to continue. 


4.4.6 EXTENDED CYCLING 

Intel has designed extended cycling capability into 
its ETOX III flash memory technology. The 4-Mbit 
low voltage flash memory family is designed for 
10,000 program/erase cycles on each of the seven 
blocks. The combination of low electric fields, clean 
oxide processing and minimized oxide area per 
memory cell subjected to the tunneling electric field, 
results in very high cycling capability. 
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Bus 

Operation 

Command 

Comments 

Write 

Setup 

Program 

Data = 40H 
Address = Byte to be 
programmed 

Write 

Program 

Data to be programmed 
Address = Byte to be 
programmed 

Read 


Status Register Data. 

Toggle OE# or CE# to update 
Status Register 

Standby 


Check SR.7 
1 = Ready, 0 = Busy 

Repeat for subsequent bytes. 

Full status check can be done after each byte or after a 
sequence of bytes. 

Write FFH after the last byte programming operation to 
reset the device to Read Array Mode. 
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Full Status Check Procedure 



Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4 

1 = Byte Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 

SR.4 is only cleared by the Clear Status Register 
Command, in cases where multiple bytes are programmed 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 12. Automated Byte Programming Flowchart 
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Bus 

Operation 

Command 

Comments 

Write 

Setup 

Program 

Data = 40 H 
Address = Word to be 
programmed 

Write 

Program 

Data to be programmed 
Address = Word to be 
programmed 

Read 


Status Register Data. 

Toggle OE# or CE# to update 
Status Register 

Standby 


Check SR.7 
1 = Ready, 0 = Busy 

Repeat for subsequent words. 

Full status check can be done after each word or after a 
sequence of words. 

Write FFH after the last word programming operation to 
reset the device to Read Array Mode. 



Full Status Check Procedure 



Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4 

1 = Byte Program Error 


SR. 3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 

SR. 4 is only cleared by the Clear Status Register 
Command, in cases where multiple words are programmed 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 13. Automated Word Programming Flowchart 
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Bus 

Operation 

Command 

Comments 

Write 

Setup 

Erase 

Data = 20H 

Address = Within block to be 
erased 

Write 

Erase 

Data = DOH 

Address = Within block to be 
erased 

Read 


Status Register Data. 

Toggle OE# or CE# to update 
Status Register 

Standby 


Check SR.7 
1 = Ready, 0 = Busy 

Repeat for subsequent blocks. 

Full status check can be done after each block or after a 
sequence of blocks. 

Write FFH after the last block erase operation to reset the 
device to Read Array Mode. 
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Full Status Check Procedure 



Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4,5 

Both 1 = Command Sequence 
Error 

Standby 


Check SR. 5 
1 = Block Erase Error 

SR. 3 MUST be cleared, if set during an erase attempt, 
before further attempts are allowed by the Write State 
Machine. 

SR. 5 is only cleared by the Clear Status Register 
Command, in cases where multiple blocks are erased 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 14. Automated Block Erase Flowchart 










Figure 15. Erase Suspend/Resume Flowchart 


4.5 Power Consumption 

4.5.1 ACTIVE POWER 

With CE# at a logic-low level and RP# at a logic- 
high level, the device is placed in the active mode. 
The device Ice current is a maximum of 22 mA at 
5 MHz. 


4.5.2 AUTOMATIC POWER SAVINGS 

Automatic Power Savings (APS) is a low power fea- 
ture during active mode of operation. The 4-Mbit 
family of products incorporate Power Reduction 
Control (PRC) circuitry which basically allows the de- 
vice to put itself into a low current state when it is 
•not being accessed. After data is read from the 
memory array, PRC logic controls the device’s pow- 
er consumption by entering the APS mode where 


typical Ice current is 0.8 mA and maximum Ice cur- 
rent is 2 mA. The device stays in this static state with 
outputs valid until a new memory location is read. 

4.5.3 STANDBY POWER 

With CE# at a logic-high level (Vjh), and the CUI 
read mode, the memory is placed in standby mode 
where the maximum Ice standby current is 120 jutA 
with CMOS input signals. The standby operation dis- 
ables much of the device’s circuitry and substantially 
reduces device power consumption. The outputs 
(DQ[0:15] or DQ[0:7] are placed in a high-imped- 
ance state independent of the status of the OE# 
signal., When the 4-Mbit flash family is deselected 
during erase or program functions, the devices will 
continue to perform the erase or program function 
and consume program or erase active power until 
program or erase is completed. 
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4.5.4 RESET/DEEP POWER-DOWN 

The 4-Mbit flash family supports a typical Ice of 
0.2 fiA in deep power-down mode. One of the target 
markets for these devices is in portable equipment 
where the power consumption of the machine is of 
prime importance. The 4-Mbit flash family has a 
RP# pin which places the device in the deep power- 
down mode. When RP# is at a logic-low (GND 
± 0.2V), all circuits are turned off and the device typ-- 
ically draws 0.2 jllA of Vcc current. 

During read modes, the RP# pin going low dese- 
lects the memory and places the output drivers in a 
high impedance state. Recovery from the deep pow- 
er-down state, requires a maximum of 600 ns to ac- 
cess valid data (tpHQv)- 

During erase or program modes, RP# low will abort 
either erase or program operation. The contents of 
the memory are no longer valid as the data has been 
corrupted by the RP# function. As in the read mode 
above, all internal circuitry is turned off to achieve 
the 0.2 jmA current level. 

RP# transitions to V||_ or turning power off to the 
device will clear the status register. 

This use of RP# during system reset is important 
with automated write/erase devices. When the sys- 
tem comes out of reset it expects to read from the 
flash memory. Automated flash memories provide 
status information when accessed during write/ 
erase modes. If a CPU reset occurs with no flash 
memory reset, proper CPU initialization would not 
occur because the flash memory would be providing 
the status information instead of array data. Intel’s 
Flash Memories allow proper CPU initialization fol- 
lowing a system reset through the use of the RP# 
input. In this application RP# is controlled by the 
same RESET # signal that resets the system CPU. 


4.6 Power-up Operation 

The 4-Mbit flash memory family is designed to offer 
protection against accidental block erasure or pro- 
gramming during power transitions. Upon power-up 
the 4-Mbit flash memory family is indifferent as to 
which power supply, Vpp or Vcc. powers-up first. 
Power supply sequencing is not required. 

The 4-Mbit flash memory family ensures the CUI is 
reset to the read mode on power-up. 

In addition, on power-up the user must either drop 
CE# low or present a new address to ensure valid 
data at the outputs. 

A system designer must guard against spurious 
writes for Vcc voltages above Vlko when Vpp is 


active. Since both WE# and CE# must be low for a 
command write, driving either signal to Vih will inhibit 
writes to the device. The CUI architecture provides 
an added level of protection since alteration of mem- 
ory contents can only occur after successful com- 
pletion of the two-step command sequences. Finally 
the device is disabled until RP# is brought to Vm, 
regardless of the state of its control inputs. This fea- 
ture provides yet another level of memory protec- 
tion. 


4.7 Power Supply Decoupling 

Flash memory’s power switching characteristics re- 
quire careful device decoupling methods. System 
designers are interested in 3 supply current issues: 

• Standby current levels (Ices) 

• Active current levels (Iccr) 

• Transient peaks produced by falling and rising 
edges of CE#. 

Transient current magnitudes depend on the device 
outputs’ capacitive and inductive loading. Two-line 
control and proper decoupling capacitor selection 
will suppress these transient voltage peaks. Each 
flash device should have a 0.1 /xF ceramic capacitor 
connected between each Vcc and GND, and be- 
tween its Vpp and GND. These high frequency, low- 
inherent inductance capacitors should be placed as 
close as possible to the package leads. 

4.7.1 Vpp TRACE ON PRINTED CIRCUIT 
BOARDS 

Writing to flash memories while they reside in the 
target system, requires special consideration of the 
Vpp power supply trace by the printed circuit board 
designer. The Vpp pin supplies the flash memory 
cell’s current for programming and erasing. One 
should use similar trace widths and layout consider- 
ations given to the Vcc power supply trace. Ade- 
quate Vpp supply traces and decoupling will de- 
crease spikes and overshoots. 

4.7.2 Vcc, Vpp AND RP# TRANSITIONS 

The CUI latches commands as issued by system 
software and is not altered by Vpp or CE# tran- 
sitions or WSM actions. Its state upon power-up, af- 
ter exit from deep power-down mode or after Vcc 
transitions below Vlko (Lockout voltage), is Read 
Array mode. 

After any word/byte write or block erase operation is 
complete and even after Vpp transitions down to 
Vppl, the CUI must be reset to Read Array mode via 
the Read Array command when accesses to the 
flash memory are desired. 
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5.0 OPERATING SPECIFICATIONS 


ABSOLUTE MAXIMUM RATINGS 

Operating Temperature 

During Read -20°Cto +70°C0) 

During Block Erase/ Byte Write 0°C to +70°C 

Temperature Under Bias -20°C to + 80°C 

Storage Temperature - 65°C to + 1 25°C 

Voltage on any Pin 

(except Vcc. Vpp, Ag and RP#) 

with Respect to GND -2.0V to + 7.0V(2) 

Voltage on Pin RP# or Pin Ag 

with Respect to GND -2.0V to + 13.5V(2, 3) 

Vcc Program Voltage with 
Respect to GND 
during Block Erase and 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 

* WARNING: Stressing the device beyond the “ Absolute 
Maximum Ratings” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


Word/Byte Write - 2.0V to + 1 4.0V(2, 3) 

Vcc Supply Voltage 

with Respect to GND -2.0V to + 7.0V(2) 

Output Short Circuit Current 100 mA( 4 ) 

NOTES: 

1 . Operating temperature is for commercial product defined by this specification. 

2. Minimum DC voltage is -0.5V on input/output pins. During transitions, this level may undershoot to -2.0 V for periods 
<20 ns. Maximum DC voltage on input/output pins is Vcc + 0.5V which during transitions may overshoot to Vcc + 2.0 V 
for periods < 20 ns. 

3. Maximum DC voltage on Vpp may overshoot to + 14.0V for periods <20 ns. Maximum DC voltage on RP# or Ag may 
overshoot to 13.5V for periods < 20 ns. 

4. Output shorted for no more than one second. No more than one output shorted at a time. 

5. AC specifications are valid at both voltage ranges. See DC Characteristics tables for voltage range-specific specifications. 


OPERATING CONDITIONS 


Symbol 

Parameter 

Notes 

Min 

Max 

Unit 

Ta 

Operating Temperature 


-20 

70 

°C 

Vcc 

Vcc Supply Voltage 

Program/ Erase 

3.15 

3.60 

V 

Read 

3.00 

3.60 

V 

Vcc 

Vcc Supply Voltage 

5 

4.50 

5.50 

V 


DC CHARACTERISTICS V c c = 3.3V ±0.3V Read, 3.1 5V-3.6V Program/Erase 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 


lu 

Input Load Current 

1 

■ 

■ 




•lo 

Output Leakage Current 

1 



±10 

jllA 

v cc = v cc Max 
VoilT = Vcc or GND 




28F400BL-T/B, 28F004BL-T/B 


iny 


DC CHARACTERISTICS V cc = 3.3V ±0.3V Read, 3.15V-3.6V Program/Erase (Continued) 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Conditions 

•ccs 

Vcc Standby Current 

1,3 


45 

120 

jmA 

Vcc = Vcc Max 
CE# = RP# = V| H 

45 

120 

/aA 

Vcc = Vcc Max 

CE# = RP# = V C c ±0.2V 

28F400BX: 

BYTE# = V C c ±0.2VorGND 

•CCD 

Vcc Deep Power-Down Current 

1 


0.20 

1.2 

fiA 

RP# = GND ±0.2V 

•CCR 

Vcc Read Current for 
28F400BX-L Word-Wide and 
Byte-Wide Mode and 
28F004BX-L Byte-Wide Mode 

1 

5,6 


15 

25 

mA 

Vcc = V C c Max, CE# = GND 
f = 5 MHz, l 0 UT = 0 mA 
CMOS Inputs 

15 

25 

mA 

Vcc = v cc Max, CE# = V||_ 
f = 5 MHz, l 0 UT = 0 mA 
TTL Inputs 

>ccw 

Vcc Word Write Current 

1 



30 

ESQ 


Iccw 

Vcc Byte Write Current 

1 



30 


Byte Write in Progress 

'CCE 

Vcc Block Erase Current 

1 



20 

mA 

Block Erase in Progress 

•CCES 

Vcc Erase Suspend Current 

1,2 


3 


mA 

Block Erase Suspended, 
CE# = V| H 

Ipps 

Vpp Standby Current 

1 




jutA 

8 

> 

VI 

CL 

CL 

> 

IPPD 

Vpp Deep Power-Down Current 

1 



5.0 

fxA 

RP# = GND +0.2V 

>PPR . 

Vpp Read Current 

1,4 



200 

fxA 

8 

> 

A 

CL 

CL 

> 

IppW 

Vpp Word Write Current 

1,4 



m 


Vpp - VppH 

Word Write in Progress 

IppW 

Vpp Byte Write Current 

1,4 




mA 


IPPE 

Vpp Block Erase Current 

m 





Vpp = VppH 

Block Erase in Progress 



■ 



200 

jllA 

Vpp = Vpph 

Block Erase Suspended 


RP# Boot Block Unlock Current 

1,4 



500 

jmA 

RP# = V HH 

•lD 

Ag Intelligent Identifier Current 

1,4 



500 

jm,A 

Ag = V| D 

V|D 

Ag Intelligent Identifier Voltage 


11.4 


13.0 

D 


V|L 

Input Low Voltage 


-0.5 


0.6 

■ 


V|H 

Input High Voltage 


2.0 


V C c + 0.5 

D 


VOL 

Output Low Voltage 




0.4 

V 

c 

2 

o < 

CM 

11 ii 

lo 
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DC CHARACTERISTICS Vcc = 3.3V ±0.3V Read, 3.1 5V-3.6V Program/Erase (Continued) 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Conditions 

V OH1 

Output High Voltage (TTL) 


2.4 



V 

v cc = v cc Mi n 
Iqh = ~2 mA 

V OH2 

Output High Voltage 
(CMOS) 


0.85 V CC 



V 

Iqh = “2.5 mA 
V CC = V CC Min 

0 

1 

o 

o 

> 

Iqh = -100 jlxA 
v cc = Vcc Min 

Vppl 

Vpp during Normal Operations 

3 

0.0 


4.1 

V 


VppH 

Vpp during Erase/Write Operations 


11.4 

12.0 

12.6 

V 


V|_KO 

Vcc Erase/Write Lock Voltage 


2.0 



V 


Vhh 

RP# Unlock Voltage 


11.4 

12.0 

13.0 

V 

Boot Block Write/Erase 


CAPACITANCE^) t a = 25°C, f = 1 MHz 


Symbol 

Parameter 

Typ 

Max 

Unit 

Condition 

C|N 

Input Capacitance 

6 

8 

PF 

V| N = 0V 

Cqut 

Output Capacitance 

10 

12 

PF 

v OUT = 0V 


NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 3.3V, Vpp = 12.0V, T = 25°C. These currents 
are valid for all product versions (packages and speeds). 

2. Icces is specified with the device deselected. If the device is read while in Erase Suspend Mode, current draw is the sum 
of Icces and Iccr- 

3. Block Erase and Word/Byte Writes are inhibited when Vpp = Vppi_ and not guaranteed in the range between Vppn and 
Vppl- 

4. Sampled, not 100% tested. 

5. Automatic Power Savings (APS) reduces Iccr to less than 1 mA in static operation. 

6. CMOS Inputs are either Vcc ±0.2V or GND ±0.2V. TTL Inputs are either V||_ or Vm- 



4-205 



28F400BL-T/B, 28F004BL-T/B 


Intel 


DC CHARACTERISTICS^) V cc = 5.0V ±10% 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Conditions 

Ili 

Input Load Current 

■ 



±1.0 

/xA 


Lo 

Output Leakage Current 

■ 

■ 

1 




lees 

Vqo Standby Current 

1 



1.5 

mA 

Vcc = Vcc Max 
CE# = RP# = V| H 


100 

jaA 


•CCD 

Vcc Deep Power-Down Current 


■ 

■ 


jllA 

RP# = GND ±0.2V 
l0UT - 0 m A 

ICCR 

Vcc Rea d Current for 
28F400BX-L Word-Wide Mode 
and Byte Wide Mode 
and 28F004BX-L 

1 



40 

mA 

Vcc = Vcc Msx, CE# = GND 
f = 5 MHz, Iout = 0 mA 
CMOS Inputs 

■ 



Vcc = Vcc Max, CE# = V| L 
f = 5 MHz, Iout = 0 mA 
TTL Inputs 

mm 

Vcc Word Byte Write Current 

1,4 




mA 

Word Write in Progress 

mm 

Vcc Block Erase Current 

1,4 




mA 

Block Erase in Progress 

ICCES 

Vcc Erase Suspend Current 

1,2 

■ 

■ 





Vpp Standby Current 

1 



±10 

jmA 

Vpp ^ Vcc 


Vpp Deep Power-Down Current 

1 



5.0 

/xA 

RP# = GND ±0.2V 


Vpp Read Current 

1 





Vpp > Vcc 

Ippw 

Vpp Word Write Current 

1,4 



40 

mA 

Vpp = VppH 
Word Write in Progress 

Ippw , 

Vpp Byte Write Current 

1,4 



30 

mA 

Vpp = VppH 

Byte Write in Progress 

IPPE 

Vpp Block Erase Current 

1,4 





Vpp = VppH 

Block Erase in Progress 

IPPES 

Vpp Erase Suspend Current 

1 



200 

jllA 

Vpp = VppH 

Block Erase Suspended 

Irp# 

RP# Boot Block 
Unlock Current 

1,4 



500 

julA 

RP# = V HH 

l|D 

Ag Intelligent 
Identifier Current 

1,4 



500 

fiA 

> 

CO 

II 

< 

D 

V|D 

Ag Intelligent 
Identifier Voltage 


11.4 

12.0 

13.0 

V 
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DC CH 

ARACTERISTICSW V cc = 5.0V ±10% (Continued) 

Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

V|L 

Input Low Voltage 


-0.5 


0.8 

V 


V|H 

Input High Voltage 


2.0 


Vcc + 0-5 

V 


V 0 L 

Output Low Voltage 




0.45 

V 

Vcc = Vcc Min 
Iol = 5.8 mA 

VOHI 

Output High Voltage (TTL) 


2.4 



V 

Vcc = Vcc Min 
Iqh = — 2.5 mA 

VOH2 

Output High Voltage 
(CMOS) 


0.85 V CC 



V 

Iol = -2.5 mA 
Vcc = v cc Min 

0 

1 

0 

4^ 

Iol = — 100 jllA 
Vcc = Vcc Min 

VppL 

Vpp during Normal Operations 

3 

0.0 


6.5 

V 


VppH 

Vpp during Erase/Write Operations 


11.4 

Q3 

12.6 



O 

_i 

> 

Vcc Erase/Write Lock Voltage 


2.2 





Vhh 

RP# Unlock Voltage 


11.4 

12.0 

13.0 

V 

Boot Block Write/Erase 


NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vqc = 5.0V, Vpp = 12.0V, T = 25°C. These currents 
are valid for all product versions (packages and speeds). 

2. Icces is specified with the device deselected. If the device is read while in Erase Suspend Mode, current draw is the sum 
of Icces and Iqcr. 

3. Block Erases and Word/Byte Writes are inhibited when V PP = Vp PL and not guaranteed in the range between Vppn and 
VpPL- 

4. All parameters are sampled, not 100% tested. 



AC INPUT/OUTPUT REFERENCE WAVEFORM 


3.0 

0.0 


INPUT 




OUTPUT 


290450-16 

AC test inputs are driven at 3.0V for a Logic “1” and 0.0 for a Logic “0”. 
Input timing begins, and output timing ends at 1.5V. Input rise and fall times 
(10% to 90%) < 3 ns. 


AC TESTING LOAD CIRCUIT 


1. 

5V 

£ 1N914 
> R. 



< 

1 

► k l 

m it 


unuL rv 

TEST 

*1 

kcL 
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C L = 50 pF 

C|_ Includes Jig Capacitance 
R l = 3.3 Ka 
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AC CHARACTERISTICS-Read-Only Operations^) v cc = 3.3V ±o.3V,5.ov ± 10 % 


Versions 

28F400BL-150 

28F004BL-150 

Unit 

Symbol 

Parameter 

Notes 

Min 

Max 

tAVAV 

tRC 

Read Cycle Time 


150 


ns 

tAVQV 

*ACC 

Address to Output Delay 



150 

ns 

tELQV 

tCE 

CE# to Output Delay 

2 


150 

ns 

tpHQV 

tpWH 

RP# High to Output Delay 



600 

ns 

*GLQV 

tQE 

OE# to Output Delay 

2 


65 


*ELQX 

tLZ 

CE# to Output LowZ 

3 

0 


jlpp[[ 

tEHOZ 

tHZ 

CE# High to Output High Z 

3 


55 

Id 



OE# to Output Low Z 

3 

0 


— 


m 

OE# High to Output High Z 

3 


45 

1 


<OH 

Output Hold from Addresses, CE# or OE# 
Change, Whichever is First 


0 


D 

Bjj31 

mm 


CE# to BYTE# Switching 
Low or High 

3 



fl 

tFHQV 


BYTE# Switching High 
to Valid Output Delay 

3,4 


150 

ns 

*FLQZ 


BYTE# Switching Low 
to Output High Z 

3 

' 


45 

ns 


NOTES: 

1. See AC Input/Output Reference Waveform for timing measurements. 

2. OE# may be delayed up to tcE-toE after the falling edge of CE# without impact on tcE- 

3. Sampled, not 100 % tested. 

4. tpLQv. BYTE# switching low to valid output delay will be equal to tAvov. measured from the time DQ 15 /A .1 becomes 
valid. 




























Figure 16. AC Waveforms for Read Operations 
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AC CHARACTERISTICS For WE-Controlled Write Operations* 1 ) V<x = 3.1 5V-3.6V, 5.0V ±10% 


Versions( 4 ) 

28F400BL-150 

28F004BL-150 

Unit 

Symbol 

Parameter 

Notes 

Min 

Max 

*AVAV 

twc 

Write Cycle Time 


150 


ns 

tpHWL 

tps 

RP# High Recovery 
to WE# Going Low 


1.0 


jms 

*ELWL 

tcs 

CE# Setup to WE# 
Going Low 


0 


ns 

tPHHWH 

tpHS 

RP# v H h Setup to we# 
Going High 

6,8 

200 


ns 

tVPWH 

tvps 

Vpp Setup to WE# Going High 

5,8 

200 


ns 



Address Setup to WE# 
Going High 

CO 

95 


ns 

tDVWH 

*DS 

Data Setup to WE# Going High 

4 

100 


ns 

■m 

t W p 

WE# Pulse Width 


100 


ns 

tWHDX 

tDH 

Data Hold from WE# High 
WE# High 

4 

0 


ns 

tWHAX 

*AH 

Address Hold from WE# High 

3 

10 


ns 

tWHEH 

tCH 

CE# Hold from WE# High 


10 


ns 

tWHWL 

*WPH 

WE# Pulse Width High 


50 



tWHQVI 


Duration of Word/ Byte 
Programming Operation 

2, 5,6 

6 


/AS 



Duration of Erase 
Operation (Boot) 

2, 5, 6 

0.3 


s 

tWHQV3 


Duration of Erase 
Operation (Parameter) 

2, 5,6 

0.3 


s 

*WHQV4 


Duration of Erase 
Operation (Main) 

2,5,6 

0.6 


s 

tQWL 

Vph 

Vpp Hold from Valid SRD 

5,8 

0 


ns 

tQVPH 

tpHH 

RP# V H h Hold from Valid SRD 

6,8 

0 


ns 

tpHBR 


Boot-Block Relock Delay 

7,8 


200 

ns 


NOTES: 

1 . Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
Characteristics during Read Mode. 

2. The on-chip WSM completely automates program/erase operations; program/erase algorithms are now controlled inter- 
nally which includes verify and margining operations. 

3. Refer to command definition table for valid Ain. 

4. Refer to command definition table for valid Din. 

5. Program/Erase durations are measured to valid SRD data (successful operation, SR.7 = 1). 

6. For Boot Block Program/ Erase, PWD# should be held at Vhh until operation completes successfully. 

7. Time tpneR is required for successful relocking of the Boot Block. 

8. Sampled but not 100% tested. 
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BLOCK ERASE AND BYTE/WORD WRITE PERFORMANCE V C c = 3.15V-3.6V, 5.0V ±10% 


Parameter 

Notes 

28F400BL-150 

28F004BL-150 

Unit 



Min 

mmm 

Max 


Boot/ Parameter Block Erase Time 

2 


■— 

8.6 

CO 

Main Block Erase Time 

2 


3.4 

17.0 

S 

Main Block Byte Program Time 

2 


1.4 

5.3 

S 

Main Blok Word Program Time 

2 


0.7 

2.7 

S 


NOTES: 

1. 25°C, 12.0V V PP . 

2. Excludes System-Level Overhead. 























Figure 18. AC Waveforms for Write and Erase Operations (WE# -Controlled Writes) 
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& STANDBY ERASE SETUP COMMAND OR ERASE CONFIRM COMMAND OR ERASE DELAY REGISTER DATA 
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AC CHARACTERISTICS FOR CE#-CONTROLLED WRITE OPERATIONS 

Vcc = 3.15V-3.6V, 5.0V ±10% 


Versions 

28F400BL-150 

28F004BL-150 

Unit 

Symbol 

Parameter 

Notes 

Min 

Max 



Write Cycle Time 


150 




tps 

RP# High Recovery to 
CE# Going Low 




JULS 

tWLEL 

tws 

WE# Setup to CE# Going Low 


0 


ns 



RP# Vhh Setup to CE# Going High 

6,8 

200 


ns 

tvPEH 


Vpp Setup to CE# Going High 

5,8 

200 


ns 



Address Setup to CE# Going High 

3 

95 


ns 




4 

100 


ns 

*ELEH 

tcp 

CE# Pulse Width 


100 


ns 

tEHDX 

tDH 


4 

0 



*EHAX 

*AH 


3 

10 



tEHWH 

tWH 



10 


ns 


199 

CE# Pulse Width High 


50 


ns 


■ 

Duration of Programming 
Operation Word/ Byte 

2, 5,6 

6 


JUtS 



Duration of Erase Operation (Boot) 

2, 5,6 

0.3 


s 


■ 

Duration of Erase 
Operation (Parameter) 

2, 5,6 

0.3 





Duration of Erase Operation (Main) 

2, 5,6 

0.6 


s 




5,8 

0 


ns 


tpPH 



0 


ns 

tpHBR 


Boot-Block Relock Delay 

7,8 


200 

ns 


NOTES: 

1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CE# and WE# in systems where 
CE# defines the write pulse-width (within a longer WE# timing waveform), all set-up, hold and inactive WE# times should 
be measured relative to the CE# waveform. 

2, 3, 4, 5, 6, 7, 8. Refer to AC Characteristics for WE# -Controlled Write operations. 

9. Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
Characteristics during Read Mode. 
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ORDERING INFORMATION 


mnnnnnnnnnnnnn 

Y 


ACCESS SPEED 


PACKAGE 

E = STANDARD 56 LEAD TSOP 
PA = 44 LEAD PSOP 


j 150ns 

BOOT BLOCK LOCATION 
T = TOP BOOT 
B = BOTTOM BOOT 


(ns) 


VALID COMBINATIONS: 

E28F400BL-T1 50 PA28F400BL-T1 50 

E28F400BL-B1 50 PA28F400BL-B1 50 
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tzEEHnnznmnniEii] 


y 


-ACCESS SPEED 


PACKAGE 

E = STANDARD 40 LEAD TSOP 


| 150ns 

BOOT BLOCK LOCATION 
T = TOP BOOT 
B = BOTTOM BOOT 


(ns) 
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VALID COMBINATIONS: 

E28F004BL-T 1 50 
E28F004BL-B150 


ADDITIONAL INFORMATION 


Order 

Number 

Document 


AB-57 “Boot Block Architecture for Safe Firmware Updates” 

292154 

AB-60 “2/4/8-Mbit SmartVoltage Boot Block Flash Memory Family” 

292098 

AP-363 “Extended Flash BIOS Concepts for Portable Computers” 

292148 

AP-604 “Using Intel’s Boot Block Flash Memory Parameter Blocks to Replace EEPROM” 

290448 

28F002/ 200-T / B Mbit Boot Block Flash Memory Datasheet 

290449 

28F002/200BL-T/B 2 Mbit Low Power Boot Block Flash Memory Datasheet 

290451 

28F004/ 400BX-T/B 4-Mbit Boot Block Flash Memory Datasheet 

290531 

2-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 

290530 

4-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 

290539 

8-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 
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REVISION HISTORY 


Number 

Description 

-001 

Original Version 

-002 

Modified BYTE# Timing Waveforms 

Modified tovwH parameter for AC Characteristics for Write Operations 

-003 

PWD renamed to RP# for JEDEC standarization compatibility. 

Combined V<x Read Current for 28F400BX-L Word-Wide and Byte-Wide Mode 
and 28F004BX-L Byte Wide Mode in DC Characteristics tables. 

Changed Ipps current spec from ± 1 0 juA to ± 1 5 pA in DC Characteristics table. 
Added Boot Block Unlock current spec in DC Characteristics tables. 

Improved tpwH spec to 600 ns (was 700 ns). 

Changed Iccr maximum spec from 20 mA to 25 mA, and added 1 5 mA typical spec 
in DC Characteristics Table. 

-004 

Added Ioh CMOS specification. 

Expanded temperature operating range 
from 0°C-70°C to -20°C-70°C 
Product naming changed: 

28F400BX-TL/BL changed to 28F400BL-T/B 
28F004BX-TL/BL changed to 28F004BL-T/B 
Typographical errors corrected. 

Added 28F400BX interface to lntel386TM EX 
Embedded Processor block diagram. 

Added upgrade considerations for 
SmartVoltage Boot Block products. 

Previously specified Vcc tolerance of 3.0V to 3.6V for Read, 
Program and Erase has been changed to 3.1 5V to 3.6V for 
Program and Erase while Read remains 3.0V to 3.6V 


intJ. 

28F200BX-T/B, 28F002BX-T/B 
2-MBIT (128K x 16, 256K x 8) BOOT BLOCK 
FLASH MEMORY FAMILY 


■ x8/x16 Input/Output Architecture 

— 28F200BX-T, 28F200BX-B 

— For High Performance and High 
Integration 16-bit and 32-bit CPUs 

■ x8-only Input/Output Architecture 

— 28F002BX-T 28F002BX-B 
For Space Constrained 8-bit 
Applications 

■ Upgradable to Intel’s SmartVoltage 
Products 

■ Optimized High Density Blocked 
Architecture 

— One 16-KB Protected Boot Block 
— Two 8-KB Parameter Blocks 
— One 96-KB Main Block 
— One 128 KB Main Block 
— Top or Bottom Boot Locations 

■ Extended Cycling Capability 
— 100,000 Block Erase Cycles 

■ Automated Word/Byte Write and 
Block Erase 

— Command User Interface 
— Status Registers 
— Erase Suspend Capability 

■ SRAM-Compatible Write Interface 

■ Automatic Power Savings Feature 

— 1 mA Typical Ice Active Current in 
Static Operation 


■ Hardware Data Protection Feature 

— Erase/Write Lockout during Power 
Transitions 

■ Very High-Performance Read 

— 60/80/120 ns Maximum Access Time 

— 30/40/40 ns Maximum Output Enable 
Time 

■ Low Power Consumption 

— 20 mA Typical Active Read Current 

■ Reset/Deep Power-Down Input 

— 0.2 juA Ice Typical 

— Acts as Reset for Boot Operations 

■ Extended Temperature Operation 
40° C to + 85°C 

■ Write Protection for Boot Block 

■ Industry Standard Surface Mount 
Packaging 

— 28F200BX: JEDEC ROM Compatible 

44-Lead PSOP 
56-Lead TSOP 

— 28F002BX: 40-Lead TSOP 

■ 12V Word/Byte Write and Block Erase 
— Vpp = 12V ±5% Standard 

— Vpp = 12V ±10% Option 

■ ETOX III Flash Technology 

— 5V Read 

■ Independent Software Vendor Support 
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Intel’s 2-Mbit Flash Memory Family is an extension of the Boot Block Architecture which includes block-selec- 
tive erasure, automated write and erase operations and standard microprocessor interface. The 2-Mbit Flash 
Memory Family enhances the Boot Block Architecture by adding more density and blocks, x8/x1 6 input/out- 
put control, very high speed, low power, an industry standard ROM compatible pinout and surface mount 
packaging. The 2-Mbit flash family allows for an easy upgrade to Intel’s 4-Mbit Boot Block Flash Memory 
Family. 


The Intel 28F200BX-T/B are 16-bit wide flash memory offerings. These high density flash memories provide 
user selectable bus operation for either 8-bit or 16-bit applications. The 28F200BX-T and 28F200BX-B are 
2,097,152-bit non-volatile memories organized as either 262,144 bytes or 131,072 words of information. They 
are offered in 44-Lead plastic SOP and 56-Lead TSOP packages. The x8/x16 pinout conforms to the industry 
standard ROM/EPROM pinout. 

The Intel 28F002BX-T/B are 8-bit wide flash memories with 2,097,152 bits organized as 262,144 bytes of 
information. They are offered in a 40-Lead TSOP package, which is ideal for space-constrained portable 
systems. 

These devices use an integrated Command User Interface (CUI) and Write State Machine (WSM) for simplified 
word/byte write and block erasure. The 28F200BX-T/28F002BX-T provide block locations compatible with 
Intel’s MCS-186 family, 80286, i386TM, j486TM, j860TM and 80960CA microprocessors. The 28F200BX-B/ 
28F002BX-B provide compatibility with Intel’s 80960KX and 80960SX families as well as other embedded 
microprocessors. 


The boot block includes a data protection feature to protect the boot code in critical applications. With a 
maximum access time of 60 ns, these 2-Mbit flash devices are very high performance memories which 
interface at zero-wait-state to a wide range of microprocessors and microcontrollers. A deep power-down 
mode lowers the total Vqc power consumption to 1 /llW typical. This is critical in handheld battery powered 
systems. For very low power applications using a 3.3V supply, refer to the Intel 28F200BX-TL/BL, 28F002BX- 
TL/BL 2-Mbit Boot Block Flash Memory Family datasheet. 



Manufactured on Intel’s 0.8 micron ETOXIII process, the 2-Mbit flash memory family provides world class 
quality, reliability and cost-effectiveness at the 2-Mbit density level. 
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1.0 PRODUCT FAMILY OVERVIEW 

Throughout this datasheet the 28F200BX refers to 
both the 28F200BX-T and 28F200BX-B devices and 
28F002BX refers to both the 28F002BX-T and 
28F002BX-B devices. The 2-Mbit flash memory fam- 
ily refers to both the 28F200BX and 28F002BX prod- 
ucts. This datasheet comprises the specifications for 
four separate products in the 2-Mbit flash memory 
family. Section 1 provides an overview of the 2-Mbit 
flash memory family including applications, pinouts 
and pin descriptions. Sections 2 and 3 describe in 
detail the specific memory organizations for the 
28F200BX and 28F002BX products respectively. 
Section 4 combines a description of the family’s 
principles of operations. Finally Section 5 describes 
the family’s operating specifications. 


PRODUCT FAMILY 


x8/x16 Products 

x8-Only Products 

28F200BX-T 

28F002BX-T 

28F200BX-B 

28F002BX-B 


1.1 Designing for Upgrade to 
SmartVoltage Products 

Today’s high volume boot block products are up- 
gradable to Intel’s SmartVoltage boot block prod- 
ucts that provide program and erase operation at 5V 
or 12V Vpp and read operation at 3V or 5V Vcc- 
Intel’s SmartVoltage boot block products provide the 
following enhancements to the boot block products 
described in this data sheet: 

1. DU pin is replaced by WP# to provide a means 
to lock and unlock the boot block with logic sig- 
nals. 

2. 5V Program/Erase operation uses proven pro- 
gram and erase techniques with 5V ±10% ap- 
plied to VPP. 

3. Enhanced circuits optimize performance at 3.3V 

Vcc- 

Refer to the 2, 4 or 8 Mbit SmartVoltage Boot Block 
Flash Memory Data Sheets for complete specifica- 
tions. 

When you design with 1 2 V Vpp boot block products 
you should provide the capability in your board de- 
sign to upgrade to SmartVoltage products. 

Follow these guidelines to ensure compatibility: 

1. Connect DU (WP# on SmartVoltage products) to 
a control signal or to Vcc or GND. 

2. If adding a switch on Vpp for write protection, 
switch to GND for complete write protection. 

3. Allow for connecting 5V to Vpp and disconnect 
1 2 V from the Vpp line, if desired. 
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1.2 Main Features 

The 28F200BX/28F002BX boot block flash memory 
family is a very high performance 2-Mbit (2,097,152 
bit) memory family organized as either 1 28 KWords 
(131,072 words) of 16 bits each or 256 Kbytes 
(262,144 bytes) of 8 bits each. 

Five Separately Erasable Blocks including a hard- 
ware-lockable boot block (1 6,384 Bytes), two pa- 
rameter blocks (8,192 Bytes each) and two main 
blocks (1 block of 98,304 Bytes and 1 block of 
131 ,072 Bytes) are included on the 2-Mbit family. An 
erase operation erases one of the main blocks in 
typically 2.4 seconds, and the boot or parameter 
blocks in typically 1.0 second. Each block can be 
independently erased and programmed 100,000 
times. 

The Boot Block is located at either the top 
(28F200BX-T, 28F002BX-T) or the bottom 

(28F200BX-B, 28F002BX-B) of the address map in 
order to accommodate different microprocessor pro- 
tocols for boot code location. The hardware locka- 
ble boot block provides the most secure code stor- 
age. The boot block is intended to store the kernel 
code required for booting-up a system. When the 
RP# pin is between 11.4V and 12.6V the boot block 
is unlocked and program and erase operations can 
be performed. When the RP# pin is at or below 6.5V 
the boot block is locked and program and erase op- 
erations to the boot block are ignored. 

The 28F200BX products are available in the ROM/ 
EPROM compatible pinout and housed in the 44- 
Lead PSOP (Plastic Small Outline) package and the 
56-Lead TSOP (Thin Small Outline, 1.2mm thick) 
package as shown in Figures 3 and 4. The 
28F002BX products are available in the 40-Lead 
TSOP (1 .2mm thick) package as shown in Figure 5. 

The Command User Interface (CUI) serves as the 
interface between the microprocessor or microcon- 
troller and the internal operation of the 28F200BX 
and 28F002BX flash memory products. 

Program and Erase Automation allows program 
and erase operations to be executed using a two- 
write command sequence to the CUI. The internal 
Write State Machine (WSM) automatically executes 
the algorithms and timings necessary for program 
and erase operations, including verifications, there- 
by unburdening the microprocessor or microcontrol- 
ler. Writing of memory data is performed in word or 
byte increments for the 28F200BX family and in byte 
increments for the 28F002BX family typically within 
9 jits which is a 100% improvement over current 
flash memory products. 
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The Status Register (SR) indicates the status of the 
WSM and whether the WSM successfully completed 
the desired program or erase operation. 

Maximum Access Time of 60 ns (TACC) is achieved 
over the commercial temperature range (0°C to 
70 o C), 5% Vcc supply voltage range (4.75V to 
5.25V) and 30 pF output load. Refer to Figure 19; 
Tacc v s Output Load Capacitance for larger output 
loads. Maximum Access Time of 80 ns (TACC) is 
achieved over the commercial temperature range, 
10% Vqq supply range (4.5V to 5.5V) and 100 pF 
output load. 

Ipp maximum Program current is 40 mA for x16 
operation and 30 mA for x8 operation. Ipp Erase 
current is 30 mA maximum. Vpp erase and pro- 
gramming voltage is 11.4V to 12.6V (Vpp = 12V 
± 5%) under all operating conditions. As an op- 
tion, Vpp can also vary between 10.8V to 13.2V (Vpp 
= 12V ±10%) with a guaranteed number of 100 
block erase cycles. 

Typical Ice Active Current of 25 mA is achieved 
for the x16 products (28F200BX), typical Ice Active 
Current of 20 mA is achieved for the x8 products 
(28F200BX, 28F002BX). Refer to the Ice active cur- 
rent derating curves in this datasheet. 

The 2-Mbit boot block flash family is also designed 
with an Automatic Power Savings (APS) feature to 
minimize system battery current drain and allow for 
very low power designs. Once the device is ac- 
cessed to read array data, APS mode will immedi- 
ately put the memory in static mode of operation 
where Iqc active current is typically 1 mA until the 
next read is initiated. 

When the CE# and RP# pins are at Vcc ancJ the 
BYTE# pin (28F200BX-only) is at either Vcc or 
GND the CMOS Standby mode is enabled where 
Ice is typically 50 jliA. 

A Deep Power-Down Mode is enabled when the 
RP# pin is at ground minimizing power consumption 
and providing write protection during power-up con- 
ditions. Iqc current during deep power-down mode 
is 0.20 jllA typical. An initial maximum access time 
or Reset Time of 300 ns is required from RP# 
switching until outputs are valid. Equivalently, the 
device has a maximum wake-up time of 215 ns until 
writes to the Command User Interface are recog- 
nized. When RP# is at ground the WSM is reset, the 
Status Register is cleared and the entire device is 
protected from being written to. This feature pre- 
vents data corruption and protects the code stored 
in the device during system reset. The system Reset 
pin can be tied to RP# to reset the memory to nor- 
mal read mode upon activation of the Reset pin. 
With on-chip program/erase automation in the 
2-Mbit family and the RP# functionality for data pro- 


tection, when the CPU is reset and even if a program 
or erase command is issued, the device will not rec- 
ognize any operation until RP# returns to its normal 
state. 

For the 28F200BX, Byte-wide or Word-wide In- 
put/Output Control is possible by controlling the 
BYTE# pin. When the BYTE# pin is at a logic low 
the device is in the byte-wide mode (x8) and data is 
read and written through DQ[0:7]. During the byte- 
wide mode, DQ[8:14] are tri-stated and DQ15/A-1 
becomes the lowest order address pin. When the 
BYTE# pin is at a logic high the device is in the 
word-wide mode (xl 6) and data is read and written 
through DQ[0:15]. 


1.3 Applications 

The 2-Mbit boot block flash family combines high 
density, high performance, cost-effective flash mem- 
ories with blocking and hardware protection capabili- 
ties. Its flexibility and versatility will reduce costs 
throughout the product life cycle. Flash memory is 
ideal for Just-In-Time production flow, reducing sys- 
tem inventory and costs, and eliminating component 
handling during the production' phase. During the 
product life cycle, when code updates or feature en- 
hancements become necessary, flash memory will 
reduce the update costs by allowing either a user- 
performed code change via floppy disk or a remote 
code change via a serial link. The 2-Mbit boot block 
flash family provides full function, blocked flash 
memories suitable for a wide range of applications. 
These applications include Extended PC BIOS, 
Digital Cellular Phone program and data storage, 
Telecommunication boot/firmware, and various 
other embedded applications where both program 
and data storage are required. 

Reprogrammable systems such as personal com- 
puters, are ideal applications for the 2-Mbit flash 
products. Portable and handheld personal computer 
applications are becoming more complex with the 
addition of power management software to take ad- 
vantage of the latest microprocessor technology, 
the availability of ROM-based application software, 
pen tablet code for electronic hand writing, and diag- 
nostic code. Figure 1 shows an example of a 
28F200BX-T application. 

This increase in software sophistication augments 
the probability that a code update will be required 
after the PC is shipped. The 2-Mbit flash products 
provide an inexpensive update solution for the note- 
book and handheld personal computers while ex- 
tending their product lifetime. Furthermore, the 
2-Mbit flash products’ power-down mode provides 
added flexibility for these battery-operated portable 
designs which require operation at very low power 
levels. 
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The 2-Mbit flash products also provide excellent de- 
sign solutions for Digital Cellular Phone and Tele- 
communication switching applications requiring high 
performance, high density storage capability cou- 
pled with modular software designs, and a small 
form factor package (x8-only bus). The 2-Mbit’s 
blocking scheme allows for an easy segmentation of 
the embedded code with; 16 Kbytes of Hardware- 
Protected Boot code, 2 Main Blocks of program 
code and 2 Parameter Blocks of 8 Kbytes each for 
frequently updatable data storage and diagnostic 


messages (e.g. phone numbers, authorization 
codes). Figure 2 is an example of such an applica- 
tion with the 28F002BX-T. 

These are a few actual examples of the wide range 
of applications for the 2-Mbit Boot Block flash mem- 
ory family which enable system designers to achieve 
the best possible product design. Only your imagina- 
tion limits the applicability of such a versatile product 
family. 



Figure 1. 28F200BX Interface to lntel386TM EX Embedded Processor 
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Figure 2. 28F002BX Interface to INTEL 80C188EB 8-Bit Embedded Microprocessor 
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1.4 Pinouts The 28F002BX 40-Lead TSOP pinout shown in Fig- 

ure 5 is 100% compatible and provides a density 
The 28F200BX 44-Lead PSOP pinout follows the in- upgrade to the 28F004BX 4-Mbit Boot Block flash 
dustry standard ROM/EPROM pinout as shown in memory. 

Figure 3 with an upgrade to the 28F400BX (4-Mbit 
flash family). Furthermore, the 28F200BX 56-Lead 
TSOP pinout shown in Figure 4 provides density up- 
grades to the 28F400BX and to future higher density 
boot block memories. 



Figure 3. PSOP Lead Configuration for x8/x16 28F200BX 
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28F400BX 


28F200BX 
56-LEAD TSOP 
14mm x 20mm 
TOP VIEW 




ini£ 



28F400BX 

56 

1 NQ 

NC 

55 

1 A 16 

Ai6 

54 

1 BYTE# 

BYTE# 

53 

1 GND 

GND 

52 

=□ DQis/A-l 

DQis/A--, 

51 

1 DO y 

dq 7 

50 

=□00,4 

dq 14 

49 

=1 dq 6 

dq 6 

48 

= 0 0|3 

DQ-|3 

47 

=□ DQ 5 

dq 5 

46 

=□00,2 

dq 12 

45 

1 DQ 4 

dq 4 

44 

1 v cc 

V CC 

43 

1 V cc 

V CC 

42 

=3 00,,. 

DQn 

41 

= dq 3 

DQ3 

40 

1 DQ,o 

DQ 10 

39 

1 °Q2 

dq 2 

38 

=□ DQg 

DQg 

37 

=100! 

DQ-| 

36 

1 DC >8 

dq 8 

35 

1 DQ 0 

DQ 0 

34 

1 OE# 

OE# 

33 

1 GND 

GND 

32 

1 CF# 

CE# 

31 

1 A 0 

Ao 

30 

1 NC 

NC 

29 

1 NC 

NC 
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1.5 Pin Descriptions tor the x8/x16 28F200BX 


Symbol 

Type 

Name and Function 

Ao-A-16 

1 

ADDRESS INPUTS for memory addresses. Addresses are internally latched 
during a write cycle. 

Ag 

1 

ADDRESS INPUT: When Ag is at 12V the signature mode is accessed. During this 
mode Ag decodes between the manufacturer and device ID’s. When BYTE# is at 
a logic low only the lower byte of the signatures are read. DQis/A_i is a don’t 
care in the signature mode when BYTE# is low. 

DQ 0 -DQ 7 

I/O 

DATA INPUTS/OUTPUTS: Inputs array data on the second CE# and WE# cycle 
during a program command. Inputs commands to the Command User Interface 
when CE# and WE# are active. Data is internally latched during the write and 
program cycles. Outputs array, Intelligent Identifier and Status Register data. The 
data pins float to tri-state when the chip is deselected or the outputs are disabled. 

dq 8 -dq 15 

I/O 

DATA INPUTS/OUTPUTS: Inputs array data on the second CE# and WE# cycle 
during a program command. Data is internally latched during the write and program 
cycles. Outputs array data. The data pins float to tri-state when the chip is 
deselected or the outputs are disabled as in the byte-wide mode (BYTE# = “0”). 

In the byte-wide mode DQi 5 /A_i becomes the lowest order address for data 
output on DQ 0 -DQ 7 . 

CE# 

1 

CHIP ENABLE: Activates the device’s control logic, input buffers, decoders and 
sense amplifiers. CE# is active low; CE# high deselects the memory device and 
reduces power consumption to standby levels. If CE# and RP# are high, but not 
at a CMOS high level, the standby current will increase due to current flow through 
the CE# and RP# input stages. 

RP# 

. 

1 

RESET/DEEP POWER-DOWN: Provides three-state control. Puts the device in 
deep power-down mode. Locks the boot block from program/erase. 

When RP# is at logic high level and equals 6.5V maximum the boot block is 
locked and cannot be programmed or erased. 

When RP# = 11 .4V minimum the boot block is unlocked and can be programmed 
or erased. 

When RP# is at a logic low level the boot block is locked, the deep power-down 
mode is enabled and the WSM is reset preventing any blocks from being 
programmed or erased, therefore providing data protection during power 
transitions. When RP# transitions from logic low to logic high the flash memory 
enters the read array mode. 

OE# 

1 

OUTPUT ENABLE: Gates the device’s outputs through the data buffers during a 
read cycle. OE# is active low. 

WE# 

1 

WRITE ENABLE: Controls writes to the Command Register and array blocks. 
WE# is active low. Addresses and data are latched on the rising edge of the WE# 
pulse. 

BYTE# 

1 

BYTE# ENABLE: Controls whether the device operates in the byte-wide mode 
(x 8 ) or the word-wide mode (x16). BYTE# pin must be controlled at CMOS levels 
to meet 1 00 juA CMOS current in the standby mode. BYTE# = “ 0 ” enables the 
byte-wide mode, where data is read and programmed on DQ 0 -DQ 7 and 
DQ15/A—1 becomes the lowest order address that decodes between the upper 
and lower byte. DQe-DQ 14 are tri-stated during the byte-wide mode. 

BYTE# = “1 ” enables the word-wide mode where data is read and programmed 
on DQ 0 -DQ 15 . 

V PP 


PROGRAM/ERASE POWER SUPPLY: For erasing memory array blocks or 
programming data in each block. 

Note: Vpp < Vpplmax memory contents cannot be altered. 

Vcc 


DEVICE POWER SUPPLY (5V ± 10%, 5V ± 5%) 

GND 


GROUND: For all internal circuitry. 

NC 


NO CONNECT: Pin may be driven or left floating. 

DU 


DON’T USE PIN: Pin should not be connected to anything. 


I 
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1.6 Pin Descripti 

ons for x8 28F002BX 

Symbol 

Type 

Name and Function 

Ao-A-17 

1 

ADDRESS INPUTS for memory addresses. Addresses are internally latched during 
a write cycle. 

A9 

1 

ADDRESS INPUT: When A 9 is at 12V the signature mode is accessed. During this 
mode Aq decodes between the manufacturer and device ID’s. 

DQ0-DQ7 

I/O 

DATA INPUTS/OUTPUTS: Inputs array data on the second CE# and WE# cycle 
during a program command. Inputs commands to the command user interface 
when CE# and WE# are active. Data is internally latched during the write and 
program cycles. Outputs array, Intelligent Identifier and status register data. The 
data pins float to tri-state when the chip is deselected or the outputs are disabled. 

CE# 

1 

CHIP ENABLE: Activates the device’s control logic, input buffers, decoders and 
sense amplifiers. CE# is active low; CE# high deselects the memory device and 
reduces power consumption to standby levels. If CE# and RP# are high, but not at 
a CMOS high level, the standby current will increase due to current flow through the 
CE# and RP# input stages. 

#RP# 

1 

RESET/DEEP POWERDOWN: Provides Three-State control. Puts the device in 
deep powerdown mode. Locks the Boot Block from program/erase. 

When RP# is at logic high level and equals 6.5V maximum the Boot Block is locked 
and cannot be programmed or erased. 

When RP# = 1 1 .4V minimum the Boot Block is unlocked and can be programmed 
or erased. 

When RP# is at a logic low level the Boot Block is locked, the deep powerdown 
mode is enabled and the WSM is reset preventing any blocks from being 
programmed or erased, therefore providing data protection during power 
transitions. When RP# transitions from logic low to logic high, the flash memory 
enters the read-array mode. 

OE# 

1 

OUTPUT ENABLE: Gates the device’s outputs through the data buffers during a 
read cycle. OE # is active low. 

WE# 

1 

WRITE ENABLE: Controls writes to the Command Register and array blocks. WE# 
is active low. Addresses and data are latched on the rising edge of the WE# pulse. 

Vpp 


PROGRAM/ERASE POWER SUPPLY: For erasing memory array blocks or 
programming data in each block. 

Note: Vpp < Vpplmax memory contents cannot be altered. 



DEVICE POWER SUPPLY (5V ± 10%, 5V ± 5%) 



GROUND: For all internal circuitry. 



NO CONNECT: Pin may be driven or left floating. 

DU 


DON’T USE PIN: Pin should not be connected to anything. 
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Figure 6. 28F200BX Word/Byte-Wide Block Diagram 
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2.0 28F200BX WORD/BYTE-WIDE PRODUCTS DESCRIPTION 
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2.1 28F200BX Memory Organization 

2.1.1 BLOCKING 

The 28F200BX uses a blocked array architecture to 
provide independent erasure of memory blocks. A 
block is erased independently of other blocks in the 
array when an address is given within the block ad- 
dress range and the Erase Setup and Erase Confirm 
commands are written to the CUI. The 28F200BX is 
a random read/write memory, only erasure is per- 
formed by block. 

2. 1.1.1 Boot Block Operation and Data 
Protection 

The 1 6-Kbyte boot block provides a lock feature for 
secure code storage. The intent of the boot block is 
to provide a secure storage area for the kernel code 
that is required to boot a system in the event of pow- 
er failure or other disruption during code update. 
This lock feature ensures absolute data integrity by 
preventing the boot block from being written or 
erased when RP# is not at 12V. The boot block can 
be erased and written when RP# is held at 12V for 
the duration of the erase or program operation. This 
allows customers to change the boot code when 
necessary while providing security when needed. 
See the Block Memory Map section for address 
locations of the boot block for the 28F200BX-T 
and 28F200BX-B. 


2. 1.1. 2 Parameter Block Operation 

The 28F200BX has 2 parameter blocks (8 Kbytes 
each). The parameter blocks are intended to provide 
storage for frequently updated system parameters 
and configuration or diagnostic information. The pa- 
rameter blocks can also be used to store additional 
boot or main code. The parameter blocks however, 
dp not have the hardware write protection feature 
that the boot block has. The parameter blocks pro- 
vide for more efficient memory utilization when deal- 
ing with parameter changes versus regularly blocked 
devices. See the Block Memory Map section for ad- 
dress locations of the parameter blocks for the 
28F200BX-T and 28F200BX-B. 


2. 1.1. 3 Main Block Operation 

Two main blocks of memory exist on the 28F200BX 
(1 x 1 28 Kbyte block and 1 x 96-Kbyte block). See 
the following section on Block Memory Map for the 
address location of these blocks for the 28F200BX-T 
and 28F200BX-B products. 


2.1.2 BLOCK MEMORY MAP 

Two versions of the 28F200BX product exist to sup- 
port two different memory maps of the array blocks 
in order to accommodate different microprocessor 
protocols for boot code location. The 28F200BX-T 
memory map is inverted from the 28F200BX-B 
memory map. 

2.1.2. 1 28F200BX-B Memory Map 

The 28F200BX-B device has the 16-Kbyte boot 
block located from 00000H to 01 FFFH to accommo- 
date those microprocessors that boot from the bot- 
tom of the address map at 00000H. In the 
28F200BX-B the first 8-Kbyte parameter block re- 
sides in memory space from 02000H to 02FFFH. 
The second 8-Kbyte parameter block resides in 
memory space from 03000H to 03FFFH. The 
96-Kbyte main block resides in memory space from 
04000H to OFFFFH. The 128-Kbyte main block re- 
sides in memory space from 10000H to 1FFFFH 
(word locations). See Figure 7. 


(Word Addresses) 
1FFFFH 



128-Kbyte MAIN BLOCK 



10000H 



OFFFFH 

96-Kbyte MAIN BLOCK 


04000H 



03FFFH 

8-Kbyte PARAMETER BLOCK 


03000H 


02FFFH 

8-Kbyte PARAMETER BLOCK 


02000H 


01 FFFH 
OOOOOH 

16-Kbyte BOOT BLOCK 





Figure 7. 28F200BX-B Memory Map 
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2. 1.2.2 28F200BX-T Memory Map 

The 28F200BX-T device has the 16-Kbyte boot 
block located from 1 E000H to 1 FFFFH to accommo- 
date those microprocessors that boot from the top 
of the address map. In the 28F200BX-T the first 
8-Kbyte parameter block resides in memory space 
from 1D000H to 1DFFFH. The second 8-Kbyte pa- 
rameter block resides in memory space from 
1C000H to 1CFFFH. The 96-Kbyte main block re- 
sides in memory space from 10000H to 1BFFFH. 
The 1 28-Kbyte main block resides in memory space 
from 00000H to OFFFFH as shown in Figure 8. 


(Word Addresses) 
1 FFFFH 



16-Kbyte BOOT BLOCK 



1E000H 



1DFFFH 

8-Kbyte PARAMETER BLOCK 


1D000H 


1CFFFH 

8-Kbyte PARAMETER BLOCK 


1C000H 


1BFFFH 

96-Kbyte MAIN BLOCK 


10000H 



OFFFFH 

00000H 

128-Kbyte MAIN BLOCK 





Figure 8. 28F200BX-T Memory Map 



Figure 9. 28F002BX Byte-Wide Block Diagram 






























28F200BX-T/B, 28F002BX-T/B 


int^l 


3.1 28F002BX Memory Organization 

3.1.1 BLOCKING 

The 28F002BX uses a blocked array architecture to 
provide independent erasure of memory blocks. A 
block is erased independently of other blocks in the 
array when an address is given within the block ad- 
dress range and the Erase Setup and Erase Confirm 
commands are written to the CUI. The 28F002BX is 
a random read/write memory, only erasure is per- 
formed by block. 

3.1. 1.1 Boot Block Operation and Data 
Protection 

The 16-Kbyte boot block provides a lock feature for 
secure code storage. The intent of the boot block is 
to provide a secure storage area for the kernel code 
that is required to boot a system in the event of pow- 
er failure or other disruption during code update. 
This lock feature ensures absolute data integrity by 
preventing the boot block from being programmed 
or erased when RP# is not at 12V. The boot block 
can be erased and programmed when RP# is held 
at 12V for the duration of the erase or program oper- 
ation. This allows customers to change the boot 
code when necessary while still providing security 
when needed. See the Block Memory Map section 
for address locations of the boot block for the 
28F002BX-T and 28F002BX-B. 


3.1. 1.2 Parameter Block Operation 

The 28F002BX has 2 parameter blocks (8 Kbytes 
each). The parameter blocks are intended to provide 
storage for frequently updated system parameters 
and configuration or diagnostic information. The pa- 
rameter blocks can also be used to store additional 
boot or main code. The parameter blocks however, 
do not have the hardware write protection feature 
that the boot block has. Parameter blocks provide 
for more efficient memory utilization when dealing 
with small parameter changes versus regularly 
blocked devices. See the Block Memory Map sec- 
tion for address locations of the parameter blocks 
for the 28F002BX-T and 28F002BX-B. 


3.1. 1.3 Main Block Operation 

Two main blocks of memory exist on the 28F002BX 
(1 x 128-Kbyte block and 1 x 96-Kbyte block). See 
the following section on Block Memory Map for 
address location of these blocks for the 
28F002BX-T and 28F002BX-B. 


3.1.2 BLOCK MEMORY MAP 

Two versions of the 28F002BX product exist to sup- 
port two different memory maps of the array blocks 
in order to accommodate different microprocessor 
protocols for boot code location. The 28F002BX-T 
memory map is inverted from the 28F002BX-B 
memory map. 

3.1.2. 1 28F002BX-B Memory Map 

The 28F002BX-B device has the 16-Kbyte boot 
block located from 00000H to 03FFFH to accommo- 
date those microprocessors that boot from the bot- 
tom of the address map at 00000H. In the 
28F002BX-B the first 8-Kbyte parameter block re- 
sides in memory from 04000H to 05FFFH. The sec- 
ond 8-Kbyte parameter block resides in memory 
space from 06000H to 07FFFH. The 96-Kbyte main 
block resides in memory space from 08000H to 
1FFFFH. The 128-Kbyte main block resides in mem- 
ory space from 20000H to 3FFFFH. See Figure 10. 


3FFFFH 



128-Kbyte MAIN BLOCK 



20000H 



1FFFFH 

96-Kbyte MAIN BLOCK 


08000H 



07FFFH 

8-Kbyte PARAMETER BLOCK 


06000H 


05FFFH 

8-Kbyte PARAMETER BLOCK 


04000H 


03FFFH 

00000H 

16-Kbyte BOOT BLOCK 





Figure 10. 28F002BX-B Memory Map 
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3. 1.2.2 28F002BX-T Memory Map 

The 28F002BX-T device has the 16-Kbyte boot 
block located from 3C000H to 3FFFFH to accom- 
modate those microprocessors that boot from the 
top of the address map. In the 28F002BX-T the first 
8-Kbyte parmeter block resides in memory space 
from 3A000H to 3BFFFH. The second 8-Kbyte pa- 
rameter block resides in memory space from 
38000H to 39FFFH. The 96-Kbyte main block re- 
sides in memory space from 20000H to 37FFFH. 
The 128-Kbyte main block resides in memory space 
from 00000H to 1FFFFH. 


3FFFFH 



16-Kbyte BOOT BLOCK 



3C000H 



3BFFFH 

8-Kbyte PARAMETER BLOCK 


3AOOOH 


39FFFH 

8-Kbyte PARAMETER BLOCK 


38000H 


37FFFH 

96-Kbyte MAIN BLOCK 


20000H 



1FFFFH 

nnnnnu 

128-Kbyte MAIN BLOCK 


uuuuun 




Figure 1 1. 28F002BX-T Memory Map 


4.0 PRODUCT FAMILY PRINCIPLES 
OF OPERATION 

Flash memory augments EPROM functionality with 
in-circuit electrical write and erase. The 2-Mbit flash 


family utilizes a Command User Interface (CUI) and 
internally generated and timed algorithms to simplify 
write and erase operations. 

The CUI allows for 100% TTL-level control inputs, 
fixed power supplies during erasure and program- 
ming, and maximum EPROM compatibility. 

In the absence of high voltage on the Vpp pin, the 
2-Mbit boot block flash family will only successfully 
execute the following commands: Read Array, Read 
Status Register, Clear Status Register and Intelli- 
gent Identifier mode. The device provides standard 
EPROM read, standby and output disable opera- 
tions. Manufacturer Identification and Device Identi- 
fication data can be accessed through the CUI or 
through the standard EPROM A9 high voltage ac- 
cess (V|d) for PROM programming equipment. 

The same EPROM read, standby and output disable 
functions are available when high voltage is applied 
to the Vpp pin. In addition, high voltage on Vpp al- 
lows write and erase of the device. All functions as- 
sociated with altering memory contents: write and 
erase, Intelligent Identifier read and Read Status are 
accessed via the CUI. 

The purpose of the Write State Machine (WSM) is to 
completely automate the write and erasure of the 
device. The WSM will begin operation upon receipt 
of a signal from the CUI and will report status back 
through a Status Register. The CUI will handle the 
WE# interface to the data and address latches, as 
well as system software requests for status while the 
WSM is in operation. 


4.1 28F200BX Bus Operations 

Flash memory reads, erases and writes in-system 
via the local CPU. All bus cycles to or from the flash 
memory conform to standard microprocessor bus 
cycles. 
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Table 1. Bus Operations for WORD-WIDE Mode (BYTE# = V iH ) 


Mode 

Notes 

RP# 

CE# 

OE# 

WE# 

A9 

Ao 

Vpp 

DQo-15 

Read 

1,2,3 

V|H 

V|L 

V|L 

V|H 

X 

X 

X 

d OUT 

Output Disable 


V|H 

V|L 

V| H 

V| H 

X 

X 

X 

High Z 

Standby 


V|H 

V|H 

X 

X 

X 

X 

X 

High Z 

Deep Power-Down 

9 

V|L 

X 

X 

X 

X 

X 

X 

High Z 

Intelligent Identifier (Mfr) 

4 

V|H 

V|L 

VlL 

V|H 

V|D 

VlL 

X 



B 






V|H 

X 


Write 

6, 7,8 

V| H 

V|L 

V|H 

V|L 

X 

X 

X 

Din 


Table 2. Bus Operations for BYTE-WIDE Mode (BYTE# = V, L ) 


4 


NOTES: 

1 . Refer to DC Characteristics. 

2. X can be Vn_ or Vm for control pins and addresses, Vppi_ or Vpp H for Vpp. 

3. See DC characteristics for Vppi_, Vppn, Vhh. V|q voltages. 

4. Manufacturer and Device codes may also be accessed via a CUI write sequence. A1-A-17 = X. 

5. Device ID = 2274H for 28F200BX-T and 2275H for 28F200BX-B. 

6. Refer to Table 4 for valid Din during a write operation. 

7. Command writes for Block Erase or Word/Byte Write are only executed when Vpp = Vppn- 

8. To write or erase the boot block, hold RP# at Vhh- 

9. RP# must be at GND +0.2V to meet the 1.2 julA maximum deep power-down current. 


Mode 

Notes 

RP# 

CE# 

OE# 

WE# 

A 9 

A 0 

A-i 

Vpp 

DQq-7 

Tt 

T— 

1 

GO 

O 

O 

Read 

1,2,3 

V|H 

V|L 

V|L 

V|H 

X 

X 

X 

X 

DouT 

High Z 

Output Disable 


V| H 

V| L 



B 

B 

D 


E>!X1 

IB 

Standby 


V|H 

V|H 

X 

X 

B 

B 

D 


CUES 

HQ 

Deep Power-Down 

9 

VlL 

X 

X 

X 

X 

X 

X 

X 

High Z 

High Z 

Intelligent Identifier (Mfr) 

4 

V| H 

V|L 

V|L 

V|H 

V|D 

V|L 

X 

X 

89H 

High Z 

Intelligent Identifier 
(Device) 

4,5 

V|H 

V| L 

V|L 

V| H 

V| D 

V| H 

X 

X 

74H 

75H 

High Z 

Write 

6, 7, 8 

V|H 

V|L 

V|H 

VlL 

X 

X 

X 

X 

Din 

High Z 
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4.2 28F002BX Bus Operations 


Table 3. Bus Operations 


Mode 

Notes 


CE# 


WE# 

a 9 

A 0 

Vpp 

1^ 

0 

0 

0 

Read 

1,2,3 

IPS 

V|L 

B 

V| H 

X 

X 



Output Disable 



flH 




X 

X 

High Z 

Standby 



BUB 


X 


X 

KB 

High Z 

Deep Power-Down 

9 


X 


X 


X 

mm 

High Z 

Intelligent Identifier (Mfr) 

4 

V|H 

V|L 

V| L 

Vih 

V|D 

VlL 

X 

89H 

Intelligent Identifier (Device) 

4,5 

V|H 

V|L 

V|L 

V|H 

V ID 

V,H 

X 

7CH 

7DH 

Write 

6 , 7,8 

Vih 

V|L 

V| H 

V|L 

X 

X 

X 

Din 


NOTES: 

1 . Refer to DC Characteristics. 

2. X can be V||_ or Vm for control pins and addresses, VppL or Vppn for Vpp. . 

3. See DC characteristics for Vppi_, Vppn, Vhh. v id voltages. 

4. Manufacturer and Device codes may also be accessed via a CUI write sequence. A-|-A-|6 — X. 

5. Device ID = 7CH for 28F002BX-T and 7DH for 28F002BX-B. 

6. Refer to Table 4 for valid Din during a write operation. 

7. Command writes for Block Erase or byte program are only executed when Vpp = Vppn- 

8. Program or erase the Boot block by holding RP# at Vhh- 

9. RP# must be at GND ±0.2V to meet the 1.2 juA maximum deep power-down current. 

(DQ[0:1 5] or DQ[0:7]) are tri-stated. Data input is 
then controlled by WE#. 


4.3.1.2 Input Control 

With WE# at logic-high level (Vih), input to the de- 
vice is disabled. Data Input/Output pins (DQ-[0:15] 
or DQ[0:7]) are controlled by OE#. 


4.3.2 INTELLIGENT IDENTIFIERS 


28F200BX Products 

The manufacturer and device codes are read via the 
CUI or by taking the Ag pin to 12V. Writing 90 H to 
the CUI places the device into Intelligent Identifier 
read mode. A read of location 00000/7 outputs the 
manufacturer’s identification code, 0089H, and loca- 
tion 00001 H outputs the device code; 2274H for 
28F200BX-T, 2275H for 28F200BX-B. When 

BYTE# is at a logic low only the lower byte of the 
above signatures is read and DQ 15 /A -1 is a “don’t 
care” during Intelligent Identifier mode. A read array 
command must be written to the CUI to return to the 
read array mode. 


4.3 Read Operations 

The 2-Mbit boot block flash family has three user 
read modes; Array, Intelligent Identifier, and Status 
Register. Status Register read mode will be dis- 
cussed in detail in the “Write Operations” section. 

During power-up conditions (Vcc supply ramping), it 
takes a maximum of 600 ns from when Vcc is at 
4.5V minimum to valid data on the outputs. 

4.3.1 READ ARRAY 

If the memory is not in the Read Array mode, it is 
necessary to write the appropriate read mode com- 
mand to the CUI. The 2-Mbit boot block flash family 
has three control functions, all of which must be logi- 
cally active, to obtain data at the outputs. Chip-En- 
able CE# is the device selection control. Power- 
Down RP# is the device power control. Output-En- 
able OE# is the DATA INPUT/OUTPUT (DQ[0:15] 
or DQ[0:7]) direction control and when active is 
used to drive data from the selected memory on to 
the I/O bus. 


4.3.1. 1 Output Control 

With OE# at logic-high level (Vih), the output from 
the device is disabled and data input/output pins 
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28F002BX Products 

The manufacturer and device codes are also read 
via the CUI or by taking the A9 pin to 12V. Writing 
90/Y to the CUI places the device into Intelligent 
Identifier read mode. A read of location 000007/ out- 
puts the manufacturer’s identification code, 89H, 
and location 00001 H outputs the device code; 7CH 
for 28F002BX-T, 7DH for 28F002BX-B. 


4.4 Write Operations 

Commands are written to the CUI using standard mi- 
croprocessor write timings. The CUI serves as the 
interface between the microprocessor and the inter- 
nal chip operation. The CUI can decipher Read Ar- 
ray, Read Intelligent Identifier, Read Status Register, 
Clear Status Register, Erase and Program com- 
mands. In the event of a read command, the CUI 
simply points the read path at either the array, the 
intelligent identifier, or the status register depending 
on the specific read command given. For a program 
or erase cycle, the CUI informs the write state ma- 
chine that a write or erase has been requested. Dur- 
ing a program cycle, the Write State Machine will 
control the program sequences and the CUI will only 
respond to status reads. During an erase cycle, the 
CUI will respond to status reads and erase suspend. 
After the Write State Machine has completed its 
task, it will allow the CUI to respond to its full com- 
mand set. The CUI will stay in the current command 
state until the microprocessor issues another com- 
mand. 

The CUI will successfully initiate an erase or write 
operation only when Vpp is within its voltage range. 
Depending upon the application, the system design- 
er may choose to make the Vpp power supply 
switchable, available only when memory updates 
are desired. The system designer can also choose 
to “hard-wire” Vpp to 12V. The 2 Mbit boot block 
flash family is designed to accommodate either de- 
sign practice. It is recommended that RP# be tied to 
logical Reset for data protection during unstable 
CPU reset function as described in the “Product 
Family Overview” section. 


4.4.1 BOOT BLOCK WRITE OPERATIONS 

In the case of Boot Block modifications (write and 
erase), RP# is set to Vhh = 12V typically, in addi- 
tion to Vpp at high voltage. However, if RP# is not at 
Vhh when a program or erase operation of the boot 
block is attempted, the corresponding status register 
bit (Bit 4 for Program and Bit 5 for Erase, refer to 
Table 5 for Status Register Definitions) is set to indi- 
cate the failure to complete the operation. 


4.4.2 COMMAND USER INTERFACE (CUI) 

The Command User Interface (CUI) serves as the 
interface to the microprocessor. The CUI points the 
read/write path to the appropriate circuit block as 
described in the previous section. After the WSM 
has completed its task, it will set the WSM Status bit 
to a “1”, which will also allow the CUI to respond to 
its full command set. Note that after the WSM has 
returned control to the CUI, the CUI will remain in its 
current state. 


4.4.2. 1 Command Set 


Command 

Codes 

Device Mode 

00 

Invalid/Reserved 

10 

Alternate Program Setup 

20 

Erase Setup 

40 

Program Setup 

50 

Clear Status Register 

70 

Read Status Register 

90 

Intelligent Identifier 

B0 

Erase Suspend 

DO 

Erase Resume/Erase Confirm 

FF 

Read Array 


4.4.2.2 Command Function Descriptions 

Device operations are selected by writing specific 
commands into the CUI. Table 4 defines the 2-Mbit 
boot block flash family commands. 
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Table 4. Command Definitions 


Command 

Bus 

Cycles 

Req’d 


First Bus Cycle 

Second Bus Cycle 

8 



Data 

Operation 

Address 


Read Array/Reset 

1 



X 





Intelligent Identifier 

3 

s 


X 

Eifil 


IA 


Read Status Register 

2 



X 

70H 

Read 

X 

SRD 

Clear Status Register 

1 



X 

50H 




Erase Setup/ Erase Confirm 

2 


Write 

BA 

EBBI 

Write 

BA 

DOH 

Word/Byte Write Setup/Write 

2 



WA 

a 

Write 

WA 

WD 

Erase Suspend/ Erase Resume 




X 



X 

DOH 

Alternate Word/Byte Write Setup/ Write 

2 

laid 






WD 


NOTES: 

1. Bus operations are defined in Tables 1, 2, 3. 

2. IA = Identifier Address: 00H for manufacturer code, 01 H for device code. 

3. SRD = Data read from Status Register. 

4. IID = Intelligent Identifier Data. 

Following the Intelligent Identifier Command, two read operations access manufacturer and device codes. 

5. BA = Address within the block being erased. 

6. PA = Address to be programmed. 

PD = Data to be programmed at location PA. 

7. Either 40H or 10H command is valid. 

8. When writing commands to the device, the upper data bus [DQ8-DQ15] = X (28F200BX-only) which is either Vcc or 
Vss to avoid burning additional current. 

Invalid/Reserved 

These are unassigned commands. It is not recom- 
mended that the customer use any command other 
than the valid commands specified above. Intel re- 
serves the right to redefine these codes for future 
functions. 


Read Array (FFH) 

This single write command points the read path at 
the array. If the host CPU performs a CE#/OE# 
controlled read immediately following a two-write se- 
quence that started the WSM, then the device will 
output status register contents. If the Read Array 
command is given after Erase Setup the device is 
reset to read the array. A two Read Array command 
sequence (FFH) is required to reset to Read Array 
after Program Setup. 

Inteligent Identifier (90H) 

After this command is executed, the CUI points the 
output path to the Intelligent Identifier circuits. Only 
Intelligent Identifier values at addresses 0 and 1 can 
be read (only address AO is used in this mode, all 
other address inputs are ignored). 


Read Status Register (70H) 

This is one of the two commands that is executable 
while the state machine is operating. After this com- 
mand is written, a read of the device will output the 
contents of the status register, regardless of the ad- 
dress presented to the device. 

The device automatically enters this mode after pro- 
gram or erase has completed. 

Clear Status Register (50H) 

The WSM can only set jthe Program Status and 
Erase Status bits in the status register, it can not 
clear them. Two reasons exist for operating the 
status register in this fashion. The first is a synchro- 
nization. The WSM does not know when the host 
CPU has read the status register, therefore it would 
not know when to clear the status bits. Secondly, if 
the CPU is programming a string of bytes, it may be 
more efficient to query the status register after pro- 
gramming the string. Thus, if any errors exist while 
programming the string, the status register will return 
the accumulated error status. 
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Program Setup (40H or 10H) 

This command simply sets the CU I into a state such 
that the next write will load the address and data 
registers. Either 40H or 10H can be used for Pro- 
gram Setup. Both commands are included to ac- 
commodate efforts to achieve an industry standard 
command code set. 


Program 

The second write after the program setup command, 
will latch addresses and data. Also, the CUI initiates 
the WSM to begin execution of the program algo- 
rithm. While the WSM finishes the algorithm, the de- 
vice will output Status Register contents. Note that 
the WSM cannot be suspended during program- 
ming. 


Erase Setup (20H) 

Prepares the CUI for the Erase Confirm command. 
No other action is taken. If the next command is not 
an Erase Confirm command then the CUI will set 
both the Program Status and Erase Status bits of the 
Status Register to a “1”, place the device into the 
Read Status Register state, and wait for another 
command. 


Erase Confirm (DOH) 

If the previous command was an Erase Setup com- 
mand, then the CUI will enable the WSM to erase, at 
the same time closing the address and data latches, 
and respond only to the Read Status Register and 
Erase Suspend commands. While the WSM is exe- 
cuting, the device will output Status Register data 
when OE# is toggled low. Status Register data can 
only be updated by toggling either OE# or CE# low. 


Erase Suspend (BOH) 

This command only has meaning while the WSM is 
executing an Erase operation, and therefore will only 
be responded to during an erase operation. After 
this command has been executed, the CUI will set 
an output that directs the WSM to suspend Erase 
operations, and then return to responding to only 
Read Status Register or to the Erase Resume com- 
mands. Once the WSM has reached the Suspend 
state, it will set an output into the CUI which allows 
the CUI to respond to the Read Array, Read Status 
Register, and Erase Resume commands. In this 
mode, the CUI will not respond to any other com- 
mands. The WSM will also set the WSM Status bit to 
a “1”. The WSM will continue to run, idling in the 
SUSPEND state, regardless of the state of all input 


control pins, with the exclusion of RP#. RP# will 
immediately shut down the WSM and the remainder 
of the chip. During a suspend operation, the data 
and address latches will remain closed, but the ad- 
dress pads are able to drive the address into the 
read path. 


Erase Resume (DOH) 

This command will cause the CUI to clear the Sus- 
pend state and set the WSM Status bit to a “0”, but 
only if an Erase Suspend command was previously 
issued. Erase Resume will not have any effect in all 
other conditions. 


4.4.3 STATUS REGISTER 


The 2-Mbit boot block flash family contains a status 
register which may be read to determine when a pro- 
gram or erase operation is complete, and whether 
that operation completed successfully. The status 
register may be read at any time by writing the Read 
Status command to the CUI. After writing this com- 
mand, all subsequent Read operations output data 
from the status register until another command is 
written to the CUI. A Read Array command must be 
written to the CUI to return to the Read Array mode. 


The status register bits are output on DQ[0:7] 
whether the device is in the byte-wide (x8) or word- 
wide (x16) mode for the 28F200BX. In the word-wide 
mode the upper byte, DQ[8:15] is set to 00H during 
a Read Status command. In the byte-wide mode, 
DQ[8:14] are tri-stated and DQ15/A-1 retains the 
low order address function. 


It should be noted that the contents of the status 
register are latched on the falling edge of OE# or 
CE# whichever occurs last in the read cycle. This 
prevents possible bus errors which might occur if the 
contents of the status register change while reading 
the status register. CE# or OE# must be toggled 
with each subsequent status read, or the completion 
of a program or erase operation will not be evident. 

The Status Register is the interface between the mi- 
croprocessor and the Write State Machine (WSM). 
When the WSM is active, this register will indicate 
the status of the WSM, and will also hold the bits 
indicating whether or not the WSM was successful in 
performing the desired operation. The WSM sets 
status bits “Three” through “Seven” and clears bits 
“Six” and “Seven”, but cannot clear status bits 
“Three” through “Five”. These bits can only be 
cleared by the controlling CPU through the use of 
the Clear Status Register command. 
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4.4.3. 1 Status Register Bit Definition 


Table 5. Status Register Definitions 


SR.7 = 
1 = 
0 = 


SR.6 = 
1 = 
0 = 


SR. 5 = 
1 = 
0 = 

SR.4 = 
1 = 
0 = 

SR.3 = 
1 = 
0 = 


WSMS 

ESS 

ES 

PS 

VPPS 

R 

R 

R 

7 

6 

5 

4 

3 

2 

1 

0 


NOTES: 


WRITE STATE MACHINE STATUS 

Ready 

Busy 


Write State Machine Status bit must first be checked to 
determine byte/word program or block erase completion, 
before the Program or Erase Status bits are checked for 
success. 


ERASE SUSPEND STATUS 

Erase Suspended 

Erase in Progress/Completed 


When Erase Suspend is issued, WSM halts execution 
and sets both WSMS and ESS bits to “1”. ESS bit re- 
mains set to “1” until an Erase Resume command is is- 
sued. 


ERASE STATUS 
Error in Block Erasure 
Successful Block Erase 


When this bit is set to “1”. WSM has applied the maxi- 
mum number of erase pulses to the block and is still un- 
able to successfully perform an erase verify. 


PROGRAM STATUS 

Error in Byte/Word Program 

Successful Byte/Word Program 


When this bit is set to “1”, WSM has attempted but failed 
to Program a byte or word. 


V PP STATUS 

Vpp Low Detect; Operation Abort 
V PP OK 


The Vpp Status bit, unlike an A/D converter, does not 
provide continuous indication of Vpp level. The WSM in- 
terrogates the Vpp level only after the byte write or block 
erase command sequences have been entered and in- 
forms the system if Vpp has not been switched on. The 
Vpp Status bit is not guaranteed to report accurate feed- 
back between Vppi_ and Vppn- 


SR.2-SR.0 = RESERVED FOR FUTURE ENHANCE- These bits are reserved for future use and should be 
MENTS masked out when polling the Status Register. 


4.4.3.2 Clearing the Status Register 

Certain bits in the status register are set by the write 
state machine, and can only be reset by the system 
software. These bits can indicate various failure con- 
ditions. By allowing the system software to control 
the resetting of these bits, several operations may 
be performed (such as cumulatively programming 
several bytes or erasing multiple blocks in se- 
quence). The status register may then be read to 
determine if an error occurred during that program- 
ming or erasure series. This adds flexibility to the 
way the device may be programmed or erased. To 
clear the status register, the Clear Status Register 
command is written to the CUI. Then, any other 
command may be issued to the CUI. Note again that 
before a read cycle can be initiated, a Read Array 
command must be written to the CUI to specify 
whether the read data is to come from the array, 
status register, or Intelligent Identifier. 


4.4.4 PROGRAM MODE 

Program is executed by a two-write sequence. The 
Program Setup command is written to the CUI fol- 
lowed by a second write which specifies the address 
and data to be programmed. The write state ma- 
chine will execute a sequence of internally timed 
events to: 

1 . Program the desired bits of the addressed memo- 
ry word (byte), and 

2. Verify that the desired bits are sufficiently pro- 
grammed 

Programming of the memory results in specific bits 
within a byte or word being changed to a “0”. 

If the user attempts to program “1 ”s, there will be no 
change of the memory cell content and no error oc- 
curs. 

Similar to erasure, the status register indicates 
whether programming is complete. While the pro- 
gram sequence is executing, bit 7 of the status regis- 
ter is a “0”. The status register can be polled by 
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toggling either CE# or OE# to determine when the 
program sequence is complete. Only the Read 
Status Register command is valid while program- 
ming is active. 

When programming is complete, the status bits, 
which indicate whether the program operation was 
successful, should be checked. If the programming 
operation was unsuccessful, Bit 4 of the status regis- 
ter is set to a “1” to indicate a Program Failure. If Bit 
3 is set then Vp P was not within acceptable limits, 
and the WSM will not execute the programming se- 
quence. 

The status register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after programming is completed; however, it 
must be recognized that reads from the memory, 
status register, or Intelligent Identifier cannot be ac- 
complished until the CUI is given the appropriate 
command. A Read Array command must first be giv- 
en before memory contents can be read. 

Figure 1 2 shows a system software flowchart for de- 
vice byte programming operation. Figure 1 3 shows a 
similar flowchart for device word programming oper- 
ation (28F20QBX-only). 

4.4.5 ERASE MODE 

Erasure of a single block is initiated by writing the 
Erase Setup and Erase Confirm commands to the 
CUI, along with the addresses, A[1 2:1 6] for the 
28F200BX or A[12:17] for the 28F002BX, identifying 
the block to be erased. These addresses are latched 
internally when the Erase Confirm command is is- 
sued. Block erasure results in all bits within the block 
being set to “1”. 

The WSM will execute a sequence of internally 
timed events to: 

1 . Program all bits within the block 

2. Verify that all bits within the block are sufficiently 
programmed 

3. Erase all bits within the block and 

4. Verify that all bits within the block are sufficiently 
erased 

While the erase sequence is executing, Bit 7 of the 
status register is a “0”. 

When the status register indicates that erasure is 
complete, the' status bits, which indicate whether the 
erase operation was successful, should be checked. 
If the erasure operation was unsuccessful, Bit 5 of 
the status register is set to a “1” to indicate an 
Erase Failure. If Vpp was not within acceptable limits 
after the Erase Confirm command is issued, the 
WSM will not execute an erase sequence; instead, 
Bit 5 of the status register is set to a “1” to indicate 


an Erase Failure, and Bit 3 is set to a “1” to identify 
that Vpp supply voltage was not within acceptable 
limits. 

The status register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after erasure is completed; however, it must 
be recognized that reads from the memory array, 
status register, or Intelligent Identifier can not be ac- 
complished until the CUI is given the appropriate 
command. A Read Array command must first be giv- 
en before memory contents can be read. 

Figure 14 shows a system software flowchart for 
Block Erase operation. 

4.4.5.1 Suspending and Resuming Erase 

Since an erase operation typically requires 1 to 3 
seconds to complete, an Erase Suspend command 
is provided. This allows erase-sequence interruption 
jn order to read data from another block of the mem- 
ory. Once the erase sequence is started, writing the 
Erase Suspend command to the CUI requests that 
the Write State Machine (WSM) pause the erase se- 
quence at a predetermined point in the erase algo- 
rithm. The status register must be read to determine 
when the erase operation has been suspended. 

At this point, a Read Array command can be written 
to the CUI in order to read data from blocks other 
than that which is being suspended. The only other 
valid command at this time is the Erase Resume 
command or Read Status Register operation. 

Figure 1 5 shows a system software flowchart detail- 
ing the operation. 

During Erase Suspend mode, the chip can go into a 
pseudo-standby mode by taking CE# to Vih and the 
active current is now a maximum of 10 mA. If the 
chip is enabled while in this mode by taking CE# to 
V||_, the Erase Resume command can be issued to 
resume the erase operation. 

Upon completion of reads from any block other than 
the block being erased, the Erase Resume com- 
mand must be issued. When the Erase Resume 
command is given, the WSM will continue with the 
erase sequence and complete erasing the block. As 
with the end of erase, the status register must be 
read, cleared, and the next instruction issued in or- 
der to continue. 

4.4.6 EXTENDED CYCLING 

Intel has designed extended cycling capability into 
its ETOX III flash memory technology. The 2-Mbit 
boot block flash family is designed for 100,000 pro- 
gram/erase cycles on each of the five blocks. The 
combination of low electric fields, clean oxide pro- 
cessing and minimized oxide area per memory cell 
subjected to the tunneling electric field, results in 
very high cycling capability. 
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Bus 

Operation 

Command 

Comments 

Write 

Setup 

Program 

Data = 40H 
Address = Byte to be 
programmed 

Write 

\ 

Program 

Data to be programmed 
Address = Byte to be 
programmed 

Read 


Status Register Data. 

Toggle OE# or CE# to update 
Status Register 

Standby 


Check SR. 7 
1 = Ready, 0 = Busy 

Repeat for subsequent bytes. 

Full status check can be done after each byte or after a 
sequence of bytes. 

Write FFH after the last byte programming operation to 
reset the device to Read Array Mode. 



290448-6 


Full Status Check Procedure 



Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 



1 = Vpp Low Detect 

Standby 


Check SR.4 



1 = Byte Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 

SR.4 is only cleared by the Clear Status Register 
Command, in cases where multiple bytes are programmed 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 12. Automated Byte Programming Flowchart 
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Bus 

Operation 

Command 

Comments 

Write 

Setup 

Program 

Data = 40H 
Address = Word to be 
programmed 

Write 

Program 

Data to be programmed 
Address = Word to be 
programmed 

Read 


Status Register Data. 

Toggle OE# or CE# to update 
Status Register 

Standby 


Check SR.7 
1 = Ready, 0 = Busy 

Repeat for subsequent words. 

Full status check can be done after each word or after a 
sequence of words. 

Write FFH after the last word programming operation to 
reset the device to Read Array Mode. 


Full Status Check Procedure 


Status Register Data 
Read (See Above) 


Bus 

Operation 


Vpp Range 


Check SR.3 
1 = Vpp Low Detect 


Byte Prog rant 
Error 


Check SR.4 

1 = Word Program Error 


Word Program 
Successful 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR.4 is only cleared by the Clear Status Register 
Command, in cases where multiple words are programmed 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 13. Automated Word Programming Flowchart 
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Full Status Check Procedure 



Bus 

Operation 

Command 

Comments 

Write 

Setup 

Erase 

Data = 20H 

Address = Within block to be 
erased 

Write 

Erase 

Data = DOH 

Address = Within block to be 
erased 

Read 


Status Register Data. 

Toggle OE# or CE# to update 
Status Register 

Standby 


Check SR. 7' 

1 = Ready, 0 = Busy 

Repeat for subsequent blocks. 

Full status check can be done after each block or after a 
sequence of blocks. 

Write FFH after the last block erase operation to reset the 
device to Read Array Mode. 


Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4,5 

Both 1 = Command Sequence 
Error 

Standby 


Check SR.5 
1 = Block Erase Error 

SR.3 MUST be cleared, if set during an erase attempt, 
before further attempts are allowed by the Write State 
Machine. 

SR.5 is only cleared by the Clear Status Register 
Command, in cases where multiple blocks are erased 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 14. Automated Block Erase Flowchart 
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Bus 

Operation 

Command 

Comments 

Write 

Erase 

Suspend 

Data = BOH 

Read 


Status Register Data. 
Toggle OE# or CE# to 
update Status Register 

Standby 


Check SR.7 
1 = Ready 

Standby 


Check SR.6 
1 = Suspended 

Write 

Read Array 

Data - FFH 

Read 


Read array data from block 
other than that being 
erased. 

Write 

Erase Resume 

Data = D0H 



290448-12 

Figure 15. Erase Suspend/Resume Flowchart 


4.5 Power Consumption 

4.5.1 ACTIVE POWER 

With CE# at a logic-low level and RP# at a logic- 
high level, the device is placed in the active mode. 
The device Ice current is a maximum of 60 mA at 
10 MHz with TTL input signals. 

4.5.2 AUTOMATIC POWER SAVINGS 

Automatic Power Savings (APS) is a low power fea- 
ture during active mode of operation. The 2-Mbit 
family of products incorporate Power Reduction 
Control (PRC) circuitry which basically allows the de- 
vice to put itself into a low current state when it is 
not being accessed. After data is read from the 
memory array, PRC logic controls the device’s pow- 
er consumption by entering the APS mode where 


maximum Ice current is 3 mA and typical Ice current 
is 1 mA. The device stays in this static state with 
outputs valid until a new location is read. 

4.5.3 STANDBY POWER 

With CE# at a logic-high level (Vih), and the CUI in 
read mode, the memory is placed in standby mode 
where the maximum Ice standby current is 100 jjlA 
with CMOS input signals. The standby operation dis- 
ables much of the device’s circuitry and substantially 
reduces device power consumption. The outputs 
(DQ[0:15] or DQ[0:7]) are placed in a high-imped- 
ance state independent of the status of the OE# 
signal. When the 2-Mbit boot block flash family is 
deselected during erase or program functions, the 
devices will continue to perform the erase or pro- 
gram function and consume program or erase active 
power until program or erase is completed. 
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4.5.4 RESET/DEEP POWER-DOWN 

The 2-Mbit boot block flash family supports a typical 
Ice of 0.2 jllA in deep power-down mode. One of the 
target markets for these devices is in portable equip- 
ment where the power consumption of the machine 
is of prime importance. The 2-Mbit boot block flash 
family has a RP# pin which places the device in the 
deep power-down mode. When RP# is at a logic- 
low (GND ±0.2V), all circuits are turned off and the 
device typically draws 0.2 jxA of Vcc current. 

During read modes, the RP# pin going low dese- 
lects the memory and places the output drivers in a 
high impedance state. Recovery from the deep pow- 
er-down state, requires a maximum of 300 ns to ac- 
cess valid data (tpHQv)- 

During erase or program modes, RP# low will abort 
either erase or program operation. The contents of 
the memory are no longer valid as the data has been 
corrupted by the RP# function. As in the read mode 
above, all internal circuitry is turned off to achieve 
the 0.2 ju,A current level. 

RP# transitions to V||_ or turning power off to the 
device will clear the status register. 

This use of RP# during system reset is important 
with automated write/erase devices. When the sys- 
tem comes out of reset it expects to read from the 
flash memory. Automated flash memories provide 
status information when accessed during write/ 
erase modes. If a CPU reset occurs with no flash 
memory reset, proper CPU initialization would not 
occur because the flash memory would be providing 
the status information instead of array data. Intel’s 
Flash Memories allow proper CPU initialization fol- 
lowing a system reset through the use of the RP# 
input. In this application RP# is controlled by the 
same RESET # signal that resets the system CPU. 

4.6 Power-Up Operation 

The 2-Mbit boot block flash family is designed to 
offer protection against accidental block erasure or 
programming during power transitions. Upon power- 
up the 2-Mbit boot block flash family is indifferent as 
to which power supply, Vpp or Vcc. powers-up first. 
Power suppy sequencing is not required. 

The 2-Mbit boot block flash family ensures the CUI is 
reset to the read mode on power-up. 

In addition, on power-up the user must either drop 
CE# low or present a new address to ensure valid 
data at the outputs. 

A system designer must guard against spurious 
writes for Vcc voltages above Vl«o when Vpp is 


active. Since both WE# and CE# must be low for a 
command write, driving either signal to Vih will inhibit 
writes to the device. The CUI architecture provides 
an added level of protection since alteration of mem- 
ory contents can only occur after successful com- 
pletion of the two-step command sequences. Final- 
ly, the device is disabled until RP# is brought to Vih, 
regardless of the state of its control inputs. This fea- 
ture provides yet another level of memory protec- 
tion. 


4.7 Power Supply Decoupling 

Flash memory’s power switching characteristics re- 
quire careful device decoupling methods. System 
designers are interested in 3 supply current issues: 

• Standby current levels (Ices) 

• Active current levels (Iccr) 

• Transient peaks produced by falling and rising 
edges of CE#. 

Transient current magnitudes depend on the device 
outputs’ capacitive and inductive loading. Two-line 
control and proper decoupling capacitor selection 
will suppress these transient voltage peaks. Each 
flash device should have a 0.1 /xF ceramic capacitor 
connected between each Vcc and GND, and be- 
tween its Vpp and GND. These high frequency, low- 
inherent inductance capacitors should be placed as 
close as possible to the package leads. 

4.7.1 Vpp TRACE ON PRINTED CIRCUIT 
BOARDS 

Writing to flash memories while they reside in the 
target system, requires special consideration of the 
Vpp power supply trace by the printed circuit board 
designer. The Vpp pin supplies the flash memory 
cell’s current for programming and erasing. One 
should use similar trace widths and layout consider- 
ations given to the Vcc power supply trace. Ade- 
quate Vpp supply traces and decoupling will de- 
crease spikes and overshoots. 

4.7.2 Vcc, Vpp AND RP# TRANSITIONS 

The CUI latches commands as issued by system 
software and is not altered by Vpp or CE# tran- 
sitions or WSM actions. Its state upon power-up, af- 
ter exit from deep power-down mode or after Vcc 
transitions below V|_ko (Lockout voltage), is Read 
Array mode. 

After any word/byte write or block erase operation is 
complete and even after Vpp transitions down to 
Vppi_, the CUI must be reset to Read Array mode via 
the Read Array command when accesses to the 
flash memory are desired. 
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ABSOLUTE MAXIMUM RATINGS* 

Commercial Operating Temperature 

During Read 0°C to 70°CC | ) 

During Block Erase 

and Word/Byte Write 0°C to 70°C 

T emperature Under Bias - 1 0°C to + 80°C 

Extended Operating Temperature 

During Read -40°C to +85°C 

During Block Erase 

and Word/Byte Write -40°C to + 85°C 

Temperature Under Bias -40°Cto + 85°C 

Storage Temperature -65°C to + 125°C 

Voltage on Any Pin 

(except Vqc, Vpp, Ag and RP#) 

with Respect to GND -2.0V to + 7.0V( 2 ) 

Voltage on Pin RP# or Pin Ag 
with Respect to GND -2.0V to + 13.5V( 2 > 3 ) 

Vpp Program Voltage with Respect 
to GND during Block Erase 
and Word/Byte Write -2.0V to + 14.0V( 2 > 3 ) 

Vqc Supply Voltage 

with Respect to GND -2.0V to +7.0V( 2 ) 

Output Short Circuit Current 100 mA( 4 ) 

NOTES: 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 

* WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings ” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions ” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


1. Operating temperature is for commercial product defined by this specification. 

2. Minimum DC voltage is -0.5V on input/output pins. During transitions, this level may undershoot to -2.0V for periods 
<20 ns. Maximum DC voltage on input/output pins is Vqc + 0.5V which, during transitions, may overshoot to Vcc + 2.0 V 
for periods <20 ns. 

3. Maximum DC voltage on Vpp may overshoot to + 14.0V for periods <20 ns. Maximum DC voltage on RP# or Ag may 
overshoot to 13.5V for periods < 20 ns. 

4. Output shorted for no more than one second. No more than one output shorted at a time. 

5. 10% Vcc specifications reference the 28F200BX-60/28F002BX-60 in their standard test configuration, and the 
28F200BX-80/ 28F002BX-80. 

6. 5% Vcc specifications reference the 28F200BX-60/28F002BX-60 in their high speed test configuration. 



OPERATING CONDITIONS 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 

Ta 

Operating Temperature 


0 

70 

°C 

Vcc 

Vqc Supply Voltage (10%) 

5 

4.50 

5.50 

V 

Vcc 

Vqq Supply Voltage (5%) 

6 

4.75 

5.25 

V 


DC CHARACTERISTICS 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

Ili 

Input Load Current 

1 



±1.0 

/xA 

Vcc = Vqq Max 
V|N == Vqq or GND 

Ilo 

Output Leakage Current 

1 



±10 

juA 

Vcc = Vcc Ma x 
Vqut = Vqc or GND 


I 
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DC CHARACTERISTICS (Continued) 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

Ices 

Vcc Standby Current 

1,3 



1.5 

mA 

Vcc = Vcc Max 
CE# = RP# = V, H 


100 

/xA 

v cc = Vcc Max 

CE# = RP# = V C c ±0.2V 

28F200BX: 

BYTE# = V CC ±0.2V or GND 

>CCD 

Vqc Deep Power-Down Current 

i 


0.20 

1.2 

ju,A 

RP# = GND ±0.2V 

ICCR 

Vcc Read Current for 
28F200BX Word-Wide and 
Byte-Wide Mode and 
28F002BX Byte-Wide Mode 

1,5, 
6, 10 





Vcc = Vcc Max, CE# — GND 
f(max) = 10 MHz, f(typ) = 5 MHz 
Iout = 0 mA, CMOS Inputs 



mA 

Vcc = Vcc Max, CE# = GND 
^(max) = 10 MHz, f(typ) “ 5 MHz 
•out = 0 m A, TTL Inputs 

•ccw 

Vcc Word Byte Write Current 

1,4 



65 

mA 

Word Write in Progress 

ICCE 

Vcc Block Erase Current 

D 



30 

mA 


Q 

Vcc Erase Suspend Current 

B 

■ 



mA 

Block Erase Suspended, 
CE# = Vih 


Vpp Standby Current 

1 



±15 


Vpp ^ Vcc 

m 

Vpp Deep Power-Down Current 




5.0 

ju,A 

RP# = GND ± 0.2V RP# 

IPPR 

Vpp Read Current 

1 



200 

/xA 

Vpp > Vcc 

Ippw 

Vpp Word Write Current 

1,4 



40 

mA 

Vpp = Vpph 

Word Write in Progress 

IppW 

Vpp Byte Write Current 

1,4 



30 

mA 

Vpp = Vpph 

Byte Write in Progress 

IPPE 

Vpp Block Erase Current 

1,4 



30 

mA 

Vpp = Vpph 

Block Erase in Progress 

IPPES 

Vpp Erase Suspend Current 

1 



200 

fiA 

Vpp = Vpph 

Block Erase Suspended 

Irp# 

RP# Boot Block Unlock Current 

1,4 



500 

jxA 

RP# = Vhh 

l|D 

Ag Intelligent Identifier Current 

1,4 



500 

/aA 

Ag = V, D 

V|D 

Ag Intelligent Identifier Voltage 


11.5 


13.0 

V 


V|L 

Input Low Voltage 


-0.5 


0.8 

V 


V|H 

Input High Voltage 


2.0 


Vcc + °- 5 

V 


V OL 

Output Low Voltage 




0.45 

V 

v cc = v cc Min 
Iql = 5.8 mA 
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DC CHARACTERISTICS (Continued) 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

VOHI 

Output High Voltage (TTL) 


2.4 



V 

V CC = V CC Min 
Ioh = “2.5 mA 

VOH2 

Output High Voltage (CMOS) 


0.85 Vcc 



V 

V CC = V CC Min 
Iqh = “2.5 mA 

V C C - 0.4 

Vcc = Vcc Min 
Ioh = “100 ju,A 

V PPL 

Vpp during Normal Operations 

3 

0.0 


6.5 

V 


VpPH 

Vpp during Erase/Write Operations 

7 

11.4 

12.0 

12.6 

V 


V PPH 

Vpp during Erase/Write Operations 

8 

10.8 

12.0 

13.2 

V 


V LKO 

Vcc Erase/Write Lock Voltage 


2.0 



V 


Vhh 

RP# Unlock Voltage 


11.5 


13.0 

V 

Boot Block Write/Erase 


EXTENDED TEMPERATURE OPERATING CONDITIONS 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 

Ta 

Operating Temperature 


-40 

+ 85 

°C 

Vcc 

Vcc Supply Voltage (10%) 

5 

4.50. 

5.50 

V 


DC 


CHARACTERISTICS: EXTEN 


DED TEMPERATURE OPERATION 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

Ili 

Input Load Current 

1 



±1.0 

jjlA 

Vcc = Vcc Max 
V|N = Vcc or GND 

■lo 

Output Leakage Current 

1 



±10 

juA 

V CC = v cc Max 

VoUT = Vcc or GND 

ices 

Vcc Standby Current 

1,3 



1.5 

mA 

Vcc = Vcc Max 
CE# = RP# = V| H 


100 

julA 

v cc = v cc Max 

CE# = RP# = V C c ±0.2V 

28F200BX: 

BYTE# = V C c ±0.2V or GND 

•CCD 

Vcc Deep Power-Down Current 

1 


0.20 

20 

jJL A 

RP# = GND ±0.2V 

•CCR 

Vcc Read Current for 
28F200BX Word-Wide and 
Byte-Wide Mode and 
28F002BX Byte-Wide Mode 

1,5, 

6 



60 

mA 

Vcc = V C c Max, CE# = GND 
f = 10 MHz, l 0 UT = 0 mA 
CMOS Inputs 


65 

mA 

Vcc = Vcc Max, CE# = V|i_ 
f = 10 MHz, l 0 UT = 0 mA 
TTL Inputs 


I 
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DC CHARACTERISTICS: EXTENDED TEMPERATURE OPERATION (Continued) 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

•ccw 

Vcc Word Byte Write Current 

1 



70 

mA 

Word Write in Progress 

>CCE 

Vqc Block Erase Current 

1 



40 

mA 

Block Erase in Progress 

•CCES 

Vcc Erase Suspend Current 

1,2 

' 

5 

10 

mA 

Block Erase Suspended 
CE# = V| H 

•pps 

Vpp Standby Current 

1 



±15 

jllA 

o 

£ 

VI 

CL 

Q_ 

> 

•PPD 

Vpp Deep Power-Down Current 

1 



5.0 

(jlA 


•PPR 

Vpp Read Current 

1 



200 

fiA 

Vpp > Vcc 

Ippw 

Vpp Word Write Current 

1,4 



40 

mA 

Vpp = VppH 
Word Write in Progress 

Ippw 

Vpp Byte Write Current 

1,4 



30 

mA 

Vpp = VppH 

Byte Write in Progress 

IppE 

Vpp Block Erase Current 

1,4 



30 

mA 

Vpp = VppH 

Block Erase in Progress 

•PPES 

Vpp Erase Suspend Current 

1 



200 

JJL A 

Vpp = VppH 

Block Erase Suspended 

•rp# 

RP# Boot Block Unlock Current 

1,4 



500 

juA 

RP# = v HH 

•id 

Ag Intelligent Identifier Current 

1 



500 

fJL A 

a 9 = V| D 

V|D 

Ag Intelligent Identifier Voltage 


11.5 


13.0 

V 


V|L 

Input Low Voltage 


-0.5 


0.8 

D 


V|H 

Input High Voltage 


2.0 



D 


Vol 

Output Low Voltage 



■ 




VoHI 

Output High Voltage (TTL) 


B 





V OH2 

Output High Voltage (CMOS) 



1 

■ 



Vcc - 0.4 

1 

VpPL 

Vpp during Normal Operations 

3 

0.0 


6.5 

B 


VppH 

Vpp during Erase/Write Operations 

7 

11.4 

12.0 

12.6 

V 


VpPH 

Vpp during Erase/Write Operations 

8 

10.8 

12.0 

13.2 

V 


Vlko 

Vcc Erase/Write Lock Voltage 


2.0 



V 


Vhh 

RP# Unlock Voltage 


11.5 


13.0 

V 

Boot Block Write/Erase 
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CAPACITANCES, 9) j A = 25 °c, f = 1 MHz 


Symbol 

Parameter 

Typ 

Max 

Unit 

Condition 

C|N 

Input Capacitance 

6 

8 

PF 

> 

o 

II 

z 

> 

Gout 

Output Capacitance 

10 

12 

PF 

VquT = 


N0TES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, V P p = 12.0V, T = 25°C. These currents 
are valid for all product versions (packages and speeds). 

2. IccES is specified with the device deselected. If the device is read while in Erase Suspend Mode, current draw is the sum 
Of IcCES anc * IcCR- 

3. Block Erases and Word/Byte Writes are inhibited when Vpp = Vppi_ and not guaranteed in the range between Vppn and 
VppL- 

4. Sampled, not 100% tested. 

5. Automatic Power Savings (APS) reduces Iccr to less than 1 mA typical in static operation. 

6. CMOS Inputs are either Vcc ±0.2V 0 r GND ±0.2V. TTL Inputs are either Vil or Vih- 

7. Vpp = 12.0V ±5% for applications requiring 100,000 block erase cycles. 

8. Vpp = 12.0V ±10% for applications requiring wider Vpp tolerances at 100 block erase cycles. 

9. For the 28F002BX, address pin A-io follows the Cout capacitance numbers. 

10. Iccr typical is 25 mA for XI 6 active read current. 


STANDARD TEST CONFIGURATION^) 


STANDARD AC INPUT/OUTPUT REFERENCE WAVEFORM 


^ X:: ° utput 

290448-14 

AC test inputs are driven at Vqh (2.4 Vttl) for a Logic “1” and Vql 
(0.45 Vttl) tor a logic “0”. Input timing begins at Vih (2.0 Vttl) and v il 
(0.8 Vttl)- Output timing ends at Vm and Vil. Input rise and fall times (10% 
to 90%) < 10 ns. 



STANDARD AC TESTING 
LOAD CIRCUIT 


1.3V 

"J"lN914 


DEVICE 

r, 

TEST 

=T=^ 


HIGH SPEED TEST CONFIGURATION^) 


290448-13 

C L = 100 pF 

Cl Includes Jig Capacitance 
R l = 3.3 Kft 


HIGH SPEED AC INPUT/OUTPUT REFERENCE WAVEFORM HIGH SPEED AC TESTING 

LOAD CIRCUIT 


NOTES: 

1. Testing characteristics for 28F200BX-60/28F002BX-60 in standard test config- 
uration and 28F200BX-80/28F002BX-80. 

2. Testing characteristics for 28F200BX-60/28F002BX-60 in high speed test con- 
figuration. 


DEVICE 

UNDER 

TEST 


— OOUT 


290448-21 

C L = 30 pF 

Cl Includes Jig Capacitance 
R l = 3.3 KH 


3.0 - 


o.o- 


input) ^l5 


- TEST POINTS - 

55 


X 


t .5 OUTPUT 


290448-22 

AC test inputs are driven at 3.0V for a Logic “1” and 0.0V for a logic “0”. 
Input timing begins, and output timing ends, at 1 .5V. Input rise and fall times 
(10% to 90%) < 10 ns. 


I 
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AC CHARACTERISTICS— Read Only Operations^) 


Versions 

V cc ±5% 

v cc ±10% 

Unit 

28F200BX-60W 

28F002BX-60W 



28F200BX-120( S ) 

28F002BX-120(5) 

Symbol 

Parameter 

2 

KB 



Max 

Min 

Max 

Min 

Max 

l AVAV 




mm 


■a 


80 


120 



*AVQV 

tACC 

Address to 
Output Delay 


■ 

60 

■ 

70 


80 



ns 

l ELQV 

tCE 

CE# to Output Delay 

2 


60 


70 


80 


120 

m 

tpHQV 

tpWH 

RP# High to 
Output Delay 



300 


300 


300 




S3 

0 

OE# to Output Delay 

2 


30 


35 


40 


40 

jjgi 

3551 

m 





0 


0 


0 



22 





20 




30 


30 


*GLQX 

193 

OE# to Output LowZ 

3 

0 


0 


0 


0 



tGHQZ 


iliilll 

3 

■ 

20 


H 


30 


30 


1 



3 

■ 

■ 

0 

■ 


■ 



■ 

*ELFL 

l ELFH 


CE# to BYTE# 
Switching 
Low or High 

3 

■ 

5 

■ 

5 

■ 

5 

■ 

5 

ns 


1 

BYTE# Switching 
High to 

Valid Output Delay 


■ 


■ 

70 

■ 

80 


120 


tFLQZ 


BYTE# Switching 
Low to 

Output High Z 

3 

■ 

20 


25 


30 

■ 

30 

ns 


NOTES: 

1. See AC Input/Output Reference Waveform for timing measurements. 

2. OE# may be delayed up to tcE-toE after the falling edge of CE# without impact on tcE- 

3. Sampled, not 100% tested. 

4. See High Speed Test Configuration. 

5. See Standard Test Configuration. 

6. tFLQV. BYTE# switching low to valid output delay, will be equal to tAvov. measured from the time DQ15/A-1 becomes 
valid. 
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EXTENDED TEMPERATURE OPERATIONS 
AC CHARACTERISTICS— Read Only Operations^): 


Versions 

T28F200BX-80(“) 

T28F002BX-80<4) 

Unit 

Symbol 

Parameter 

Notes 

Min 

Max 

Wav 

*RC 

Read Cycle Time 


80 


ns 

Wqv 

*ACC 

Address to 
Output Delay 



80 

ns 

■ I 

*CE 

CE# to Output Delay 

2 


80 

ns 

tpHQV 

tpWH 

RP# High to 
Output Delay 



300 

ns 

mSSM 

fOE 

OE# to Output Delay 

2 


40 

ns 

tELQX 

t|_Z 

CE# to Output LowZ 

3 

0 


ns 

m 

»HZ 

CE# High to Output 
High Z 

3 


30 

ns 



OE# to Output LowZ 

3 

0 


ns 

*GHQZ 

tDF 

OE# High to Output 
High Z 

3 

1M— 

30 




Output Hold from 
Addresses, 

CE# or OE# Change, 
Whichever is First 

3 



ns 



CE# to BYTE# 
Switching 
Low or High 

3 


5 


fFHQV 


BYTE# Switching 
High to 

Valid Output Delay 



80 

ns 

tFLQZ 


BYTE# Switching 
Low to 

Output High Z 

3 


30 

ns 


NOTES: 

1 . See AC Input/Output Reference Waveform for timing measurements. 

2. OE# may be delayed up to tcE-toE after the falling edge of CE# without impact on tcE- 

3. Sampled, not 100 % tested. 

4. See Standard Test Configuration. 

5. tpLQv. BYTE# switching low to valid output delay, will be equal to t/vvQv» measured from the time DQ 5 /A -1 becomes 
valid. 
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Figure 16 . AC Waveforms for Read Operations 
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Figure 20. BYTE# Timing for Both Read and Write Operations for 28F200BX 
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AC CHARACTERISTICS For WE# -Controlled Write Operations^) 


Versions 

V CC ±5% 

V CC ± 10% 

Unit 

28F200BX-60(9) 

28F002BX-60(9) 

28F200BX-60CO) 

28F002BX-60(1°> 

© o 
o o 

CO CO 

X X 
CD CQ 
O CM 
O O 
CM O 
LL Li. 
CO CO 
CM CM 

28F200BX-120(1°) 

28F002BX-120(1°) 

Symbol 

Parameter 

Notes 

Min 

Max 

Min 

Max 

Min 

Max 

Min 

Max 

tAVAV 

twc 

Write Cycle Time 


60 


70 


80 


120 


ns 

tpHWL 

tps 

RP# High 
Recovery to 
WE# Going Low 


215 


215 


215 


215 


ns 

tELWL 

tcs 

CE# Setup to 
WE# Going Low 


0 


0 


0 


0 


ns 

tpHHWH 

tpHS 

RP# V HH 
Setup to 

WE# Going High 

6,8 

100 


100 


100 


100 


ns 

tvPWH 

tvps 

Vpp Setup to 
WE# Going High 

5,8 

100 


100 


100 


100 


ns 

tAVWH 

Us 

Address Setup to 
WE# Going High 

3 

50 


50 


50 


50 


ns 

tDVWH 

tps 

Data Setup to 
WE# Going High 

4 

60 


60 


60 


60 


ns 

tWLWH 

twp 

WE# Pulse Width 


50 


50 


60 


60 


ns 

tWHDX 

*DH 

Data Hold from 
WE# High 

4 

0 


0 


0 


0 


ns 

tWHAX 

tAH 

Address Hold 
from WE# High 

3 

10 


10 


10 


10 


ns 

tWHEH 

tCH 

CE# Hold from 
WE# High 


10 


10 


10 


10 


ns 

tWHWL 

twPH 

WE# Pulse 
Width High 


10 


20 


20 


20 


ns 

twHQVI 


Duration of 
Word/Byte Write 
Operation 

2,5 

6 


6 


6 


6 


fJL s 

%HQV2 


Duration of Erase 
Operation (Boot) 

2, 5,6 

0.3 


0.3 


0.3 


0.3 


s 

tWHQV3 


Duration of Erase 

Operation 

(Parameter) 

2,5 

0.3 


0.3 


0.3 


0.3 


s 

twHQV4 


Duration of Erase 
Operation (Main) 

2, 5,6 

0.6 


0.6 

i 


0.6 


0.6 


s 

tQWL 

tvPH 

Vpp Hold from 
Valid SRD 

5,8 

0 


0 


0 


0 


ns 
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AC CHARACTERISTICS For WE# -Controlled Write OperationsO) (Continued) 






V CC ±5% 

v cc ± 10% 




Versions 


28F200BX-60<9) 

28F002BX-60<9) 

28F200BX-60O0) 

28F002BX-60O0) 

28F200BX-8000) 

28F002BX-80(1») 

28F200BX-1200°) 

28F002BX-1200°> 


Symbol 

Parameter 

Notes 

Min 

Max 

Min 

Max 






tQVPH 

tpHH 


6,8 

0 


0 


0 


0 



tpHBR 


Boot-Block 
Relock Delay 

7,8 


100 


100 


100 


100 

ns 


NOTES: 

1 . Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
characteristics during Read Mode. 

2. The on-chip WSM completely automates program/erase operations; program/erase algorithms are now controlled inter- 
nally which includes verify and margining operations. 

3. Refer to command definition table for valid Ain- 

4. Refer to command definition table for valid Din- 

5. Program/Erase durations are measured to valid SRD data (successful operation, SR.7=1). 

6. For Boot Block Program/Erase, RP# should be held at Vhh until operation completes successfully. 

7. Time tpHBR is required for successful relocking of the Boot Block. 

8. Sampled but not 100% tested. 

9. See High Speed Test Configuration. 

10. See Standard Test Configuration. 


BLOCK ERASE AND WORD/BYTE WRITE PERFORMANCE: V PP = 12.0V ±5% 


Parameter 

Notes 

28F200BX-60 

28F002BX-60 

28F200BX-80 

28F002BX-80 

28F200BX-120 

28F002BX-120 

Unit 

Min 

TypO) 

Max 

Min 

TypO) 

Max 

Min 

TypO) 

Max 

Boot/ Parameter 
Block Erase Time 

2 


1.0 

7 


1.0 

7 


1.0 

7 

s 

Main Block 
Erase Time 

2 


2.4 

14 


2.4 

14 


2.4 

14 

s 

Main Block Byte 
Program Time 

CM 



H 


1.2 

H 

■ 


4.2 


Main Block Word 
Program Time 

2 


0.6 

2.1 


0.6 

2.1 


0.6 

2.1 

s 


NOTES: 

1. 25°C 

2. Excludes System-Level Overhead. 


BLOCK ERASE AND WORD/BYTE WRITE PERFORMANCE: V PP = 12.0V ±10% 


Parameter 

Notes 

28F200BX-60 

28F002BX-60 

28F200BX-80 

28F002BX-80 

28F200BX-120 

28F002BX-120 

Unit 

Min 

TypO) 

Max 

Min 

TypO) 

Max 

Min 

TypO) 

Max 

Boot/Parameter 
Block Erase Time 

2 


5.8 

40 


5.8 

40 


5.8 

40 

s 

Main Block 
Erase Time 

2 


14 

60 


14 

60 


14 

60 

s 

Main Block Byte 
Program Time 

2 


6.0 

20 


6.0 

20 


6.0 

20 

s 

Main Block Word 
Program Time 

2 


3.0 

10 


3.0 

10 


3.0 

10 

s 


NOTES: 

1 . 25°C 

2. Excludes System-Level Overhead. 
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EXTENDED TEMPERATURE OPERATION 
AC CHARACTERISTICS For WE#-Controlled Write Operations* 1 ): 


Versions* 4 ) 

T28F200BX-800) 

T28F002BX-80<9) 

Unit 

Symbol 

Parameter 

Notes 

Min 

Max 

tAVAV 

twc 

Write Cycle Time 


80 


ns 

tpHWL 

tps 

RP# High Recovery to 
WE# Going Low 


220 


ns 

tELWL 

tcs 

CE# Setup to WE# Going Low 


0 


ns 

tpHHWH 

tPHS 

RP# Vhh Setup to WE# Going High 

6,8 

100 


ns 

tvPWH 

tvps 

Vpp Setup to WE# Going High 

5,8 

100 


ns 

*AVWH 

*AS 

Address Setup to WE# Going High 

3 

60 


ns 

tDVWH 

*ds 

Data Setup to WE# Going High 

4 

60 


ns 

tWLWH 

t W p 

WE# Pulse Width 


60 


ns 

tWHDX 

tDH 

Data Hold from WE# High 

4 

0 


ns 

tWHAX 

tAH 

Address Hold from WE# High 

3 

10 


ns 

tWHEH 




10 


ns 

tWHWL 




20 


■a 



Duration of Word/ Byte 
Write Operation 


7 


D 

tWHQV2 


Duration of Erase Operation (Boot) 

2, 5,6 

0.4 


s 

*WHQV3 


Duration of Erase 
Operation (Parameter) 

2,5 

0.4 


s 

tWHQV4 


Duration of Erase Operation (Main) 

2, 5,6 

0.7 


s 

tQWL 

tvPH 

Vpp Hold from Valid SRD 

5,8 

0 


ns 

tQVPH 

tpHH 

RP# Vhh Hold from Valid SRD 

6,8 

0 


ns 

tpHBR 


Boot-Block Relock Delay 

7,8 


100 

ns 


NOTES: 

1 . Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
characteristics during Read Mode. 

2. The on-chip WSM completely automates program/erase operations; program/erase algorithms are now controlled inter- 
nally which includes verify and margining operations. 

3. Refer to command definition table for valid Ain. 

4. Refer to command definition table for valid Din. 

5. Program/Erase durations are measured to valid SRD data (successful operation, SR. 7= 1). 

6. For Boot Block Program/ Erase, RP# should be held at V H h until operation completes successfully. 

7. Time tpneR is required for successful relocking of the Boot Block. 

8. Sampled but not 100% tested. 

9. See Standard Test Configuration. 
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EXTENDED TEMPERATURE OPERATION 

BLOCK ERASE AND WORD/BYTE WRITE PERFORMANCE: V PP = 12.0V ±5% 


Parameter 

Notes 

T28F200BX-80 

T28F002BX-80 

Unit 



Min 

TypO) 

Max 


Boot/ Parameter 
Block Erase Time 

2 


1.5 

10.5 

s 

Main Block 
Erase Time 

2 


3.0 

18 

s 

Main Block Byte 
Program Time 

2 


1.4 

5.0 

s 

Main Block Word 
Program Time 

2 


0.7 

2.5 

s 


NOTES: 

1 . 25°C, 12.0V Vpp. 

2. Excludes System-Level Overhead. 


h 
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Figure 21. AC Waveforms for Write and Erase Operations (WE# -Controlled Writes) 
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AC CHARACTERISTICS FOR CE# -CONTROLLED WRITE OPERATIONS^ 1 * 9 ) 



V CC ±5% 




Unit 


Symbol 


Wav 



tWLEL 









100 


100 


50 






NOTES: 

1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CE# and WE# in systems where 
CE# defines the write pulse-width (within a longer WE# timing waveform), all set-up, hold and inactive WE# time should be 
measured relative to the CE# waveform. 

2, 3, 4, 5, 6, 7, 8: Refer to AC Characteristics notes for WE# -Controlled Write Operations. 

9. Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
Characteristics during Read Mode. 

10. See High Speed Test Configuration. 

11. See Standard Test Configuration. 
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EXTENDED TEMPERATURE OPERATION 

AC CHARACTERISTICS FOR CE#-CONTROLlED WRITE OPERATIONS^* 9) 


Versions 

T28F200BX-8000) 
T28F002BX-80( 1 °) 

Unit 

Symbol 

Parameter 

Notes 

Min 

Max 

*AVAV 

*WC 

Write Cycle Time 


80 


ns 

tpHEL 

tps 

RP# High Recovery 
to CE# Going Low 


220 


ns 

tWLEL 

tws 

WE# Setup toCE# 
Going Low 


0 


ns 

tpHHEH 

tpHS 

RP# Vhh Setup to 
CE# Going High 

6,8 

100 


ns 

tVPEH 

Wps 

Vpp Setup to CE# 
Going High 

5,8 

100 


ns 

tAVEH 

Us 

Address Setup to 
CE# Going High 

3 

60 


ns 

tDVEH 

tDS 

Data Setup to CE# 
Going High 

4 

60 


ns 

tELEH 

tcp 

CE# Pulse Width 


60 


ns 

tEHDX 

*DH 

Data Hold from 
CE# High 

4 

0 


ns 

*EHAX 

Uh 

Address Hold 
from CE# High 

3 

10 


ns 

tEIHWH 

tWH 

WE# Hold from CE# High 


10 


ns 

*EHEL 

tCPH 

CE# Pulse 
Width High 


20 


ns 

tEHQVI 


Duration of Word/Byte 

Programming 

Operation 

2,5 

7 


jLtS 

tEHQV2 


Duration of Erase 
Operation (Boot) 

2, 5,6 

0.4 


s 

tEHQV3 


Duration of Erase 
Operation (Parameter) 

2,5 

0.4 


s 

tEHQV4 


Duration of Erase 
Operation (Main) 

2, 5 

0.7 


s 

tQWL 

Wph 

Vpp Hold from 
Valid SRD 

5,8 

0 


ns 

tQVPH 

tpHH 

RP# V HH Hold 
from Valid SRD 

6,8 

0 


ns 

tPHBR 


Boot-Block Relock Delay 

7 


100 

ns 


NOTES: 

1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CE# and WE# in systems where 
CE# defines the write pulse-width (within a longer WE# timing waveform), all set-up, hold and inactive WE# time should be 
measured relative to the CE# waveform. 

2, 3, 4, 5, 6, 7, 8: Refer to AC Characteristics for WE# -Controlled Write Operations. 

9. Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
Characteristics during Read Mode. 

10. See Standard Test Configuration. 
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Figure 22. Alternate AC Waveforms for Write and Erase Operations (CE# -Controlled Writes) 
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ORDERING INFORMATION 


OPERATING TEMPERATURE 
T = EXTENDED TEMP 
BLANK = COMMERCIAL TEMP 


EEEEEEnmZEEEE 

V 1 r 


PACKAGE 

E = STANDARD 56 LEAD TSOP 

PA = 44 LEAD PSOP 

TB = 44 LEAD PSOP, EXTENDED TEMP 


• ACCESS SPEED (ns) 
60 ns 
80 ns 
120 ns 


Valid Combinations: 

E28F200BX-T60 
E28F200BX-B60 
E28F200BX-T80 
E28F200BX-B80 
E28F200BX-T 1 20 
E28F200BX-B1 20 


PA28F200BX-T60 
PA28F200BX-B60 
PA28F200BX-T80 
PA28F200BX-B80 
PA28F200BX-T 1 20 
PA28F200BX-B1 20 


TE28F200BX-T80 

TE28F200BX-B80 


TB28F200BX-T80 

TB28F200BX-B80 


f 1 l t j 1 — 

OPERATING TEMPERATURE PACKAGE AC £|!; SS ^ 

T = EXTENDED TEMP E = STANDARD 40 LEAD TSOP ns 

BLANK = COMMERCIAL TEMP 


290448-23 


Valid Combinations: 

E28F002BX-T60 

E28F002BX-B60 

E28F002BX-T80 TE28F002BX-T80 

E28F002BX-B80 TE28F002BX-B80 

E28F002BX-T 1 20 
E28F002BX-B1 20 



ADDITIONAL INFORMATION 


Order 

Number 

Document 

292130 

AB-57 “Boot Block Architecture for Safe Firmware Updates” 

292154 

AB-60 “2/4/8-Mbit SmartVoltage Boot Block Flash Memory Family” 

292098 

AP-363 “Extended Flash BIOS Concepts for Portable Computers” 

292148 

AP-604 “Using Intel’s Boot Block Flash Memory Parameter Blocks to Replace EEPROM” 

290449 

28F002/ 200BL-T/B 2-Mbit Low Power Boot Block Flash Memory Datasheet 

290450 

28F004/400BL-T/B 4-Mbit Low Power Boot Block Flash Memory Datasheet 

290451 

28F004/ 400BX-T / B 4-Mbit Boot Block Flash Memory Datasheet 

290531 

2-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 

290530 

4-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 

290539 

8-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 
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REVISION HISTORY 


Number 

Description 

-002 

Removed -70 speed bin 

Integrated -70 characteristics into -60 speed bin 
Added Extended Temperature characteristics 
Modified BYTE# Timing Diagram 

Improved tpnQv> R p# High to Output Delay and tpnEL* R p# High Recovery to CE# going low 
specifications 

-003 

PWD changed to RP# for JEDEC standardization compatibility. 

Combined Vcc Read current for 28F200BX Word-wide mode and Byte-wide mode, and 
28F002BX Byte-wide mode in DC Characteristics tables. 

Change Ipps current spec from ± 1 0 /liA to ± 1 5 juA in DC Characteristics tables. 
Improved Iccr and Iccw in DC Characteristics: Extended Temperature Operation table. 
Improved tAVAV. Uvqv. tELQV. ^glov* tEHQZ. tGHQZ. tFHQV and tpi_Qz specifications for 
Extended Temperature Operations AC Characteristics— Read and Write Operations. 

-004 

Added specifications for 120 ns access time product version; 28F200BX-120 and 
28F002BX-120. 

Included permanent change on write timing parameters for -80 ns product versions. Write 
pulse width (twp and tcp) increases from 50 ns to 60 ns. Write pulse width high (twPH and 
tcpH) decreases from 30 ns to 20 ns. Total write cycle time (twc) remains unchanged. 
Added Iccr fast condition note for typical frequency value in DC characteristics table. 
Added Iqh CMOS specification. 

Added 28F400BX interface to lntel386TMEX Embedded Processor block diagram. 

Added description of how to upgrade to SmartVoltage Boot Block products. 
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28F200BL-T/B, 28F002BL-T/B 
2-MBIT (128K x 16, 256K x 8) LOW POWER BOOT BLOCK 
FLASH MEMORY FAMILY 


■ Low Voltage Operation for Very Low 
Power Portable Applications 

— V C c = 3.0V-3.6V 

■ Expanded Temperature Range 
20°C to +70°C 

■ x8/x16 Input/Output Architecture 

— 28F200BL-T, 28F200BL-B 

— For High Performance and High 
Integration 16-bit and 32-bit CPUs 

■ x8-only Input/Output Architecture 

— 28F002BL-T, 28F002BL-B 

— ■ For Space Constrained 8-bit 
Applications 

■ Upgradeable to Intel’s SmartVoltage 
Products 

■ Optimized High Density Blocked 
Architecture 

— One 16-KB Protected Boot Block 
— Two 8-KB Parameter Blocks 
— One 96-KB Main Block 
— One 128-KB Main Block 
— Top or Bottom Boot Locations 

m Extended Cycling Capability 
— 10,000 Block Erase Cycles 

■ Automated Word/Byte Write and Block 
Erase 

— Command User Interface 
— Status Registers 
— Erase Suspend Capability 


■ SRAM-Compatible Write Interface 

H Automatic Power Savings Feature 

— 0.8 mA Typical Iqc Active Current in 
Static Operation 

■ Very High-Performance Read 

— 150 ns Maximum Access Time 

— 65 ns Maximum Output Enable Time 

■ Low Power Consumption 

— 15 mA Typical Active Read Current 

m Reset/Deep Power-Down Input 

— 0.2 juA Ice Typical 

— Acts as Reset for Boot Operations 

m Write Protection for Boot Block 

m Hardware Data Protection Feature 
— Erase/Write Lockout during Power 
Transitions 

m Industry Standard Surface Mount 
Packaging 

— 28F200BL: JEDEC ROM Compatible 

44-Lead PSOP 
56-Lead TSOP 

— 28F002BL: 40-Lead TSOP 

a 12V Word/Byte Write and Block Erase 
— Vpp = 12V ±5% Standard 

m ETOX III Flash Technology 

— 3.3V Read 

m. Independent Software Vendor Support 


November 1994 

Order Number: 290449-004 
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Intel’s 2-Mbit Low Power Flash Memory Family is an extension of the Boot Block Architecture which includes 
block-selective erasure, automated write and erase operations and standard microprocessor interface. The 
2-Mbit Flash Memory Family enhances the Boot Block Architecture by adding more density and blocks, 
x8/x16 input/output control, very low power, very high speed, an industry standard ROM compatible pinout 
and surface mount packaging. The 2-Mbit Low Power Flash Family opens a new capability for 3V battery-oper- 
ated portable systems and allows for an easy upgrade to Intel’s 4-Mbit Low Power Boot Block Flash Memory 
Family. 

The Intel 28F200BL-T/B are 16-bit wide flash memory offerings. These high density flash memories provide 
user selectable bus operation for either 8-bit or 16-bit applications. The 28F200BL-T and 28F200BL-B are 
2,097,152-bit non-volatile memories organized as either 262,144 bytes or 131,072 words of information. They 
are offered in 44-Lead plastic SOP and 56-Lead TSOP packages. The x8/x1 6 pinout conforms to the industry 
standard ROM/EPROM pinout. 

The Intel 28F002BL-T/B are 8-bit wide flash memories with 2,097,152 bits organized as 262,144 bytes of 
information. They are offered in a 40-Lead TSOP package, which is ideal for space-constrained portable 
systems. 

These devices use an integrated Command User Interface (CUI) and Write State Machine (WSM) for simplified 
word/byte write and block erasure. The 28F200BL-T/28F002BL-T provide block locations compatible with 
Intel’s low voltage MCS-186 family, i 386 TM, j 486 TM microprocessors. The 28F200BL-B/28F002BL-B provide 
compatibility with Intel’s 80960KX and 80960SX families as well as other low voltage embedded microproces- 
sors. 

The boot block includes a data protection feature to protect the boot code in critical applications. With a 
maximum access time of 1 50 ns, these 2-Mbit flash devices are very high performance low power memories 
which interface to a wide range of low power microprocessors and microcontrollers. A deep power-down mode 
lowers the total V<x power consumption to 0.66 jmW. This is critical in handheld battery powered systems such 
as Handy Phones. For very high speed applications using a 5V supply, refer to the Intel 28F200BX-T/B, 
28F002BX-T/B 2-Mbit Boot Block Flash Memory Family datasheet. 

Manufactured on Intel’s 0.8 micron ETOX III process, the 2-Mbit low power flash memory family provides world 
class quality, reliability and cost-effectiveness at the 2-Mbit density level. 
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1.0 PRODUCT FAMILY OVERVIEW 

Throughout this datasheet 28F200BL refers to both 
the 28F200BL-T and 28F200BL-B devices and 
28F002BL refers to both the 28F002BL-T and 
28F002BL-B devices. The 2-Mbit flash family refers 
to both the 28F200BL and 28F002BL products. This 
datasheet comprises the specifications for four sep- 
arate products in the 2-Mbit flash memory family. 
Section 1 provides an overview of the 2-Mbit flash 
memory family including applications, pinouts and 
pin descriptions. Sections 2 and 3 describe in detail 
the specific memory organizations for the 28F200BL 
and 28F002BL products respectively. Section 4 
combines a description of the family’s principles of 
operations. Finally, section 5 describes the family’s 
operating specifications. 


PRODUCT FAMILY 


x8/x16 Products 

x8-Only Products 

28F200BL-T 

28F200BL-B 

28F002BL-T 

28F002BL-B 


1.1 Designing for Upgrade to 
SmartVoltage Products 

Today’s high volume boot block products are up- 
gradable to Intel’s SmartVoltage boot block prod- 
ucts that provide program and erase operation at 5V 
or 12V Vpp and read operation at 3V or 5V Vcc- 
Intel’s SmartVoltage boot block products provide the 
following enhancements to the boot block products 
described in this data sheet: 

1. DU pin is replaced by WP# to provide a means 
to lock and unlock the boot block with logic sig- 
nals. 

2. 5V Program/ Erase operation uses proven pro- 
gram and erase techniques with 5V +10% ap- 
plied to Vpp. 

3. Enhanced circuits optimize performance at 3.3V 
Vcc- 

Refer to the 2, 4 or 8 Mbit SmartVoltage Boot Block 
Flash Memory Data Sheets for complete specifica- 
tions. 

When you design with 1 2 V Vpp boot block products 
you should provide the capability in your board de- 
sign to upgrade to SmartVoltage products. 


Follow these guidelines to ensure compatibility: 

1. Connect DU (WP# on SmartVoltage products) to 
a control signal or to Vcc or GND. 

2. If adding a switch on Vpp for write protection, 
switch to GND for complete write protection. 

3. Allow for connecting 5V to Vpp and disconnect 
12V from line Vpp line, if desired. 


1.2 Main Features 

The 28F200BL/28F002BL low power boot block 
flash memory family is a very low power and very 
high performance 2-Mbit (2,097,152 bit) memory 
family organized as either 128 Kwords (131,072 
words) of 16 bits each or 256 Kbytes (262,144 
bytes) of 8 bits each. 

Five Separately Erasable Blocks including a Hard- 
ware-Lockable boot block (16,384 Bytes), two pa- 
rameter blocks (8,192 Bytes each) and two main 
blocks (1 block of 98,304 Bytes and 1 block of 
131 ,072 Bytes) are included on the 2-Mbit family. An 
erase operation erases one of the 5 blocks in typi- 
cally 3.4 seconds and the boot or parameter blocks 
in typically 2.0 seconds, independent of the remain- 
ing blocks. Each block can be independently erased 
and programmed 1 0,000 times. 

The Boot Block is located at either the top 
(28F200BL-T, 28F002BL-T) or the bottom 

(28F200BL-B, 28F002BL-B) of the address map in 
order to accommodate different microprocessor pro- 
tocols for boot code location. The hardware locka- 
ble boot block provides the most secure code stor- 
age. The boot block is intended to store the kernel 
code required for booting-up a system. When the 
RP# pin is between 1 1 .4V and 12.6V the boot block 
is unlocked and program and erase operations can 
be performed. When the RP# pin is at or below 4.1V 
the boot block is locked and program and erase op- 
erations to the boot block are ignored. 

The 28F200BL products are available in the 
ROM/EPROM compatible pinout and housed in the 
44-Lead PSOP (Plastic Small Outline) package and 
the 56-Lead TSOP (Thin Small Outline, 1.2 mm 
thick) package as shown in Figures 3 and 4. The 
28F002BL products are available in the 40-Lead 
TSOP (1 .2 mm thick) package as shown in Figure 5. 

The Command User Interface (CUI) serves as the 
interface between the microprocessor or microcon- 
troller and the internal operation of the 28F200BL 
and 28F002BL flash memory products. 


I 
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Program and Erase Automation allow program 
and erase operations to be executed using a two- 
write command sequence to the CUI. The internal 
Write State Machine (WSM) automatically executes 
the algorithms and timings necessary for program 
and erase operations, including verifications, there- 
by unburdening the microprocessor or microcontrol- 
ler. Writing of memory data is performed in word or 
byte increments for the 28F200BL family and in byte 
increments for the 28F002BL family typically within 

1 1 JLtS. 

The Status Register (SR) indicates the status of the 
WSM and whether the WSM successfully completed 
the desired program or erase operation. 

Maximum Access Time of 150 ns (Tacc) is 
achieved over the commercial temperature range 
(0°C to +70°C), over Vcc supply voltage range 
(3.0V to 3.6V, 4.5V to 5.5V) and 50 pF output load. 

Ipp Program current is 40 mA for x16 operation 
and 30 mA for x8 operation. Ipp Erase current is 
30 mA maximum. Vpp erase and programming 
voltage is 11.4V to 12.6V (V PP = 12V ±5%) un- 
der all operating conditions. 

Typical Ice Active Current of 15 mA is achieved 
for the xl 6 products and the x8 products. 

The 2-Mbit flash family is also designed with an Au- 
tomatic Power Savings (APS) feature to minimize 
system battery current drain and allow for extremely 
low power designs. Once the device is accessed to 
read the array data, APS mode will immediately put 
the memory in static mode of operation where Ice 
active current is typically 0.8 mA until the next read 
is initiated. 

When the CE# and RP# pins are at Vcc and the 
BYTE# pin (28F200BL-only) is at either Vcc or GND 
the CMOS Standby mode is enabled where Ice is 
typically 40 juA. 

A Deep Power-down Mode is enabled when the 
RP# pin is at ground minimizing power consumption 
and providing write protection during power-up con- 
ditions. Ice current during deep power-down mode 
is 0.20 /xA typical. An initial maximum access time 
or Reset Time of 600 ns is required from RP# 
switching until outputs are valid. Equivalently, the 
device has a maximum wake-up time of 1 juts until 
writes to the Command User Interface are recog- 
nized. When RP# is at ground the WSM is reset, the 
Status Register is cleared and the entire device is 
protected from being written to. This feature pre- 
vents data corruption and protects the code stored 
in the device during system reset. The system Reset 
pin can be tied to RP# to reset the memory to nor- 


mal read mode upon activation of the Reset pin. 
When the CPU enters reset mode, it expects to read 
the contents of a memory location. Furthermore, 
with on-chip program/erase automation in the 
2-Mbit family and the RP# functionality for data pro- 
tection, after the CPU is reset and even if a program 
or erase command is issued, the device will not rec- 
ognize any operation until RP# returns to its normal 
state. 

For the 28F200BL, Byte-wide or Word-wide In- 
put/Output Control is possible by controlling the 
BYTE# pin. When the BYTE# pin is at a logic low 
the device is in the byte-wide mode (x8) and data is 
read and written through DQ[0:7]. During the byte- 
wide mode, DQ[8:14] are tri-stated and DQ-| 5 /A_i 
becomes the lowest order address pin. When the 
BYTE# pin is at a logic high the device is in the 
word-wide mode (xl 6) and data is read and written 
through DQ[0:15]. 


1.3 Applications 

The 2-Mbit low power boot block flash memory fami- 
ly combines high density, 3V operation, high per- 
formance, cost-effective flash memories with block- 
ing and hardware protection capabilities. Its flexibility 
and versatility will reduce costs throughout the prod- 
uct life cycle. Flash memory is ideal for Just-In-Time 
production flow, reducing system inventory and 
costs, and eliminating component handling during 
the production phase. During the product life cycle, 
when code updates or feature enhancements be- 
come necessary, flash memory will reduce the up- 
date costs by allowing either a user-performed code 
change via floppy disk or a remote code change via 
a serial link. The 2-Mbit boot block flash memory 
family provides full function, blocked flash memories 
suitable for a wide range of applications. These ap- 
plications include Extended PC BIOS, Handy Digi- 
tal Cellular Phone program and data storage and 
various other portable embedded applications where 
both program and data storage are required. 

Reprogrammable systems such as Notebook and 
Palmtop computers, are ideal applications for the 
2-Mbit low power flash products. Portable and han- 
dheld personal computer applications are becoming 
more complex with the addition of power manage- 
ment software to take advantage of the latest micro- 
processor technology, the availability of ROM-based 
application software, pen tablet code for electronic 
handwriting, and diagnostic code. Figure 1 shows an 
example of a 28F200BL-T application. 

This increase in software sophistication augments 
the probability that a code update will be required 
after the PC is shipped. The 2-Mbit low power flash 
memory products provide an inexpensive update so- 
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lution for the notebook and handheld personal com- 
puters while extending their product lifetime. Fur- 
thermore, the 2-Mbit flash memory products’ deep 
power-down mode provides added flexibility for 
these battery-operated portable designs which re- 
quire operation at extremely low power levels. 

The 2-Mbit low power flash products also provide 
excellent design solutions for Handy Digital Cellular 
Phone applications requiring high density storage, 
high performance capabilities coupled with low volt- 
age operation, and a small form factor package (x8- 
only bus). The 2-Mbit’s blocking scheme allows for 
an easy segmentation of the embedded code with: 
16 Kbytes of Hardware-Protected Boot code, 2 Main 


Blocks of program code and 2 Parameter Blocks of 
8 Kbytes each for frequently updatable data storage 
and diagnostic messages (e.g., phone numbers, au- 
thorization codes). Figure 2 is an example of such an 
application with the 28F002BL-T. 

These are a few actual examples of the wide range 
of applications for the 2-Mbit Low Power Boot Block 
flash memory family which enables system design- 
ers to achieve the best possible product design. 
Only your imagination limits the applicability of such 
a versatile low power product family. 



Figure 1. 28F200BL-T Interface to Intel 386 ™ EX Embedded Processor 



Figure 2. 28F002BL-T Interface to INTEL 80L188EB, Low Voltage 8-Bit Embedded Microprocessor 
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1.4 Pinouts 

The 28F200BL 44-Lead PSOP pinout follows the in- 
dustry standard ROM/EPROM pinput as shown in 
Figure 3 with an upgrade to the 28F400BL 
(4-Mbit low power flash family). Furthermore, 
the 28F200BL 56-Lead TSOP pinout shown in 


intel. 

Figure 4 provides density upgrades to the 28F400BL 
and to future higher density boot block memories. 

The 28F002BL 40-Lead TSOP pinout shown in Fig- 
ure 5 is 100% compatible and has a density up- 
grade to the 28F004BL 4-Mbit Low Power Boot 
Block flash memory. 



Figure 3. PSOP Lead Configuration for x8/x16 28F200BL 
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Figure 5. TSOP Lead Configuration for x8 28F002BL 
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1.5 Pin Descriptions for x8/x1 6 28F200BL 


Symbol 

Type 

Name and Function 


H 

ADDRESS INPUTS for memory addresses. Addresses are internally latched 
during a write cycle. 

Ag 

1 

ADDRESS INPUT: When Ag is at 12V the signature mode is accessed. During this 
mode Ao decodes between the manufacturer and device ID’S. When BYTE# is at 
a logic low only the lower byte of the signatures are read. DQ15/A--1 is a don’t 
care in the signature mode when BYTE# is low. 

DQ0-DQ7 

I/O 

DATA INPUTS/OUTPUTS: Inputs array data on the second CE# and WE# cycle 
during a program command. Inputs commands to the command user interface 
when CE# and WE# are active. Data is internally latched during the write and 
program cycles. Outputs array, Intelligent Identifier and Status Register data. The 
data pins float to tri-state when the chip is deselected or the outputs are disabled. 

DQ8-DQ15 

I/O 

DATA INPUT/OUTPUTS: Inputs array data on the second CE# and WE# cycle 
during a program command. Data is internally latched during the write and program 
cycles. Outputs array data. The data pins float to tri-state when the chip is 
deselected or the outputs are disabled as in the byte-wide mode (BYTE# = “0”). 
In the byte-wide mode DQ15/A-1 becomes the lowest order address for data 
output on DQ0-DQ7. 

CE# 

1 

CHIP ENABLE: Activates the device’s control logic, input buffers, decoders and 
sense amplifiers. CE# is active low; CE# high deselects the memory device and 
reduces power consumption to standby levels. If CE# and RP# are high, but not 
at a CMOS high level, the standby current will increase due to current flow through 
the CE# and RP# input stages. 

RP# 

1 

RESET/DEEP POWER-DOWN: Provides Three-State control. Puts the device in 
deep power-down mode. Locks the boot block from program/erase. 

When RP# is at logic high level and equals 4 . 1 V maximum the boot block is 
locked and cannot be programmed or erased. 

When RP# = 1 1 . 4 V minimum the boot block is unlocked and can be programmed 
or erased. 

When RP# is at a logic low level the boot block is locked, the deep power-down 
mode is enabled and the WSM is reset preventing any blocks from being 
programmed or erased, therefore providing data protection during power 
transitions. When RP# transitions from logic low to logic high, the flash memory 
enters the read-array mode. 

OE# 

1 

OUTPUT ENABLE: Gates the device’s outputs through the data buffers during a 
read cycle. OE# is active low. 

WE# 

1 

WRITE ENABLE: Controls writes to the Command Register and array blocks. 
WE# is active low. Addresses and data are latched on the rising edge of the WE# 
pulse. 
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1.5 Pin Descriptions for x8/x16 28F200BL (Continued) 


Symbol 

Type 

Name and Function 

BYTE# 

1 

BYTE# ENABLE: Controls whether the device operates in the byte-wide mode (x8) or 
the word-wide mode (x16). BYTE# = “0” enables the byte-wide mode, where data is 
read and programmed on DQ0-DQ7 and DQ-|5 /A_i becomes the lowest order 
address that decodes between the upper and lower byte. DQ8-DQ14 are tri-stated 
during the byte-wide mode. BYTE# = “1” enables the word-wide mode where data is 
read and programmed on DQ0--DQ-15. 

Vpp 


PROGRAM/ERASE POWER SUPPLY: For erasing memory array blocks or 
programming data in each block. 

Note: Vpp < Vpplmax memory contents cannot be altered. 

E91 


DEVICE POWER SUPPLY (3.3V ±0.3V, 5V ± 10%) 

GND 


GROUND: For all internal circuitry. 

NC 


NO CONNECT: Pin may be driven or left floating. 

DU 


DON’T USE PIN: Pin should not be connected to anything. 
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1.6 Pin Descripti 

ons for x8 28F002BL 

Symbol 

Type 

Name and Function 

A0-A17 

1 

ADDRESS INPUTS for memory addresses. Addresses are internally latched during 
a write cycle. 

Ag 

1 

ADDRESS INPUT: When Ag is at 1 2V the signature mode is accessed. During this 
mode Ag decodes between the manufacturer and device ID’s. 

DQ0-DQ7 

I/O 

DATA INPUTS/OUTPUTS: Inputs array data on the second CE# and WE# cycle 
during a program command. Inputs commands to the command user interface 
when CE# and WE# are active. Data is internally latched during the write and 
program cycles. Outputs array Intelligent Identifier and status register data. The 
data pins float to tri-state when the chip is deselected or the outputs are disabled. 

m 

■ 

CHIP ENABLE: Activates the device’s control logic, input buffers, decoders and 
sense amplifiers. CE# is active low; CE# high deselects the memory device and 
reduces power consumption to standby levels. 

RP# 

1 

RESET/DEEP POWER-DOWN: Provides Three-State control. Puts the device in 
deep power-down mode. Locks the Boot Block from program/erase. 

When RP# is at logic high level and equals 4.1V maximum the Boot Block is locked 
and cannot be programmed or erased. 

When RP# = 1 1 .4V minimum the Boot Block is unlocked and can be programmed 
or erased. 

When RP# is at a logic low level the Boot Block is locked, the deep power-down 
mode is enabled and the WSM is reset preventing any blocks from being 
programmed or erased, therefore providing data protection during power 
transitions. When RP# transitions from logic low to logic high, the flash memory 
enters the read-array mode. 

OE# 

■ 

OUTPUT ENABLE: Gates the device’s outputs through the data buffers during a 
read cycle. OE# is active low. 

WE# 

H 

WRITE ENABLE: Controls writes to the Command Register and array blocks. WE# 
is active low. Addresses and data are latched on the rising edge of the WE# pulse. 

Vpp 


PROGRAM/ERASE POWER SUPPLY: For erasing memory array blocks or 
programming data in each block. 

Note: Vpp < Vpplmax memory contents cannot be altered. 

Vcc 


DEVICE POWER SUPPLY (3.3V ± 0.3V, 5V ± 10%) 

GND 


GROUND: For all internal circuitry 

NC 


NO CONNECT: Pin may be driven or left floating 

DU 


DON’T USE PIN: Pin should not be connected to anything 
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Figure 6. 28F200BL Word/Byte-Wide Block Diagram 
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2.1 28F200BL Memory Organization 

2.1.1 BLOCKING 

The 28F200BL uses a blocked array architecture to 
provide independent erasure of memory blocks. A 
block is erased independently of other blocks in the 
array when an address is given within the block ad- 
dress range and the Erase Setup and Erase Confirm 
commands are written to the CUI. The 28F200BL is 
a random read/write memory, only erasure is per- 
formed by block. 

2.1. 1.1 Boot Block Operation and Data 
Protection 

The 16-Kbyte boot block provides a lock feature for 
secure code storage. The intent of the boot block is 
to provide a secure storage area for the kernel code 
that is required to boot a system in the event of pow- 
er failure or other disruption during code update. 
This lock feature ensures absolute data integrity by 
preventing the boot block from being written or 
erased when RP# is not at 12V. The boot block can 
be erased and written when RP# is held at 12V for 
the duration of the erase or program operation. This 
allows customers to change the boot code when 
necessary while providing security when needed. 
See the Block Memory Map section for address lo- 
cations of the boot block for the 28F200BL-T and 
28F200BL-B. 


2.1. 1.2 Parameter Block Operation 

The 28F200BL has 2 parameter blocks (8 Kbytes 
each). The parameter blocks are intended to pro- 
vide storage for frequently updated system parame- 
ters and configuration or diagnostic information. The 
parameter blocks can also be used to store addition- 
al boot or main code. The parameter blocks howev- 
er, do not have the hardware write protection feature 
that the boot block has. The parameter blocks pro- 
vide for more efficient memory utilization when deal- 
ing with parameter changes versus regularly blocked 
devices. See the Block Memory Map section for ad- 
dress locations of the parameter blocks for the 
28F200BL-T and 28F200BL-B. 


2. 1.1. 3 Main Block Operation 

Two main blocks of memory exist on the 28F200BL 
(1 x 128-Kbyte block and 1 x 96-Kbyte blocks). See 
the following section on Block Memory Map for the 
address location of these blocks for the 28F200BL-T 
and 28F200BL-B products. 


2.1.2 BLOCK MEMORY MAP 

Two versions of the 28F200BL product exist to sup- 
port two different memory maps of the array blocks 
in order to accommodate different micropro- cessor 
protocols for boot code location. The 28F200BL-T 
memory map is inverted from the 28F200BL-B mem- 
ory map. 

2.1.2. 1 28F200BL-B Memory Map 

The 28F200BL-B device has the 16-Kbyte boot 
block located from 00000H to 01FFFH to accom- 
modate those microprocessors that boot from the 
bottom of the address map at 00000H. In the 
28F200BL-B the first 8- Kbyte parameter block re- 
sides in memory space from 02000H to 02FFFH. 
The second 8-Kbyte parameter block resides in 
memory space from 03000H to 03FFFH. The 
96-Kbyte main block resides in memory space from 
04000H to OFFFFH. The 128-Kbyte main block re- 
sides in memory space from 10000H to 1FFFFH 
(word locations). See Figure 7. 


(Word Addresses) 







128-Kbyte MAIN BLOCK 


10000H 



OFFFFH 

96-Kbyte MAIN BLOCK 


04000H 



03FFFH 

03000H 

8-Kbyte PARAMETER BLOCK 


02FFFH 

8-Kbyte PARAMETER BLOCK 


02000H 


01FFFH 

00000H 

16-Kbyte BOOT BLOCK 





Figure 7. 28F200BL-B Memory Map 
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2.1. 2.2 28F200BL-T Memory Map 

The 28F200BL-T device has the 16-Kbyte boot 
block located from 1 E000H to 1 FFFFH to accommo- 
date those microprocessors that boot from the top 
of the address map. In the 28F200BL-T the first 
8-Kbyte parameter block resides in memory space 
from 1D000H to 1DFFFH. The second 8-Kbyte pa- 
rameter block resides in memory space from 
1C000H to 1CFFFH. The 96-Kbyte main block re- 
sides in memory space from 10000H to 1BFFFH. 
The 128-Kbyte main block resides in memory space 
from 00000H to OFFFFH as shown below in Figure 
8 . 


(Word Addresses) 
1 FFFFH 

1E000H 

1DFFFH 

1D000H 

1CFFFH 

1C000H 

1BFFFH 


10000H 

OFFFFH 


00000H 


Figure 8. 28F200BL-T Memory Map 


16-Kbyte BOOT BLOCK 


8-Kbyte PARAMETER BLOCK 


8-Kbyte PARAMETER BLOCK 


96-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 
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Figure 9. 28F002BL Byte-Wide Block Diagram 
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3.0 28F002BL PRODUCTS DESCRIPTION 
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3.1 28F002BL Memory Organization 

3.1.1 BLOCKING 

The 28F002BL uses a blocked array architecture to 
provide independent erasure of memory blocks. A 
block is erased independently of other blocks in the 
array when an address is given within the block ad- 
dress range and the Erase Setup and Erase Confirm 
commands are written to the CUI. The 28F002BL is 
a random read/write memory, only erasure is per- 
formed by block. 

3.1. 1.1 Boot Block Operation and Data 
Protection 

The 16-Kbyte boot block provides a lock feature for 
secure code storage. The intent of the boot block is 
to provide a secure storage area for the kernel code 
that is required to boot a system in the event of pow- 
er failure or other disruption during code update. 
This lock feature ensures absolute data integrity by 
preventing the boot block from being programmed 
or erased when RP# is not at 12V. The boot block 
can be erased and programmed when RP# is held 
at 12V for the duration of the erase or program oper- 
ation. This allows customers to change the boot 
code when necessary while still providing security 
when needed. See the Block Memory Map section 
for address locations of the boot block for the 
28F002BL-T and 28F002BL-B. 


3. 1.1. 2 Parameter Block Operation 

The 28F002BL has 2 parameter blocks (8 Kbytes 
each). The parameter blocks are intended to pro- 
vide storage for frequently updated system parame- 
ters and configuration or diagnostic information. The 
parameter blocks can also be used to store addition- 
al boot or main code. The parameter blocks howev- 
er, do not have the hardware write protection feature 
that the boot block has. Parameter blocks provide 
for more efficient memory utilization when dealing 
with small parameter changes versus regularly 
blocked devices. See the Block Memory Map sec- 
tion for address locations of the parameter blocks 
for the 28F002BL-T and 28F002BL-B. 


3. 1.1. 3 Main Block Operation 

Two main blocks of memory exist on the 28F002BL 
(1 x 128-Kbyte block and 1 x 96-Kbyte block). 


See the following section on Block Memory Map for 
the address location of these blocks for the 
28F002BL-T and 28F002BL-B. 


3.1.2 BLOCK MEMORY MAP 

Two versions of the 28F002BL product exist to sup- 
port two different memory maps of the array blocks 
in order to accommodate different microprocessor 
protocols for boot code location. The 28F002BL-T 
memory map is inverted from the 28F002BL-B mem- 
ory map. 

3. 1.2.1 28F002BL-B Memory Map 

The 28F002BL-B device has the 16-Kbyte boot 
block located from 00000H to 03FFFH to accommo- 
date those microprocessors that boot from the bot- 
tom of the address map at 00000H. In the 
28F002BL-B the first 8-Kbyte parameter block re- 
sides in memory from 04000H to 05FFFH. The sec- 
ond 8-Kbyte parameter block resides in memory 
space from 06000H to 07FFFH. The 96-Kbyte main 
block resides in memory space from 08000H to 
1 FFFFH. The 128-Kbyte main block resides in mem- 
ory space from 20000H to 3FFFFH. See Figure 10. 


3FFFFH 



128-Kbyte MAIN BLOCK 



20000H 



1 FFFFH 

96-Kbyte MAIN BLOCK 


08000H 



07FFFH 

8-Kbyte PARAMETER BLOCK 


06000H 


05FFFH 

8-Kbyte PARAMETER BLOCK 


04000H 


03FFFH 

OOOOOH 

16-Kbyte BOOT BLOCK 





Figure 10. 28F002BL-B Memory Map 
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3.1.2.2 28F002BL-T Memory Map 

The 28F002BL-T device has the 16-Kbyte boot 
block located trom 3C000H to 3FFFFH to accom- 
modate those microprocessors that boot from the 
top of the address map. In the 28F002BL-T the first 
8-Kbyte parameter block resides in memory space 
from 3A000H to 3BFFFH. The second 8-Kbyte pa- 
rameter block resides in memory space from 
38000H to 39FFFH. The 96-Kbyte main block re- 
sides in memory space from 20000H to 37FFFH. 
The 128-Kbyte main block resides in memory space 
from 00000H to 1FFFFH. 


3FFFFH 



16-Kbyte BOOT BLOCK 



3C000H 



3BFFFH 

8-Kbyte PARAMETER BLOCK 


3A000H 


39FFFH 

8-Kbyte PARAMETER BLOCK 


38000H 


37FFFH 

96-Kbyte MAIN BLOCK 


20000H 



1FFFFH 

128-Kbyte MAIN BLOCK 


00000H 







Figure 11. 28F002BL-T Memory Map 


4.0 PRODUCT FAMILY PRINCIPLES 
OF OPERATION 

Flash memory augments EPROM functionality with 
in-circuit electrical write and erase. The 2-Mbit flash 
family utilizes a Command User Interface (CUI) and 
internally generated and timed algorithms to simplify 
write and erase operations. 


intel® 

The CUI allows for fixed power supplies during era- 
sure and programming, and maximum EPROM com- 
patibility. 

In the absence of high voltage on the Vpp pin, the 
2-Mbit flash family will only successfully execute the 
following commands: Read Array, Read Status Reg- 
ister, Clear Status Register and Intelligent Identifier 
mode. The device provides standard EPROM read, 
standby and output disable operations. Manufactur- 
er Identification and Device Identification data can 
be accessed through the CUI or through the stan- 
dard EPROM A9 high voltage access (Vid) (for 
PROM programmer equipment). 

The same EPROM read, standby and output disable 
functions are available when high voltage is applied 
to the Vpp pin. In addition, high voltage on Vpp al- 
lows write and erase of the device. All functions as- 
sociated with altering memory contents: write and 
erase, Intelligent Identifier read and Read Status are 
accessed via the CUI. 

The purpose of the Write State Machine (WSM) is to 
completely automate the write and erasure of the 
device. The WSM will begin operation upon receipt 
of a signal from the CUI and will report status back 
through a Status Register. The CUI will handle the 
WE# interface to the data and address latches, as 
well as system software requests for status while the 
WSM is in operation. 


4.1 28F200BL Bus Operations 

Flash memory reads, erases and writes in-system 
via the local CPU. All bus cycles to or from the flash 
memory conform to standard microprocessor bus 
cycles. 
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Table 1. Bus Operations for WORD-WIDE Mode (BYTE# = V !H ) 


Mode 

Notes 

RP# 

CE# 

OE# 

WE# 

A 9 

Ao 

Vpp 

DQq-15 

Read 

1,2,3 

V|H 

V|L 

V|L 

V| H 

X 

X 

X 

Dout 

Output Disable 


V|H 

V|L 

V|H 

V|H 

X 

X 

X 

High Z 

Standby 


V|H 

V| H 

X 

X 

X 

X 

X 

High Z 

Deep Power-Down 

9 

V|L 

X 

X 

X 

X 

X 

X 

High Z 

Intelligent Identifier (Mfr) 

4 

V|H 

V|L 

V|L 

VlH 

V ID 

V|L 

X 

0089H 

Intelligent Identifier (Device) 

4, 5, 
10 

V|H 

V|L 

V|L 

V|H 

V|D 

VlH 

X 

2274H 

2275H 

Write 

6, 7,8 

V| H 

V|L 

V|H 

V|L 

X 

X 

X 

Din 


Table 2. Bus Operations for BYTE-WIDE Mode (BYTE# = V, L ) 


Mode 

Notes 

RP# 

CE# 

OE# 

WE# 

a 9 

Ao 

A-1 

Vpp 

DQ 0-7 

T* 

1 

00 

0 

0 

Read 

1,2,3 

VlH 

V|L 

V|L 

V| H 

X 

X 

X 

X 

DoUT 

High Z 

Output Disable 


VlH 

V|L 

VlH 

VlH 

X 

X 

X 

X 

High Z 

High Z 

Standby 


VlH 

V|H 

X 

X 

X 

X 

X 

X 

High Z 

High Z 

Deep Power-Down 

9 

V|L 

X 

X 

X 

X 

X 

X 

X 

High Z 

High Z 

Intelligent Identifier 
(Mfr) 

4 

V|H 

V|L 

V|L 

VlH 

VlD 

VlL 

X 

X 

89H 

High Z 

Intelligent Identifier 
(Device) 

4,5 

V|H 

V|L 

V|L 

VlH 

V|D 

V|H 

X 

X 

74H 

75H 

High Z 

Write 

6, 7,8 

VlH 

V|L 

VlH 

V|L 

X 

X 

X 

X 

Din 

High Z 


NOTES: 

1 . Refer to DC Characteristics. 

2. X can be Vjl or Vm for control pins and addresses, Vppi_ or Vppn for Vpp. 

3. See DC characteristics for Vppi_, Vppn, Vhh, V|p voltages. 

4. Manufacturer and Device codes may also be accessed via a CPU write sequence. A-|-Ai6 = V|L- 

5. Device ID = 2274H for 28F200BL-T and 2275H for 28F200BL-B. 

6. Refer to Table 4 for valid Din during a write operation. 

7. Command writes for Block Erase or Word/Byte Write are only executed when Vpp = Vppn- 

8. To write or erase the boot block, hold RP# at Vhh- 

9. RP# must be at GND ±0.2V to meet the 1.2 juA maximum deep power-down current. 

10. The device ID codes are identical to those of the 28F2100BX 5V versions and SmartVoltage equivalents. 
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4.2 28F002BL Bus Operations 


Table 3. Bus Operations 


Mode 

Notes 

RP# 

CE# 

OE# 

WE# 

Ag 

A 0 

Vpp 

DQ 0-7 

Read 

1,2,3 



V|L 

Vih 

X 


■9 

DoUT 

Output Disable 


Vih 

V|L 

Vih 

Vih 

X 

D 

mm 

High Z 

Standby 


w 


X 

X 

X 

E9 

mm 

High Z 

Deep Power-Down 

9 

■ 

X 

mm 

X 

X 

D 

mm 

High Z 

Intelligent Identifier (Mfr) 

4 

V|H 



V| H 



X 

89H 

Intelligent Identifier (Device) 

4,5 

V| H 



V|H 

V|D 

V| H 

H 


Write 



V|L 

V|H 

V|L 


EB 


Din 


NOTES: 

1 . Refer to DC Characteristics. 

2. X can be Vil or Vih for control pins and addresses, Vppi_ or Vppn for Vpp. 

3. See DC characteristics for Vpp(_, Vppn, Vhh. Vid voltages. 

4. Manufacturer and Device codes may also be accessed via a CUI write sequence. A1-A17 = V|[_. 

5. Device ID = 7CH for 28F002BL-T and 7DH for 28F002BL-B. 

6. Refer to Table 4 for valid Din during a write operation. 

7. Command writes for Block erase or byte program are only executed when Vpp = Vppn- 

8. Program or erase the Boot block by holding RP# at Vhh- 

9. RP# must be at GND ±0.2V to meet the 1.2 pA maximum deep power-down current. 

10. The device ID codes are identical to those of the 28F002BX 5V versions and SmartVoltage equivalents. 

4.3 Read Operations 4 . 3 . 1.2 input control 


The 2-Mbit flash family has three user read modes; 
Array, Intelligent Identifier, and Status Register. 
Status Register read mode will be discussed in detail 
in the “Write Operations” section. 

During power-up conditions (Vcc supply ramping), it 
takes a maximum of 600 ns from Vcc at 3.0V mini- 
mum to obtain valid data on the outputs. 

4.3.1 READ ARRAY 

If the memory is not in the Read Array mode, it is 
necessary to write the appropriate read mode com- 
mand to the CUI. The 2-Mbit flash family has three 
control functions, all of which must be logically ac- 
tive, to obtain data at the outputs. Chip-Enable CE# 
is the device selection control. Power-Down RP# is 
the device power control. Output-Enable OE# is the 
DATA INPUT/OUTPUT (DQ[0:1 5] or DQ[0:7]) direc- 
tion control and when active is used to drive data 
from the selected memory on to the I/O bus. 


4.3. 1.1 Output Control 

With OE# at logic-high level (Vih), the output from 
the device is disabled and data input/output pins 
(DQ[0:15] or DQ[0:7]) are tri-stated. Data input is 
then controlled by WE#. 


With WE# at logic-high level (Vih), input to the de- 
vice is disabled. Data Input/Output pins (DQ[0:15] 
or DQ[0:7]) are controlled by OE#. 


4.3.2 INTELLIGENT IDENTIFIERS 
28F200BL Products 

The manufacturer and device codes are read via the 
CUI or by taking the Ag pin to 12V. Writing 90// to 
the CUI places the device into Intelligent Identifier 
read mode. A read of location 00000/7 outputs the 
manufacturer’s identification code, 0089H, and loca- 
tion 00001// outputs the device code; 2274H for 
28F200BL-T, 2275H for 28F200BL-B. When BYTE# 
is at a logic low only the lower byte of the above 
signatures is read and DQis/A-i is a “don’t care” 
during Intelligent Identifier mode. A read array com- 
mand must be written to the CUI to return to the 
read array mode. 
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28F002BL Products 

The manufacturer and device codes are also read 
via the CUI or by taking the Ag pin to 12V. Writing 
90 # to the CUI places the device into Intelligent 
Identifier read mode. A read of location 00000# 
outputs the manufacturer’s identification code, 89H, 
and location 00001# outputs the device code; 7CH 
for 28F002BL-T, 7DH for 28F002BL-B. 


4.4 Write Operations 

Commands are written to the CUI using standard mi- 
croprocessor write timings. The CUI serves as the 
interface between the microprocessor and the inter- 
nal chip operation. The CUI can decipher Read Ar- 
ray, Read Intelligent Identifier, Read Status Register, 
Clear Status Register, Erase and Program com- 
mands. In the event of a read command, the CUI 
simply points the read path at either the array, the 
Intelligent Identifier, or the status register depending 
on the specific read command given. For a program 
or erase cycle, the CUI informs the write state ma- 
chine that a write or erase has been requested. Dur- 
ing a program cycle, the Write State Machine will 
control the program sequences and the CUI will only 
respond to status reads. During an erase cycle, the 
CUI will respond to status reads and erase suspend. 
After the Write State Machine has completed its 
task, it will allow the CUI to respond to its full com- 
mand set. The CUI will stay in the current command 
state until the microprocessor issues another com- 
mand. 

The CUI will successfully initiate an erase or write 
operation only when Vpp is within its voltage range. 
Depending upon the application, the system design- 
er may choose to make the Vpp power supply 
switchable, available only when memory updates 
are desired. The system designer can also choose 
to “hard-wire” Vpp to 12V. The 2-Mbit flash family is 
designed to accommodate either design practice. It 
is recommended that RP# be tied to logical Reset 
for data protection during unstable CPU reset func- 
tion as described in the “Product Family Overview” 
section. 


4.4.1 BOOT BLOCK WRITE OPERATIONS 

In the case of Boot Block modifications (write and 
erase), RP# is set to Vhh = 12V typically, in addi- 
tion to Vpp at high voltage. However, if RP# is not at 
Vhh when a program or erase operation of the boot 
block is attempted, the corresponding status register 
bit (Bit 4 for Program and Bit 5 for Erase, refer to 
Table 5 for Status Register Definitions) is set to indi- 
cate the failure to complete the operation. 

4.4.2 COMMAND USER INTERFACE (CUI) 

The Command User Interface (CUI) serves as the 
interface to the microprocessor. The CUI points the 
read/write path to the appropriate circuit block as 
described in the previous section. After the WSM 
has completed its task, it will set the WSM Status bit 
to a “1”, which will also allow the CUI to respond to 
its full command set. Note that after the WSM has 
returned control to the CUI, the CUI will remain in its 
current state. 


4.4.2.1 Command Set 


Command 

Codes 

Device Mode 

00 

Invalid/Reserved 

10 

Alternate Program Setup 

20 

Erase Setup 

40 

Program Setup 

50 

Clear Status Register 

70 

Read Status Register 

90 

Intelligent Identifier 

B0 

Erase Suspend 

DO 

Erase Resume/Erase Confirm 

FF 

Read Array 


4.4.2.2 Command Function Descriptions 

Device operations are selected by writing specific 
commands into the CUI. Table 4 defines the 2-Mbit 
flash family commands. 
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Table 4. Command Definitions 


Command 

Bus 

Cycles 

Req’d 

Notes 

First Bus Cycle 

Second Bus Cycle 

8 

Operation 

Address 

Data 

Operation 

Address 

Data 

Read Array 

1 

1 


X 

FFH 




Intelligent Identifier 

3 

EXS 


X 

90H 

Read 

IA 

IID 

Read Status Register 

2 



X 

70H 


X 


Clear Status Register 

1 



X 





Erase Setup/ Erase Confirm 

2 

5 


BA 

20H 

Write 

BA 

DOH 

Word/ Byte Write 
Setup/Write 


D 


WA 

40H 

Write 

WA 

WD 

Erase Suspend/Erase Resume 

2 


11 

X 



X 

DOH 

Alternate Word/ Byte Write 
Setup/Write 

2 

2,3,7 

Write 

WA 

10H 

Write 

WA 

WD 


NOTES: 

1. Bus operations are defined in Tables 1, 2, 3. 

2. IA = Identifier Address: 00H for manufacturer code, 01 H for device code. 

3. SRD = Data read from Status Register. 

4. IID = Intelligent Identifier Data. 

Following the Intelligent Identifier Command, two read operations access manufacturer and device codes. 

5. BA = Address within the block being erased. 

6. WA = Address to be written. 

WD = Data to be written at location WA. 

7. Either 40H or 10H commands is valid. 

8. When writing commands to the device, the upper data bus [DQ8-DQ15] = X (28F200BL-only) which js either Vcc or Vss 
to avoid burning additional current. 

Invalid/Reserved 

These are unassigned commands. It is not recom- 
mended that the customer use any command other 
than the valid commands specified above. Intel re- 
serves the right to redefine these codes for future 
functions. 


Read Array (FFH) 

This single write command points the read path at 
the array. If the host CPU performs a CE#/OE# 
controlled read immediately following a two-write se- 
quence that started the WSM, then the device will 
output status register contents. If the Read Array 
command is given after Erase Setup the device is 
reset to read the array. A two Read Array command 
sequence (FFH) is required to reset to Read Array 
after Program Setup. 


Intelligent Identifier (90H) 

After this command is executed, the CUI points the 
output path to the Intelligent Identifier circuits. Only 
Intelligent Identifier values at addresses 0 and 1 can 
be read (only address AO is used in this mode, all 
other address inputs are ignored). 
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Read Status Register (70H) 

This is one of the two commands that is executable 
while the state machine is operating. After this com- 
mand is written, a read of the device will output the 
contents of the status register, regardless of the ad- 
dress presented to the device. 

The device automatically enters this mode after pro- 
gram or erase has completed. 

Clear Status Register (50H) 

The WSM can only set the Program Status and 
Erase Status bits in the status register, it can not 
clear them. Two reasons exist for operating the 
status register in this fashion. The first is a synchro- 
nization. The WSM does not know when the host 
CPU has read the status register, therefore it would 
not know when to clear the status bits. Secondly, if 
the CPU is programming a string of bytes, it may be 
more efficient to query the status register after pro- 
gramming the string. Thus, if any errors exist while 
programming the string, the status register will return 
the accumulated error status. 
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Program Setup (40H or 10H) 

This command simply sets the CUI into a state such 
that the next write will load the address and data 
registers. Either 40H or 10H can be used for Pro- 
gram Setup. Both commands are included to ac- 
commodate efforts to achieve an industry standard 
command code set. 


Program 

The second write after the program setup command, 
will latch addresses and data. Also, the CUI initiates 
the WSM to begin execution of the program algo- 
rithm. While the WSM finishes the algorithm, the de- 
vice will output Status Register contents. Note that 
the WSM cannot be suspended during program- 
ming. 


Erase Setup (20H) 

Prepares the CUI for the Erase Confirm command. 
No other action is taken. If the next command is not 
an Erase Confirm command then the CUI will set 
both the Program Status and Erase Status bits of the 
Status Register to a “ 1 ”, place the device into the 
Read Status Register state, and wait for another 
command. 


Erase Confirm (DOH) 

If the previous command was an Erase Setup com- 
mand, then the CUI will enable the WSM to erase, at 
the same time closing the address and data latches, 
and respond only to the Read Status Register and 
Erase Suspend commands. While the WSM is exe- 
cuting, the device will output Status Register data 
when OE# is toggled low. Status Register data can 
only be updated by toggling either OE# or CE# low. 


Erase Suspend (BOH) 

This command only has meaning while the WSM is 
executing an Erase operation, and therefore will only 
be responded to during an erase operation. After 
this command has been executed, the CUI will initi- 
ate the WSM to suspend Erase operations, and then 
return to responding to only Read Status Register or 
to the Erase Resume commands. Once the WSM 
has reached the Suspend state, it will set an output 
into the CUI which allows the CUI to respond to the 
Read Array, Read Status Register, and Erase Re- 
sume commands. In this mode, the CUI will not re- 
spond to any other commands. The WSM will also 


set the WSM Status bit to a “1”. The WSM will con- 
tinue to run, idling in the SUSPEND state, regardless 
of the state of all input control pins, with the exclu- 
sion of RP#. RP# low will immediately shut down 
the WSM and the remainder of the chip. 


Erase Resume (DOH) 

This command will cause the CUI to clear the Sus- 
pend state and set the WSM Status bit to a “0”, but 
only if an Erase Suspend command was previously 
issued. Erase Resume will not have any effect in all 
other conditions. 


4.4.3 STATUS REGISTER 


The 2-Mbit flash family contains a status register 
which may be read to determine when a program or 
erase operation is complete, and whether that oper- 
ation completed successfully. The status register 
may be read at any time by writing the Read Status 
command to the CUI. After writing this command, all 
subsequent Read operations output data from the 
status register until another command is written to 
the CUI. A Read Array command must be written to 
the CUI to return to the Read Array mode. 

The status register bits are output on DQ[0:7] 
whether the device is in the byte-wide (x 8 ) or word- 
wide (x16) mode for the 28F200BL. In the word-wide 
mode the upper byte, DQ[8:15] is set to 00 H during 
a Read Status command. In the byte-wide mode, 
DQ[8:14] are tri-stated and DQ- 15 /A .-1 retains the 
low order address function. 



It should be noted that the contents of the status 
register are latched on the falling edge of OE# or 
CE# whichever occurs last in the read cycle. This 
prevents possible bus errors which might occur if the 
contents of the status register change while reading 
the status register. CE# or OE# must be toggled 
with each subsequent status read, or the completion 
of a program or erase operation will not be evident. 

The Status Register is the interface between the mi- 
croprocessor and the Write State Machine (WSM). 
When the WSM is active, this register will indicate 
the status of the WSM, and will also hold the bits 
indicating whether or not the WSM was successful in 
performing the desired operation. The WSM sets 
status bits “Three” through “Seven” and clears bits 
“Six” and “Seven”, but cannot clear status bits 
“Three” through “Five”. These bits can only be 
cleared by the controlling CPU through the use of 
the Clear Status Register command. 
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4.4.3. 1 Status Register Bit Definition 


Table 5. Status Register Definitions 


WSMS 

ESS 

ES 

PS 

VPPS 

R 

R 

R 

7 

6 

5 

4 

3 

2 

1 

0 


NOTES: 


1 Write State Machine Status bit must first be checked to 

SR. 7 = WRITE STATE MACHINE STATUS determine byte/word program or block erase completion, 

1 = Ready before the Program or Erase Status bits are checked for 

0 = Busy success. 


SR.6 = ERASE SUSPEND STATUS 
1 = Erase Suspended 
0 = Erase in Progress/Completed 


When Erase Suspend is issued, WSM halts execution 
and sets both WSMS and ESS bits to “1”. ESS bit re- 
mains set to “1” until an Erase Resume command is is- 
sued. 


SR. 5 = ERASE STATUS 
1 = Error in Block Erasure 
0 = Successful Block Erase 


When this bit is set to “1”. WSM has applied the maxi- 
mum number of erase pulses to the block and is still un- 
able to successfully perform an erase verify. 


SR.4 = PROGRAM STATUS 

1 = Error in Byte/Word Program 
0 = Successful Byte/Word Program 


When this bit is set to “1”, WSM has attempted but failed 
to Program a byte or word. 


SR.3 = V PP STATUS 

1 = Vpp Low Detect; Operation Abort 
0 - Vpp OK 


The Vpp Status bit unlike an A/D converter, does not 
provide continuous indication of Vpp level. The WSM in- 
terrogates the Vpp level only after the byte write or block 
erase command sequences have been entered and in- 
forms the system if Vpp has not been switched on. The 
Vpp Status bit is not guaranteed to report accurate feed- 
back between Vpp[_ and Vppn- 


SR.2-SR.0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use and should be masked out when polling the Status Register. 


4.4.3.2 Clearing the Status Register 

Certain bits in the status register are set by the write 
state machine, and can only be reset by the system 
software. These bits can indicate various failure con- 
ditions. By allowing the system software to control 
the resetting of these bits, several operations may 
be performed (such as cumulatively programming 
several bytes or erasing multiple blocks in se- 
quence). The status register may then be read to 
determine if an error occurred during that program- 
ming or erasure series. This adds flexibility to the 
way the device may be programmed or erased. To 
clear the status register, the Clear Status Register 
command is written to the CUI. Then, any other com- 
mand may be issued to the CUI. Note again that 
before a read cycle can be initiated, a Read Array 
command must be written to the CUI to specify 
whether the read data is to come from the array, 
status register, or Intelligent Identifier. 


4.4.4 PROGRAM MODE 

Program is executed by a two-write sequence. The 
Program Setup command is written to the CUI fol- 
lowed by a second write which specifies the address 
and data to be programmed. The write state ma- 
chine will execute a sequence of internally timed 
events to: 

1 . program the desired bits of the addressed memo- 
ry word (byte), and 

2. verify that the desired bits are sufficiently pro- 
grammed. 

Programming of the memory results in specific bits 
within a byte or word being changed to a “0”. 

If the user attempts to program “1 ”s, there will be no 
change of the memory cell content and no error oc- 
curs. 
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Similar to erasure, the status register indicates 
whether programming is complete. While the pro- 
gram sequence is executing, bit 7 of the status regis- 
ter is a “0”. The status register can be polled by 
toggling either CE# or OE# to determine when the 
program sequence is complete. Only the Read 
Status Register command is valid while program- 
ming is active. 

When programming is complete, the status bits, 
which indicate whether the program operation was 
successful, should be checked. If the programming 
operation was unsuccessful, Bit 4 of the status regis- 
ter is set to a “1” to indicate a Program Failure. If 
Bit 3 is set then Vpp was not within acceptable limits, 
and the WSM will not execute the programming se- 
quence. 

The status register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after programming is completed; however, it 
must be recognized that reads from the memory, 
status register, or Intelligent Identifier cannot be ac- 
complished until the CUI is given the appropriate 
command. A Read Array command must first be giv- 
en before memory contents can be read. 

Figure 12 shows a system software flowchart for de- 
vice byte programming operation. Figure 13 shows a 
similar flowchart for device word programming oper- 
ation (28F200BL-only). 

4.4.5 ERASE MODE 

Erasure of a single block is initiated by writing the 
Erase Setup and Erase Confirm commands to the 
CUI, along with the addresses, A[1 2:1 6] for the 
28F200BL or A[12:17] for the 28F002BL, identifying 
the block to be erased. These addresses are latched 
internally wherv the Erase Confirm command is is- 
sued. Block erasure results in all bits within the block 
being set to “1”. 

The WSM will execute a sequence of internally 
timed events to: 

1 . program all bits within the block 

2. verify that all bits within the block are sufficiently 
programmed 

3. erase all bits within the biock and 

4. verify that all bits within the block are sufficiently 
erased 

While the erase sequence is executing, Bit 7 of the 
status register is a “0”. 

When the status register indicates that erasure is 
complete, the status bits, which indicate whether the 
erase operation was successful, should be checked. 


If the erasure operation was unsuccessful, Bit 5 of 
the status register is set to a “1” to indicate an 
Erase Failure. If Vpp was not within acceptable limits 
after the Erase Confirm command is issued, the 
WSM will not execute an erase sequence; instead, 
Bit 5 of the status register is set to a “1” to indicate 
an Erase Failure, and Bit 3 is set to a “1” to identify 
that Vpp supply voltage was not within acceptable 
limits. 

The status register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after erasure is completed; however, it must 
be recognized that reads from the memory array, 
status register, or Intelligent Identifier can not be ac- 
complished until the CUI is given the appropriate 
command. A Read Array command must first be giv- 
en before memory contents can be read. 

Figure 14 shows a system software flowchart for 
Block Erase operation. 

4. 4.5.1 Suspending and Resuming Erase 

Since an erase operation typically requires 2 to 5 
seconds to complete, an Erase Suspend command 
is provided. This allows erase-sequence interruption 
in order to read data from another block of the mem- 
ory. Once the erase sequence is started, writing the 
Erase Suspend command to the CUI requests that 
the Write State Machine (WSM) pause the erase se- 
quence at a predetermined point in the erase algo- 
rithm. The status register must be read to determine 
when the erase operation has been suspended. 

At this point, a Read Array command can be written 
to the CUI in order to read data from blocks other 
than that which is being suspended. The only other 
valid command at this time is the Erase Resume 
command or Read Status Register operation. 

Figure 1 5 shows a system software flowchart detail- 
ing the operation. 

During Erase Suspend mode, the chip can go into a 
pseudo-standby mode by taking CE# to Vjh and the 
active current is now a maximum of 6 mA. If the chip 
is enabled while in this mode by taking CE# to V|i_, 
the Erase Resume command can be issued to re- 
sume the erase operation. 

Upon completion of reads from any block other than 
the block being erased, the Erase Resume com- 
mand must be issued. When the Erase Resume 
command is given, the WSM will continue with the 
erase sequence and complete erasing the block. As 
with the end of erase, the status register must be 
read, cleared, and the next instruction issued in or- 
der to continue. 


28F200BL-T/B, 28F002BL-T/B 


iny 


4.4.6 EXTENDED CYCLING 

Intel has designed extended cycling capability into 
its ETOX III flash memory technology. The 2-Mbit 
low voltage flash family is designed for 10,000 pro- 


gram/erase cycles on each of the five blocks. The 
combination of low electric fields, clean oxide pro- 
cessing and minimized oxide area per memory cell 
subjected to the tunneling electric field, results in 
very high cycling capability. 
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Full Status Check Procedure 



Bus 

Operation 

Command 

Comments 

Write 

Setup 

Program 

Data = 40H 
Address = Byte to be 
programmed 

Write 

Program 

Data to be programmed 
Address = Byte to be 
programmed 

Read 


Status Register Data. 

Toggle OE# or CE# to update 
Status Register 

Standby 


Check SR.7 
1 = Ready, 0 = Busy 

Repeat for subsequent bytes. 

Full status check can be done after each byte or after a 
sequence of bytes. 

Write FFH after the last byte programming operation to 
reset the device to Read Array Mode. 


Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4 

1 = Byte Program Error 


SR. 3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 

SR.4 is only cleared by the Clear Status Register 
Command, in cases where multiple bytes are programmed 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 12. Automated Byte Programming Flowchart 
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Full Status Check Procedure 


290449-10 



Bus 

Operation 

Command 

Comments 

Write 

Setup 

Program 

Data = 40H 
Address = Word to be 
programmed 

Write 

Program 

Data to be programmed 
Address = Word to be 
programmed 

Read 


Status Register Data. 

Toggle OE# or CE# to update 
Status Register 

Standby 


Check SR.7 
1 = Ready, 0 = Busy 

Repeat for subsequent words. 

Full status check can be done after each word or after a 
sequence of words. 

Write FFH after the last word programming operation to 
reset the device to Read Array Mode. 


Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 



1 = Vpp Low Detect 

Standby 


Check SR. 4 



1 = Word Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 

SR. 4 is only cleared by the Clear Status Register 
Command, in cases where multiple words are programmed 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 13. Automated Word Programming Flowchart 
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Bus 

Operation 

Command 

Comments 

Write 

Setup 

Erase 

Data = 20H 

Address = Within block to be 
erased 

Write 

Erase 

Data = DOH 

Address = Within block to be 
erased 

Read 


Status Register Data. 

Toggle OE# or CE# to update 
Status Register 

Standby 


Check SR.7 
1 = Ready, 0 = Busy 

Repeat for subsequent blocks. 

Full status check can be done after each block or after a 
sequence of blocks. 

Write FFH after the last block erase operation to reset the 
device to Read Array Mode. 


Full Status Check Procedure 



Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4,5 

Both 1 = Command Sequence 
Error 

Standby 


Check SR.5 
1 = Block Erase Error 

SR.3 MUST be cleared, if set during an erase attempt, 
before further attempts are allowed by the Write State 
Machine. 

SR.5 is only cleared by the Clear Status Register 
Command, in cases where multiple blocks are erased 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 
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Figure 14. Automated Block Erase Flowchart 
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Bus 

Operation 

Command 

Comments 

Write 

Erase 

Suspend 

Data = BOH 

Read 


Status Register Data. 
Toggle OE# orCE# to 
update Status Register 

Standby 


Check SR.7 
1 = Ready 

Standby 


Check SR. 6 
1 = Suspended 

Write 

Read Array 

Data = FFH 

Read 


Read array data from block 
other than that being 
erased. 

Write 

Erase Resume 

Data = DOH 



290449-14 

Figure 15. Erase Suspend/Resume Flowchart 


4.5 Power Consumption 

4.5.1 ACTIVE POWER 

With CE# at a logic-low level and RP# at a logic- 
high level, the device is placed in the active mode. 
The device Iqc current is a maximum of 22 mA at 
5 MHz. 


4.5.2 AUTOMATIC POWER SAVINGS 

Automatic Power Savings (APS) is a low power fea- 
ture during active mode of operation. The 2-Mbit 
flash family of products incorporate Power Reduc- 
tion Control (PRC) circuitry which basically allows 
the device to put itself into a low current state when 
it is not being accessed. After data is read from the 


memory array, PRC logic controls the device’s pow- 
er consumption by entering the APS mode where 
typical Ice current is 0.8 mA and maximum Ice cur- 
rent is 2 mA. The device stays in this static state with 
outputs valid until a new memory location is read. 

4.5.3 STANDBY POWER 

With CE# at a logic-high level (Vm), and the CUI in 
read mode, the memory is placed in standby mode 
where the maximum Ice standby current is 120 |uA 
with CMOS input signals. The standby operation dis- 
ables much of the device’s circuitry and substantially 
reduces device power consumption. The outputs 
(DQ[0:15] or DQ[0:7]) are placed in a high-imped- 
ance state independent of the status of the OE# 
signal. When the 2-Mbit flash family is deselected 
during erase or program functions, the devices will 
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continue to perform the erase or program function 
and consume program or erase active power until 
program or erase is completed. 

4.5.4 RESET/DEEP POWER-DOWN 

The 2-Mbit flash family supports a typical Ice of 
0.2 fxA in deep power-down mode. One of the target 
markets for these devices is in portable equipment 
where the power consumption of the machine is of 
prime importance. The 2-Mbit flash family has a 
RP# pin which places the device in the deep power- 
down mode. When RP# is at a logic-low (GND 
±0.2V), all circuits are turned off and the device typ- 
ically draws 0.2 /xA of Vcc current. 

During read modes, the RP# pin going low dese- 
lects the memory and places the output drivers in a 
high impedance state. Recovery from the deep pow- 
er-down state, requires a maximum of 600 ns to ac- 
cess valid data (tpHQv)- 

During erase or program modes, RP# low will abort 
either erase or program operation. The contents of 
the memory are no longer valid as the data has been 
corrupted by the RP# function. As in the read mode 
above, all internal circuitry is turned off to achieve 
the 0.2 jxA current level. 

RP# transitions to V||_ or turning power off to the 
device will clear the status register. 

The use of RP# during system reset is important 
with automated write/erase devices. When the sys- 
tem comes out of reset, it expects to read from the 
flash memory. Automated flash memories provide 
status information when accessed during write/ 
erase modes. If a CPU reset occurs with no flash 
memory reset, proper CPU initialization would not 
occur because the flash memory would be providing 
the status information instead of array data. Intel’s 
Flash Memories allow proper CPU initialization fol- 
lowing a system reset through the use of RP# input. 
In this application, RP# is controlled by the same 
RESET# signal that resets the system CPU. 

4.6 Power-Up Operation 

The 2-Mbit flash family is designed to offer protec- 
tion against accidental block erasure or program- 
ming during power transitions. Upon power-up the 
2-Mbit flash family is indifferent as to which power 
supply, Vpp or Vcc. powers-up first. Power supply 
sequencing is not required. 

The 2-Mbit flash family ensures the CUI is reset to 
the read mode on power-up. 

In addition, on power-up the user must either drop 
CE# low or present a new address to ensure valid 
data at the outputs. 


inlel. 

A system designer must guard against spurious 
writes for Vcc voltages above V|_ko when Vpp is 
active. Since both WE# and CE# must be low for a 
command write, driving either signal to Vm will inhibit 
writes to the device. The CUI architecture provides 
an added level of protection since alteration of mem- 
ory contents can only occur after successful com- 
pletion of the two-step command sequences. Finally 
the device is disabled until RP# is brought to V|h, 
regardless of the state of its control inputs. This fea- 
ture provides yet another level of memory protec- 
tion. 

4.7 Power Supply Decoupling 

Flash memory’s power switching characteristics re- 
quire careful device decoupling methods. System 
designers are interested in 3 supply current issues: 

• Standby current levels (Ices) 

• Active current levels (Iccr) 

• Transient peaks produced by falling and rising 
edges of CE#. 

Transient current magnitudes depend on the device 
outputs’ capacitive and inductive loading. Two-line 
control and proper decoupling capacitor selection 
will suppress these transient voltage peaks. Each 
flash device should have a 0.1 jllF ceramic capacitor 
connected between each Vcc and GND, and be- 
tween its Vpp and GND. These high frequency, low- 
inherent inductance capacitors should be placed as 
close as possible to the package leads. 

4.7.1 Vpp TRACE ON PRINTED CIRCUIT 
BOARDS 

Writing to flash memories while they reside in the 
target system, requires special consideration of the 
Vpp power supply trace by the printed circuit board 
designer. The Vpp pin supplies the flash memory 
cell’s current for programming and erasing. One 
should use similar trace widths and layout consider- 
ations given to the Vcc power supply trace. Ade- 
quate Vpp supply traces and decoupling will de- 
crease spikes and overshoots. 

4.7.2 V CC , Vpp AND RP# TRANSITIONS 

The CUI latches commands as issued by system 
software and is not altered by Vpp or CE# tran- 
sitions or WSM actions. Its state upon power-up, af- 
ter exit from deep power-down mode or after Vcc 
transitions below V|_ko (Lockout voltage), is Read 
Array mode. 

After any word/byte write or block erase operation is 
complete and even after Vpp transitions down to 
Vppi_, the CUI must be reset to Read Array mode via 
the Read Array command when accesses to the 
flash memory are desired. 
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5.0 OPERATING SPECIFICATIONS 


Absolute Maximum Ratings 

Operating Temperature 

During Read -20°Cto +70°C0) 

During Block Erase and 

Word/Byte Write 0°C to 70°C 

Temperature Under Bias -200°C to + 80°C 

Storage Temperature -65°C to + 125°C 

Voltage on Any Pin 

(except Vqc, Vp P> A 9 and RP#) 

with Respect to GND -2.0 V to + 7.0V(2) 

Voltage on Pin RP# or Pin Ag 

with Respect to GND -2.0 V to 13.5V(2, 3) 

Vpp Program Voltage with Respect 
to GND during Block Erase 
and Word/Byte Write -2.0V to + 14.0V(2, 3) 

Vcc Supply Voltage 

with Respect to GND -2.0V to + 7.0V(2) 

Output Short Circuit Current 100 mA( 4 ) 

NOTES: 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 

* WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


1 . Operating temperature is for commercial product defined by this specification. 

2. Minimum DC voltage is -0.5V on input/output pins. During transitions, this level may undershoot to -2.0 V for periods 
<20 ns. Maximum DC voltage on input/output pins is Vcc + 0.5 V which, during transitions, may overshoot to Vcc + 2.0V 
for periods <20 ns. 

3. Maximum DC voltage on Vpp may overshoot to + 14.0V for periods <20 ns. Maximum DC voltage on RP# or Ag may 
overshoot to 13.5V for periods <20 ns. 

4. Output shorted for no more than one second. No more than one output shorted at a time. 

5. AC Specifications are valid at both voltage ranges. See DC Characteristics table for voltage range-specific specifications. 


OPERATING CONDITIONS 


Symbol 

Parameter 

Notes 

Min 

Max 

Unit 

Ta 

Operating Temperature 


-20 

+ 70 

°C 

Vcc 

Vcc Supply Voltage 


3.00 

3.60 

V 

Vcc 

Vcc Supply Voltage 

5 

4.50 

5.50 

V 


DC CHARACTERISTICS Vcc = 3.3V ±0.3V Read, 3.15V-3.6V Program/Erase 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

Ili 

Input Load Current 

1 



±1.0 

/xA 

V CC = V CC Max 
V|n = Vcc or GND 

•lo 

Output Leakage Current 

1 



±10 

jmA 

V CC = V CC Max 
VoUT = Vcc or GND 

>ccs 

Vcc Standby Current 

1,3 


45 

120 

fiA 

V CC = v cc Max 

CE# = RP# = V C c ±0!2V 

45 

120 

fJL A 

Vcc = Vcc Max 
CE# = RP# = V| H 

tCD 

Vcc Deep Power-down Current 

1 

' 

0.20 

1.2 

juA 

RP# = GND ±0.2V 


I 
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DC CHARACTERISTICS Vcc = 3.3V ±0.3V Read, 3.15V-3.6V Program/Erase (Continued) 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

•CCR 

Vcc Read Current for 
28F200BX-L Word-Wide and 
Byte-Wide Mode and 
28F002BX-L Byte-Wide Mode 

1,5, 

6 


15 

25 

mA 

Vcc = Vcc Max, CE# = GND 
f — 5 MHz, Iout = 0 mA 
CMOS Inputs 

15 

25 

mA 

v cc = v cc Max, CE# = V|l 
f - 5 MHz, l 0 UT = 0 mA 
TTL Inputs 

Iccw 

Vcc Word/Byte Write Current 

1,4 



30 


Word/Byte Write in Progress 

ICCE 

Vcc Block Erase Current 

1,4 



20 

mA 

Block Erase in Progress 

ICCES 

Vcc Erase Suspend Current 

1,2 


3 

6 

mA 

Block Erase Suspended, 
CE# = V| H 

ipps 

Vpp Standby Current 

1 



±15 

jtxA 

o 

o 

> 

VI 

CL 

CL 

> 

IPPD 

Vpp Deep 

Power-down Current 

1 



5.0 

jtiA 

RP# = GND +0.2V 

•PPR 

Vpp Read Current 

1 



200 

jliA 

Vpp > Vcc 

Ippw 

Vpp Word Write Current 

1,4 



40 

mA 

Vpp = VppH 

Word Write in Progress 

Ippw 

Vpp Byte Write Current 

1,4 



30 

mA 

Vpp = VppH 

Byte Write in Progress 

IPPE 

Vpp Block Erase Current 

1,4 



30 

mA 

Vpp = VppH 

Block Erase in Progress 

IPPES 

Vpp Erase Suspend Current 

1 



200 

]u,A 

Vpp = VppH 

Block Erase Suspended 

•rp# 

RP# Boot Block 
Unlock Current 

1,4 



500 

juA 

RP# = V HH 

*ID 

Ag Intelligent Identifier Current 

1,4 



500 

jutA 

A 9 = V|D 

V|D 

Ag Intelligent Identifier Voltage 


11.4 

12.0 

13.0 

V 


V|L 

Input Low Voltage 


-0.5 


0.6 

V 


V| H 

Input High Voltage 


2.0 


V C C + 0.5 

V 


V DL 

Output Low Voltage 




0.4 

V 

Vcc = Vcc Min 
Iol = 2 mA 

VoHI 

Output High Voltage (TTL) 


2.4 



V 

Vcc = Vcc Min 
Ioh = -2 mA 

VqH2 

Output High Voltage 
(CMOS) 


0.85 V CC 



V 

Ioh = -2.5 mA 
Vcc = Vcc Min 

o 

1 

o 

Ioh = -2.5 mA 
Vcc = Vcc Min 

HIM 

Vpp during Normal Operations 

3 

0.0 


4.1 

V 


VppH 

Vpp during Erase/Write 
Operations 

■ 


12.0 

12.6 

V 


VlKO 

Vcc Erase/Write Lock Voltage 


2.0 



V 


Vhh 

RP# Unlock Voltage 


11.4 


13.0 

V 

Boot Block Write/Erase 
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CAPACITANCE^) T a = 25°C,f = 1 MHz 


Symbol 

Parameter 

Typ 

Max 

Unit 

Condition 

C|N 

Input Capacitance 

6 

8 

PF 

> 

o 

II 

z 

> 

C OUT 

Output Capacitance 

10 

12 

PF 

VquT = 0V 


NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 3.3V, Vpp = 12.0V, T = 25°C. These currents 
are valid for all product versions (packages and speeds). 

2 - l CCES is specified with the device deselected. If the device is read while in Erase Suspend Mode, current draw is the sum 
of Icces and Iccr- 

3. Block Erases and Word/Byte Writes are inhibited when Vpp = Vpp|_ and not guaranteed in the range between Vppn and 
V PPL . 

4. Sampled, not 100% tested. 

5. Automatic Power Savings (APS) reduces Iccr to less than 1 mA in static operation. 

6. CMOS Inputs are either Vcc ±0.2V or GND ±0.2V. TTL Inputs are either V||_ or V|h- 


DC CHARACTERISTICS v C c = 5.ov ±io%(4) 



Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

m 

Input Load Current 

1 



±1.0 

jliA 


>LO 

Output Leakage Current 


■ 

■ 

±10 

fxA 

Vcc = Vcc Max 
VoUT = Vcc or GND 

■CCS 

Vcc Standby Current 




1.5 

mA 

Vcc = Vcc Max 
CE# = RP# = V| H 






100 

jllA 

Vcc = v cc Max 

CE# = RP# = V C c ±0.2V 

<CCD 

Vcc Deep Power-down 
Current 

1 



1.2 

fxA 

RP# = GND ±0.2V 

Iccr 

Vcc Read Current for 
28F200BL Word-Wide and 
Byte-Wide Mode and 
28F002BL 

1 



40 

mA 

Vcc = Vcc Max, CE# = GND 
f = 5 MHz, Iqut = 0 mA 
CMOS Inputs 





40 

mA 

Vcc = Vcc Max, CE# = V||_ 
f = 5 MHz, Iout = 0 mA 
TTL Inputs 

Iccw 

Vcc Word-Byte Write Current 

1,4 



70 

mA 

Word or Byte Write in Progress 

!CCE 

Vcc Block Erase Current 

1,4 



30 

mA 

Block Erase in Progress 

!cces 

Vcc Erase Suspend Current 

1,2 



10 

mA 

Block Erase Suspended, 
CE# = V| H 

Ipps 

Vpp Standby Current 

1 



±15 

jliA 

Vpp ^ Vcc 

IpPD 

Vpp Deep Power-down 
Current 

1 



5.0 

jliA 

RP# = GND ±0.2V 
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DC CHARACTERISTICS Vcc = 5.0V ±10% (Continued) 


Symbol 

Parameter 

Notes 

Min 

Typ 



Test Condition 

•PPR 

Vpp Read Current 

1 



200 

jtxA 

vpp > Vcc 


Vpp Word Write Current 

1,4 



40 

mA 

Vpp = Vppn 
Word Write in Progress 

Ippw 

Vpp Byte Write Current 

1,4 





Vpp = Vppn 
Byte Write in Progress 

•PPE 

Vpp Block Erase Current 

1,4 



30 

mA 

Vpp = Vppn 

Block Erase in Progress 

IPPES 

Vpp Erase Suspend Current 

1 



200 

juA 

Vpp = Vppn 

Block Erase Suspended 

Irp# 

RP# Boot Block Unlock Current 

1,4 



500 

jxA 

RP# = V HH 

l|D 

Ag Intelligent Identifier Current 



■ 


jliA 

> 

CD 

II 

< 

a 

V|D 

Ag Intelligent Identifier Voltage 





V 


V|L 

Input Low Voltage 


-0.5 


0.8 

D 


V|H 

Input High Voltage 


2.0 


V C C + 0.5 

D 


VOL 

Output Low Voltage 

■ 



0.45 

V 

Vcc = Vcc Min 
Iql = 5.8 mA 

VOHI 

Output High Voltage (TTL) 

■ 

m 

■ 


V 

Vcc = v cc 
Iqh = — 2.5 mA 

VOH2 

Output High Voltage 
(CMOS) 

1 

0.85 V CC 

1 



Ioh = “2.5 mA 
Vcc = Vcc Min 


Ioh = “1 00 ju,A 
Vcc = Vcc Min 

VppL 

Vpp during Normal Operations 

3 

0.0 


6.5 

V 


VppH 

Vpp during Erase/Write 
Operations 


11.4 

12.0 

12.6 

V 


Vlko 

Vqc Erase/Write Lock Voltage 


2.2 



V 


Vhh 

RP# Unlock Voltage 


11.4 

12.0 

13.0 

V 

Boot Block Write/Erase 


NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, Vpp = 12.0V, T = 25°C. These currents 
are valid for all product versions (packages and speeds). 

2. IcCES >s specified with the device deselected. If the device is read while in Erase Suspend Mode, current draw is the sum 
of Icces and Iccr- 

3. Block Erase/Byte Writes are inhibited when Vpp = Vppi_ and not guaranteed in the range between Vppn and Vppi_. 

4. All parameters are sampled, not 100% tested. 
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AC INPUT/OUTPUT REFERENCE WAVEFORM 


AC TESTING LOAD CIRCUIT 




290449-15 

AC test inputs are driven at 3.0V for a Logic “1” and 0.0V for a logic “0”. 
Input timing begins, and output timing ends, at 1.5V. Input rise and fall times 
(10% to 90%) < 10 ns. 



28F200BL-150 

28F002BL-150 


wmumm 


Parameter 

Read Cycle Time 


Address to Output Delay 


CE# to Output Delay 




OE# to Output Delay 


CE# to Output Low Z 











































Figure 16. AC Waveforms for Read Operations 
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AC CHARACTERISTICS For WE# Controlled Write Operations^) V C c = 3.1 5V-3.6V, 5.0V ±10% 


Versions( 4 ) 

28F200BL-150 

28F002BL-150 

B 

Symbol 

Parameter 

Notes 

Min 

Max 

*AVAV 

twc 

Write Cycle Time 


150 


ns 

tpHWL 

*PS 

RP# High Recovery to WE# Going Low 


1 





CE# Setup to WE# Going Low 


0 


ns 

ESS 

EIS1 

RP# Vhh Setup to WE# Going High 

6,8 

200 



tVPWH 

tvps 

Vpp Setup to WE# Going High 

5,8 

200 


ns 

tAVWH 

tAS 

Address Setup to WE# Going High 

3 

95 


ns 

tDVWH 

rm 

Data Setup to WE# Going High 

4 

100 


E5 


EM 

WE# Pulse Width 


100 



tWHDX 

tDH 

Data Hold from WE# High 

4 

0 



tWM 

Uh 

Address Hold from WE# High 


10 


11 

tWHEH 

*CH 

CE# Hold from WE# High 


10 


ns 

tWHWL 

tWPH 

WE# Pulse Width High 




ns 

tWHQVI 


Duration of Programming Operation (Boot) 


6 


fxS 

tWHQV2 

■ 

Duration of Word/ Byte 
Programming Operation 


m 


s 

tWHQV3 

■ 

Duration of Erase Operation 
(Parameter) 


1 


s 

tWHQV4 


Duration of Erase Operation (Main) 

ebb 

0.6 


s 

tQWL 

tVPH 

Vpp Hold from Valid SRD 


0 



tQVPH 

tPHH 

RP# V HH Hold ^om Valid SRD 

6,8 

0 


ns 

tpHBR 


Boot-Block Relock Delay 

7,8 


200 

ns 


NOTES: 

1. Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
characteristics during Read Mode. 

2. The on-chip WSM completely automates program/erase operations; program/erase algorithms are now controlled inter- 
nally which includes verify and margining operations. 

3. Refer to command definition table for valid Ain- 

4. Refer to command definition table for valid D|n- 

5. Program/Erase durations are measured to valid SRD data (successful operation, SR.7 = 1). 

6. For Boot Block Program/Erase, RP# should be held at V H h until operation completes successfully. 

7. Time tpneR is required for successful relocking of the Boot Block. 

8. Sampled but not 100% tested. 
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BLOCK ERASE AND BYTE/WORD WRITE PERFORMANCE V C c = 3.15V-3.6V, 5.0V ±10% 


Parameter 

Notes 

28F200BL-150 

28F002BL-150 

Unit 







Boot/ Parameter Block Erase Time 

2 


2.0 

8.6 

s 

Main Block Erase Time 

2 


3.4 

17.0 

s 

Main Block Byte Program Time 

2 


1.4 

5.3 

s 

Main Block Word Program Time 

2 


0.7 

2.7 

s 


NOTES: 

1. 25°C, 12.0V Vpp. 

2. Excludes System-Level Overhead. 
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Figure 18. AC Waveforms for a Write and Erase Operations (WE# -Controlled Writes) 
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AC CHARACTERISTICS FOR CE# -CONTROLLED WRITE OPERATIONS 

Vcc = 3.15V-3.6V, 5.0V ±10% 


Versions 

28F200BL-150 

28F002BL-150 

Unit 

Symbol 

Parameter 

Notes 

Min 

Max 

*AVAV 

twc 

Write Cycle Time 


150 


ns 

tpHEL 

tps 

RP# High Recovery to CE# Going Low 


1 


JUS 

tWLEL 

tws 

WE# Setup to CE# Going Low 


0 


ns 

tPHHEH 

tpHS 

RP# Vhh Setup to CE# Going High 

6,8 

200 



tVPEH 

tvps 

Vpp Setup to CE# Going High 

5,8 

200 



tAVEH 

*AS 

Address Setup to CE# Going High 

3 

95 


mi 


IB 


4 

100 


m 


IB 

CE# Pulse Width 


100 


imi 

KSSi 

*DH 

Data Hold from CE# High 

4 

0 



tEHAX 

tAH 

Address Hold from CE# High 

3 

10 


131 

tEHWH 

tWH 

WE# Hold from CE# High 


10 


■a 

tEHEL 

tcPH 

CE# Pulse Width High 


50 


ii 

tEHQVI 


Duration of Word/Byte Programming 
Operation (Boot) 

2, 5,6 

6 


JULS 

tEHQV2 


Duration of Erase Operation (Boot) 

2, 5,6 

0.3 


s 

tEHQV3 


Duration of Erase Operation (Parameter) 


0.3 

: 

s 

tEHQV4 


Duration of Erase Operation (Main) 

2, 5,6 

0.6 


s 

tQWL 

tVPH 

Vpp Hold from Valid SRD 

5,8 

0 


ns 

tQVPH 

tpPH 

RP# V HH Hold from Valid SRD 

6,8 

0 


ns 

tpHBR 


Boot-Block Relock Delay 

7 


200 

ns 


NOTES: 

1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CE# and WE# in systems where 
CE# defines the write pulse-width (within a longer WE# timing waveform), all set-up, hold and inactive WE# time should be 
measured relative to the CE# waveforms. 

2, 3, 4, 5, 6, 7, 8: Refer to AC characteristics for WE# -controlled write operations. 

9. Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
characteristics during read mode. 















Figure 19. Alternate AC Waveforms for Write and Erase Operations (CE# -Controlled Writes) 
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ORDERING INFORMATION 


I E |2|8H21o|o|b|l|-|l1i|5T1 


V 

PACKAGE 

E = STANDARD 56 LEAD TSOP 
PA = 44 LEAD PSOP 


L ACCESS SPEED 
| 150ns 

BOOT BLOCK LOCATION 
T = TOP BOOT 
B = BOTTOM BOOT 


(ns) 


290449-20 


VALID COMBINATIONS: 

E28F200BL-T1 50 PA28F200BL-T1 50 

E28F200BL-B1 50 PA28F200BL-B1 50 


|E|2|8|r|c|0|2|B|L|-|L|,is|0| 

V 


PACKAGE 

E = STANDARD 40 LEAD TSOP 


ACCESS SPEED (ns) 
150 ns 


BOOT BLOCK LOCATION 
T = TOP BOOT 
B = BOTTOM BOOT 


290449-21 


VALID COMBINATIONS: 

E28F002BL-T 1 50 
E28F002BL-B1 50 


Order 

Number 

Document 


AB-57 “Boot Block Architecture for Safe Firmware Updates” 

292154 

AB-60 “2/4/8- Mbit SmartVoltage Boot Block Flash Memory Family” 

292098 

AP-363 “Extended Flash BIOS Concepts for Portable Computers” 

292148 

AP-604 “Using Intel’s Boot Block Flash Memory Parameter Blocks to Replace EEPROM” 

290448 

28F002/200BX-T/B 2-Mbit Boot Block Flash Memory Datasheet 

290450 

28F004/400BL-T/B 4-Mbit Low Power Boot Block Flash Memory Datasheet 

290451 

28F004/ 400BX-T /B 4-Mbit Boot Block Flash Memory Datasheet 

290531 

2-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 

290530 

4-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 

290539 

8-Mbit SmartVoltage Boot Block Flash Memory Family Datasheet 
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REVISION HISTORY 


Number 

Description 

-001 

Original Version 


Modified BYTE# AC Timings 

Modified tovwH parameter for AC Characteristics for Write Operations 

-003 

PWD renamed to RP# for JEDEC standardization compatibility. 

Combined Vcc Read Current for 28F200BX-L Word-Wide and Byte-Wide Mode and 
28F002BX-L Byte-Wide Mode in DC Characteristics tables. 

Changed Ipps current spec from ± 1 0 pA to ± 1 5 jxA in DC Characteristics table. 

Added Boot Block Unlock current spec in DC Characteristics tables. 

Improved tpwH spec to 600 ns (was 700 ns) 

Changed Iccr current spec from 20 mA maximum to 25 mA maximum and added typical spec 
to DC Characteristics table. 

-004 

Added Ioh CMOS Specification. 

Expanded temperature operating range, from 0°C-70°C to -20°- + 70°C. 

Product naming changed: 

28F200BX-TL/BL changed to 28F200BL-T/B 
28F002BX-TL/BL changed to 28F002BL-T/B 
Typographical errors corrected. 

Added 28F400BX interface to lntel 386 TM EX Embedded Processor Block Diagram. 

Added upgrade considerations for SmartVoltage Boot Block products. 

Previously specified Vcc tolerance of 3.0V to 3.6V for Read, Program and Erase has been 
changed to 3.15V to 3.6V for Program and Erase operation, while the Read operation remains 
3.0V to 3.6V. 










Intel. 

28F001BX-T/28F001BX-B 
1M (128K x 8) CMOS FLASH MEMORY 

■ High Integration Blocked Architecture ■ 

— One 8 KB Boot Block w/Lock Out 

— Two 4 KB Parameter Blocks 

— One 112 KB Main Block 

■ 100,000 Erase/Program Cycles Per ■ 

Block 

■ Simplified Program and Erase 

— Automated Algorithms via On-Chip ■ 

Write State Machine (WSM) 

■ SRAM-Compatible Write Interface 

■ Deep-Powerdown Mode m 

— 0.05 jutA Ice Typical 

— 0.8 /xA Ipp Typical 

■ 12.0V ±5% Vpp 

Intel’s 28F001 BX-B and 28F001BX-T combine the cost-effectiveness of Intel standard flash memory with 
features that simplify write and allow block erase. These devices aid the system designer by combining the 
functions of several components into one, making boot block flash an innovative alternative to EPROM and 
EEPROM or battery-backed static RAM. Many new and existing designs can take advantage of the 
28F001 BX’s integration of blocked architecture, automated electrical reprogramming, and standard processor 
interface. 

The 28F001BX-B and 28F001BX-T are 1,048,576 bit nonvolatile memories organized as 131,072 bytes of 
8 bits. They are offered in 32-pin plastic DIP, 32-lead PLCC and 32-lead TSOP packages. Pin assignment 
conform to JEDEC standards for byte-wide EPROMs. These devices use an integrated command port and 
state machine for simplified block erasure and byte reprogramming. The 28F001 BX-T’s block locations pro- 
vide compatibility with microprocessors and microcontrollers that boot from high memory, such as Intel’s 
MCS-186 family, 80286, i 386 TM, i 486 ™, j860TM and 80960CA. With exactly the same memory segmentation, 
the 28F001 BX-B memory map is tailored for microprocessors and microcontrollers that boot from low memory, 
such as Intel’s MCS-51, MCS-196, 80960KX and 80960SX families. All other features are identical, and unless 
otherwise noted, the term 28F001 BX can refer to either device throughout the remainder of this document. 

The boot block section includes a reprogramming write lock out feature to guarantee data integrity. It is 
designed to contain secure code which will bring up the system minimally and download code to the other 
locations of the 28F001BX. Intel’s 28F001BX employs advanced CMOS circuitry for systems requiring high- 
performance access speeds, low power consumption, and immunity to noise. Its access time provides 
no-WAIT-state performance for a wide range of microprocessors and microcontrollers. A deep-powerdown 
mode lowers power consumption to 0.25 jitW typical through Vcc> crucial in laptop computer, handheld instru- 
mentation and other low-power applications. The RP# power control input also provides absolute data protec- 
tion during system powerup or power loss. 

Manufactured on Intel’s ETOX process base, the 28F001 BX builds on years of EPROM experience to yield the 
highest levels of quality, reliability, and cost-effectiveness. 


High-Performance Read 

— 70/75 ns, 90 ns, 120 ns, 150 ns 
Maximum Access Time 

— 5.0V ±10% V C c 

Hardware Data Protection Feature 

— Erase/Write Lockout during Power 
Transitions 

Advanced Packaging, JEDEC Pinouts 

— 32-Pin PDIP 
-32-Lead PLCC, TSOP 

ETOX II Nonvolatile Flash Technology 

— EPROM-Compatible Process Base 

— High-Volume Manufacturing 
Experience 

Extended Temperature Options 


November 1994 

Order Number: 290406-006 
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Figure 1. 28F001BX Block Diagram 


Table 1. Pin Description 


Symbol 

Type 

Name and Function 

Ao-Ai6 

INPUT 

ADDRESS INPUTS for memory addresses. Addresses are internally latched during 
a write cycle. 

DQ 0 -DQ 7 

INPUT/ 

OUTPUT 

DATA INPUTS/OUTPUTS: Inputs data and commands during memory write 
cycles; outputs data during memory, Status Register and Identifier read cycles. The 
data pins are active high and float to tri-state off when the chip is deselected or the 
outputs are disabled. Data is internally latched during a write cycle. 

CE# 

INPUT 

CHIP ENABLE: Activates the device’s control logic, input buffers, decoders and 
sense amplifiers. CE# is active low; CE# high deselects the memory device and 
reduces power consumption to standby levels. 

RP# 

INPUT 

POWERDOWN: Puts the device in deep powerdown mode. RP# is active low; 

RP# high gates normal operation. RP# = Vhh allows programming of the boot 
block. RP# also locks out erase or write operations when active low, providing data 
protection during power transitions. RP# active resets internal automation. Exit 
from deep powerdown sets device to Read Array mode. 

OE# 

INPUT 

OUTPUT ENABLE: Gates the device’s outputs through the data buffers during a 
read cycle. OE# is active low. OE# = Vhh (pulsed) allows programming of the 
boot block. 

WE# 

INPUT 

WRITE ENABLE: Controls writes to the Command Register and array blocks. WE# 
is active low. Addresses and data are latched on the rising edge of the WE# pulse. 



ERASE/PROGRAM POWER SUPPLY for erasing blocks of the array or 
programming bytes of ^ach block. Note: With Vpp < Vppi_ max, memory contents 
cannot be altered. 

Vcc 


DEVICE POWER SUPPLY: (5V ± 1 0%) 

GND 


GROUND 
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APPLICATIONS 

The 28F001BX flash ‘boot block’ memory augments 
the non-volatility, in-system electrical erasure and 
reprogrammability of Intel’s standard flash memory 
by offering four separately erasable blocks and inte- 
grating a state machine to control erase and pro- 
gram functions. The specialized blocking architec- 
ture and automated programming of the 28F001 BX 
provide a full-function, non-volatile flash memory 
ideal for a wide range of applications, including PC 
boot/BIOS memory, minimum-chip embedded pro- 
gram memory and parametric data storage. The 
28F001 BX combines the safety of a hardware-pro- 
tected 8-KByte boot block with the flexibility of three 
separately reprogrammable blocks (two 4-KByte pa- 
rameter blocks and one 1 1 2-KByte code block) into 
one versatile, cost-effective flash memory. Addition- 
ally, reprogramming one block does not affect code 
stored in another block, ensuring data integrity. 


The flexibility of flash memory reduces costs 
throughout the life cycle of a design. During the early 
stages of a system’s life, flash memory reduces pro- 
totype development and testing time, allowing the 
system designer to modify in-system software elec- 
trically versus manual removal of components. Dur- 
ing production, flash memory provides flexible firm- 
ware for just-in-time configuration, reducing system 
inventory and eliminating unnecessary handling and 
less reliable socketed connections. Late in the life 
cycle, when software updates or code “bugs” are 
often unpredictable and costly, flash memory reduc- 
es update costs by allowing the manufacturers to 
send floppy updates versus a technician. Alterna- 
tively, remote updates over a communication link are 
possible at speeds up to 9600 baud due to flash 
memory’s fast programming time. 
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Reprogrammable environments, such as the per- 
sonal computer, are ideal applications for the 
28F001BX. The internal state machine provides 
SRAM-like timings for program and erasure, using 
the Command and Status Registers. The blocking 
scheme allows BIOS update in the main and param- 
eter blocks, while still providing recovery code in the 
boot block in the unlikely event a power failure oc- 
curs during an update, or where BIOS code is cor- 
rupted. Parameter blocks also provide convenient 
configuration storage, backing up SRAM and battery 
configurations. EISA systems, for example, can 
store hardware configurations in a flash parameter 
block, reducing system SRAM. 

Laptop BIOSs are becoming increasingly complex 
with the addition of power management software 
and extended system setup screens. BIOS code 
complexity increases the potential for code updates 
after the sale, but the compactness of laptop de- 
signs makes hardware updates very costly. Boot 
block flash memory provides an inexpensive update 
solution for laptops, while reducing laptop obsoles- 
cence. For portable PCs and hand-held equipment, 
the deep powerdown mode dramatically lowers sys- 
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Figure 5. 28F001BX-T in a 80C188 System 


tern power requirements during periods of slow op- 
eration or sleep modes. 

The 28F001BX gives the embedded system design- 
er several desired features. The internal state ma- 
chine reduces the size of external code dedicated to 
the erase and program algorithms, as well as freeing 
the microcontroller or microprocessor to respond to 
other system requests during program and erasure. 
The four blocks allow logical segmentation of the 
entire embedded software: the 8-KByte block for the 
boot code, the 112-KByte block for the main pro- 
gram code and the two 4-KByte blocks for updatable 
parametric data storage, diagnostic messages and 
data, or extensions of either the boot code or pro- 
gram code. The boot block is hardware protected 
against unauthorized write or erase of its vital code 
in the field. Further, the powerdown mode also locks 
out erase or write operations, providing absolute 
data protection during system powerup or power 
loss. This hardware protection provides obvious ad- 
vantages for safety related applications such as 
transportation, military, and medical. The 28F001BX 
is well suited for minimum-chip embedded applica- 
tions ranging from communications to automotive. 



Figure 6. 28F001BX-B in a 80C51 System 
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PRINCIPLES OF OPERATION 

The 28F001BX introduces on-chip write automation 
to manage write and erase functions. The write state 
machine allows for: 100% TTL-level control inputs; 
fixed power supplies during erasure and program- 
ming; minimal processor overhead with RAM-like 
write timings, and maximum EPROM compatiblity. 

After initial device powerup, or after return from 
deep powerdown mode (see Bus Operations), the 
28F001BX functions as a read-only memory. Manip- 
ulation of external memory-control pins yield stan- 
dard EPROM read, standby, output disable or Intelli- 
gent Identifier operations. Both Status Register and 
Intelligent Identifiers can be accessed through the 
Command Register when Vpp = Vpp|_. 

This same subset of operations is also available 
when high voltage is applied to the Vpp pin. In addi- 
tion, high voltage on Vpp enables successful erasure 
and programming of the device. All functions associ- 
ated with altering memory contents— program, 
erase, status, and int e ligent Identifier — are accessed 
via the Command Register and verified through the 
Status Register. 

Commands are written using standard microproces- 
sor write timings. Register contents serve as input to 
the WSM, which controls the erase and program- 
ming circuitry. Write cycles also internally latch ad- 
dresses and data needed for programming or erase 
operations. With the appropriate command written to 
the register, standard microprocessor read timings 
output array data, access the intelligent identifier 
codes, or output program and erase status for verifi- 
cation. 

Interface software to initiate and poll progress of in- 
ternal program and erase can be stored in any of the 
28F001 BX blocks. This code is copied to, and exe- 
cuted from, system RAM during actual flash memory 
update. After successful completion of program 
and/or erase, code execution out of the 28F001 BX 
is again possible via the Read Array command. 
Erase suspend/resume capability allows system 
software to suspend block erase and read data/exe- 
cute code from any other block. 

Command Register and Write 
Automation 

An on-chip state machine controls block erase and 
byte program, freeing the system processor for other 
tasks. After receiving the erase setup and erase 
confirm commands, the state machine controls 
block pre-conditioning and erase, returning progress 
via the Status Register. Programming is similarly 
controlled, after destination address and expected 
data are supplied. The program algorithm of past In- 
tel Flash Memories is now regulated by the state 
machine, including program pulse repetition where 
required and internal verification and margining of 
data. 



Data Protection 

Depending on the application, the system designer 
may choose to make the Vpp power supply switcha- 
ble (available only when memory updates are re- 
quired) or hardwired to Vppn- When Vpp = Vppi_, 
memory contents cannot be altered. The 28F001BX 
Command Register architecture provides protection 
from unwanted program or erase operations even 
when high voltage is applied to Vpp. Additionally, all 
functions are disabled whenever V<x is below the 
write lockout voltage V|_ko» or when R p# is at V||_. 
The 28F001BX accommodates either design prac- 
tice and encourages optimization of the processor- 
memory interface. 

The two-step program/erase write sequence to the 
Command Register provides additional software 
write protection. 


1FFFF 


1E000 

1DFFF 

1D000 

1CFFF 

1C000 

1BFFF 


00000 


8-KByte BOOT BLOCK 


4-KByte PARAMETER BLOCK 


4-KByte PARAMETER BLOCK 


112-KByte MAIN BLOCK 


Figure 7. 28F001BX-T Memory Map 


1FFFF 


04000 

03FFF 

03000 

02FFF 

02000 

01FFF 


00000 


Figure 8. 28F001BX-B Memory Map 


112-KByte MAIN BLOCK 


4-KByte PARAMETER BLOCK 


4-KByte PARAMETER BLOCK 


8-KByte BOOT BLOCK 
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BUS OPERATION 

Flash memory reads, erases and writes in-system 
via the local CPU. All bus cycles to or from the flash 
memory conform to standard microprocessor bus 
cycles. 


Read 

The 28F001BX has three read modes. The memory 
can be read from any of its blocks, and information 
can be read from the Intelligent Identifier or the 
Status Register. Vpp can be at either Vppj_ or Vppn- 

The first task is to write the appropriate read mode 
command to the Command Register (array, Intelli- 
gent Identifier, or Status Register). The 28F001BX 
automatically resets to Read Array mode upon initial 
device powerup or after exit from deep powerdown. 
The 28F001BX has four control pins, two of which 
must be logically active to obtain data at the outputs. 
Chip Enable (CE#) is the device selection control, 
and when active enables the selected memory de- 
vice. Output Enable (OE#) is the data input/output 
(DQ 0 -DQ 7 ) direction control, and when active 
drives data from the selected memory onto the I/O 
bus. RP# and WE# must also be at Vm- Figure 12 
illustrates read bus cycle waveforms. 


Output Disable 

With OE # at a logic-high level (Vm), the device out- 
puts are disabled. Output pins (DQ 0 -DQ 7 ) are 
placed in a high-impedance state. 


Table 2. 28F001BX Bus Operations 


Mode 

Notes 

RP# 

CE# 

OE# 

WE# 

A 9 

Ao 

Vpp 

DQ 0-7 

Read 

1,2,3 

VlH 

V| L 

V|L 

V|H 

X 

X 

X 

Dout 

Output Disable 


V| H 

V|L 

V|H 

V|H 

X 

X 

X 

High Z 

Standby 


V| H 

V|H 

X 

X 

X 

X 

X 

High Z 

Deep Power Down 


VlL 

X 

X 

X 

X 




Intelligent Identifier (Mfr) 

4 





V|D 

V|L 



Intelligent Identifier (Device) 

4,5 

V| H 

V|L 

V| L 

V|H 

V|D 




Write 




V| H 

V|L 

X 

X 

X 

Din 


NOTES: 

1. Refer to DC Characteristics. When Vpp = Vppi_, memory contents can be read but not programmed or erased. 

2. X can be V|l or Vih for control pins and addresses, and Vppi_ or Vppn for Vpp. 

3. See DC Characteristics for Vppi_, Vppn, Vhh and V|q voltages. 

4. Manufacturer and device codes may also be accessed via a Command Register write sequence. Refer to Table 3. Ai-As, 
A 10 -A 16 = V| L . 

5. Device ID = 94H for the 28F001BX-T and 95H for the 28F001BX-B. 

6. Command writes involving block erase or byte program are successfully executed only when Vpp = Vppn- 

7. Refer to Table 3 for valid Din during a write operation. 

8. Program or erase the boot block by holding RP# at Vhh or toggling OE# to Vhh- See AC Waveforms for program/erase 
operations. 


Standby 

CE# at a logic-high level (Vm) places the 28F001BX 
in standby mode. Standby operation disables much 
of the 28F001BX’s circuitry and substantially reduc- 
es device power consumption. The outputs (DQq- 
DQ 7 ) are placed in a high-impedance state indepen- 
dent of the status of OE#. If the 28F001BX is dese- 
lected during erase or program, the device will 
continue functioning and consuming normal active 
power until the operation is completed. 


Deep Power-Down 

The 28F001BX offers a 0.25 /aW Vcc power-down 
feature, entered when RP# is at V|i_. During read 
modes, RP# low deselects the memory, places out- 
put drivers in a high-impedance state and turns off 
all internal circuits. The 28F001BX requires time 
tpHQV (see AC Characteristics-Read Only Opera- 
tions) after return from power-down until initial mem- 
ory access outputs are valid. After this wakeup inter- 
val, normal operation is restored. The Command 
Register is reset to Read Array, and the Status Reg- 
ister is cleared to value 80H, upon return to normal 
operation. 

During erase or program modes, RP# low will abort 
either operation. Memory contents of the block be- 
ing altered are no longer valid as the data will be 
partially programmed or erased. Time tpnwL after 
RP# goes to logic-high (Vm) is required before an- 
other command can be written. 
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The use of RP# during system reset is important 
with automated write/erase devices. When the sys- 
tem comes out of reset it expects to read from the 
flash memory. Automated flash memories provide 
status information when accessed during write/ 
erase modes. If a CPU reset occurs with no flash 
memory reset, proper CPU initialization would not 
occur because the flash memory would be providing 
the status information instead of array data. Intel’s 
Flash Memories allow proper CPU initialization fol- 
lowing a system reset through the use of the RP# 
input. In this application RP# is controlled by the 
same RESET # signal that resets the system CPU. 


Intelligent Identifier Operation 

The Intelligent Identifier operation outputs the manu- 
facturer code, 89H; and the device code, 94H for the 
28F001 BX-T and 95H for the 28F001BX-B. Pro- 
gramming equipment or the system CPU can then 
automatically match the device with its proper erase 
and programming algorithms. 

PROGRAMMING EQUIPMENT 

CE# and OE# at a logic low level (Vil), with Ag at 
high voltage Vid (see DC Characteristics) activates 
this operation. Data read from locations 00000H and 
00001 H represent the manufacturer’s code and the 
device code respectively. 

IN-SYSTEM PROGRAMMING 

The manufacturer- and device-codes can also be 
read via the Command Register. Following a write of 
90H to the Command Register, a read from address 
location 00000H outputs the manufacturer code 
(89H). A read from address 00001 H outputs the de- 
vice code (94H for the 28F001BX-T and 95H for the 
28F001 BX-B). It is not necessary to have high volt- 
age applied to Vpp to read the Intelligent Identifiers 
from the Command Register. 


Write 

Writes to the Command Register allow read of de- 
vice data and Intelligent Identifiers. They also con- 
trol inspection and clearing of the Status Register. 
Additionally, when Vpp = Vppn, the Command Reg- 
ister controls device erasure and programming. The 
contents of the register serve as input to the internal 
state machine. 

The Command Register itself does not occupy an 
addressable memory location. The register is a latch 
used to store the command and address and data 
information needed to execute the command. Erase 


inlel. 

Setup and Erase Confirm commands require both 
appropriate command data and an address within 
the block to be erased. The Program Setup Com- 
mand requires both appropriate command data and 
the address of the location to be programmed, while 
the' Program command consists of the data to be 
written and the address of the location to be pro- 
grammed. 

The Command Register is written by bringing WE# 
to a logic-low level (Vil) while CE# is low. Address- 
es and data are latched on the rising edge of WE#. 
Standard microprocessor write timings are used. 

Refer to AC Write Characteristics and the AC Wave- 
form for Write Operations, Figure 13, for specific tim- 
ing parameters. 

COMMAND DEFINITIONS 

When Vppi_ is applied to the Vpp pin, read opera- 
tions from the Status Register, intelligent identifiers, 
or array blocks are enabled. Placing Vppn on Vpp 
enables successful program and erase operations 
as well. 

Device operations are selected by writing specific 
commands into the Command Register. Table 3 de- 
fines these 28F001 BX commands. 

Read Array Command 

Upon initial device powerup and after exit from 
deep-powerdown mode, the 28F001BX defaults to 
Read Array mode. This operation is also initiated by 
writing FFH into the Command Register. Microproc- 
essor read cycles retrieve array data. The device re- 
mains enabled for reads until the Command Regis- 
ter contents are altered. Once the internal write 
state machine has started an erase or program op- 
eration, the device will not recognize the Read Array 
command, until the WSM has completed its opera- 
tion. The Read Array command is functional when 
Vpp = Vppi_ or V PPH . 

Intelligent Identifier Command for 
In-System Programming 

The 28F001 BX contains an Intelligent Identifier op- 
eration to supplement traditional PROM-program- 
ming methodology. The operation is initiated by writ- 
ing 90H into the Command Register. Following the 
command write, a read cycle from address 00000H 
retrieves the manufacturer code of 89H. A read cy- 
cle from address 00001 H returns the device code of 
94H (28F001BX-T) or 95H (28F001 BX-B). To termi- 
nate the operation, it is necessary to write another 
valid command into the register. Like the Read Array 
command, the Intelligent Identifier command is func- 
tional when Vpp = Vpp;_ or Vppn- 
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Table 3. 28F001BX Command Definitions 


Command 

Bus 

Cycles 

Req’d 


First Bus Cycle 

Second Bus Cycle 

Operation 

Address 

Data 

Operation 

Address 

Data 

Read Array/ Reset 

1 

1 


X 

Ei!I 




Intelligent Identifier 

3 

BB 

IBliB 

X 



IA 

■a 

Read Status Register 

2 

3 


X 

El 

Read 

X 

m 

Clear Status Register 

1 


g 

X 

BE1 




Erase Setup/ Erase Confirm 

2 

2 

1 

BA 

20H 


BA 


Erase Suspend/ Erase Resume 

2 



X 

BOH 

Write 

X 

DOH 

Program Setup/ Program 

2 

2,3 

Write 

PA 

40H 

Write 

PA 

PD 


NOTES: 

1. Bus operations are defined in Table 2. 

2. IA = Identifier Address: 00H for manufacturer code, 01 H for device code. 

BA = Address within the block being erased. 

PA = Address of memory location to be programmed. 

3. SRD = Data read from Status Register. See Table 4 for a description of the Status Register bits. 

PD = Data to be programmed at location PA. Data is latched on the rising edge of WE#. 

I ID = Data read from Intelligent Identifiers. 

4. Following the Intelligent Identifier command, two read operations access manufacture and device codes. 

5. Commands other than those shown above are reserved by Intel for future device implementations and should not be 


used. 

Read Status Register Command 

The 28F001BX contains a Status Register which 
may be read to determine when a program or erase 
operation is complete, and whether that operation 
completed successfully. The Status Register may be 
read at any time by writing the Read Status Register 
command (70H) to the Command Register. After 
writing this command, all subsequent read opera- 
tions output data from the Status Register, until an- 
other valid command is written to the Command 
Register. The contents of the Status Register are 
latched on the falling edge of OE# or CE#, which- 
ever occurs last in the read cycle. OE# or CE# 
must be toggled to Vm before further reads to up- 
date the Status Register latch. The Read Status 
Register command functions when Vpp = Vppl or 
Vpph- 


Clear Status Register Command 

The Erase Status and Program Status bits are set to 
“1” by the Write State Machine and can only be 


reset by the Clear Status Register command. These 
bits indicate various failure conditions (see Table 4). 
By allowing system software to control the resetting 
of these bits, several operations may be performed 
(such as cumulatively programming several bytes or 
erasing multiple blocks in sequence). The Status 
Register may then be polled to determine if an error 
occurred during that series. This adds flexibility to 
the way the device may be used. 

Additionally, the Vpp Status bit (SR. 3), when set to 
“1”, MUST be reset by system software before fur- 
ther byte programs or block erases are attempted. 
To clear the Status Register, the Clear Status Regis- 
ter command (50H) is written to the Command Reg- 
ister. The Clear Status Register command is func- 
tional when Vpp = Vppi_ or Vppn- 
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Table 4. 28F001BX Status Register Definitions 


WSMS 

ESS 

ES 

PS 

VPPS 

R 

R 

R 


7 6 5 4 

SR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 

0 = Busy 

SR.6 = ERASE SUSPEND STATUS 

1 = Erase Suspended 

0 = Erase In Progress/Completed 

SR. 5 = ERASE STATUS 

1 = Error in Block Erasure 

0 = Successful Block Erase 

SR.4 = PROGRAM STATUS 

1 = Error in Byte Program 

0 = Successful Byte Program 

SR.3 = V PP STATUS 

1 = Vpp Low Detect; Operation Abort 
0 = Vpp OK 

SR.2-SR.0 = RESERVED FOR FUTURE ENHANCE- 
MENTS 

These bits are reserved for future use and should be 
masked out when polling the Status Register. 


3 2 10 

NOTES: 

The Write State Machine Status Bit must first be checked 
to determine program or erase completion, before the 
Program or Erase Status bits are checked for success. 

If the Program AND Erase Status bits are set to “Is” dur- 
ing an erase attempt, an improper command sequence 
was entered. Attempt the operation again. 

If Vpp low status is detected, the Status Register must be 
cleared before another program or erase operation is at- 
tempted. 

The Vpp Status bit, unlike an A/D converter, does not 
provide continuous indication of Vpp level. The WSM in- 
terrogates the Vpp level only after the program or erase 
command sequences have been entered and informs the 
system if Vpp has not been switched on. The Vpp Status 
bit is not guaranteed to report accurate feedback be- 
tween Vppi_ and VppH- 


Erase Setup/Erase Confirm 
Commands 

Erase is executed one block at a time, initiated by a 
two-cycle command sequence. An Erase Setup 
command (20H) is first written to the Command 
Register, followed by the Erase Confirm command 
(DOH). These commands require both appropriate 
command data and an address within the block to 
be erased. Block preconditioning, erase and verify 
are all handled internally by the Write State Machine, 
invisible to the system. After receiving the two-com- 
mand erase sequence, the 28F001 BX automatically 
outputs Status Register data when read (see Figure 
10; Block Erase Flowchart). The CPU can detect the 
completion of the erase event by checking the WSM 
Status bit of the Status Register (SR.7). 

When the Status Register indicates that erase is 
complete, the Erase Status bit should be checked. If 
erase error is detected, the Status Register should 
be cleared. The Command Register remains in Read 
Status Register Mode until further commands are is- 
sued to it. 

This two-step sequence of set-up followed by execu- 
tion ensures that memory contents are not acciden- 
tally erased. Also, block erasure can only occur 
when Vpp = Vppn- In the absence of this high volt- 
age, memory contents are protected against era- 
sure. If block erase is attempted while Vpp = Vppi_, 


the Vpp Status bit will be set to “1”. Erase attempts 
while Vppi_ < Vpp < VppH produce spurious results 
and should not be attempted. 

Erase Suspend/Erase Resume 
Commands 

The Erase Suspend Command allows erase se- 
quence interruption in order to read data from anoth- 
er block of memory. Once the erase sequence is 
started, writing the Erase Suspend command (BOH) 
to the Command Register requests that the WSM 
suspend the erase sequence at a predetermined 
point in the erase algorithm. The 28F001BX contin- 
ues to output Status Register data when read, after 
the Erase Suspend command is written to it. Polling 
the WSM Status and Erase Suspend Status bits will 
determine when the erase operation has been sus- 
pended (both will be set to “Is”). 

At this point, a Read Array command can be written 
to the Command Register to read data from blocks 
other than that which is suspended. The only oth- 
er valid commands at this time are Read Status Reg- 
ister (70H) and Erase Resume (DOH), at which time 
the WSM will continue with the erase sequence. The 
Erase Suspend Status and WSM Status bits of the 
Status Register will be cleared. After the Erase Re- 
sume command is written to it, the 28F001BX auto- 
matically outputs Status Register data when read 
(see Figure 11; Erase Suspend/Resume Flowchart). 
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Program Setup/Program Commands 

Programming is executed by a two-write sequence. 
The program Setup command (40H) is written to the 
Command Register, followed by a second write 
specifying the address and data (latched on the ris- 
ing edge of WE#) to be programmed. The WSM 
then takes over, controlling the program and verify 
algorithms internally. After the two-command pro- 
gram sequence is written to it, the 28F001 BX auto- 
matically outputs Status Register data when read 
(see figure 9; Byte Program Flowchart). The CPU 
can detect the completion of the program event by 
analyzing the WSM Status bit of the Status Register. 
Only the Read Status Register command is valid 
while programming is active. 

When the Status Register indicates that program- 
ming is complete, the Program Status bit should be 
checked. If program error is detected, the Status 
Register should be cleared. The internal WSM verify 
only detects errors for “Is” that do not successfully 
program to “Os”. The Command Register remains in 
Read Status Register mode until further commands 
are issued to it. If byte program is attempted while 
Vpp = Vppi_, the Vpp Status bit will be set to “1”. 
Program attempts while Vppi_ < Vpp < Vppn pro- 
duce spurious results and should not be attempted. 


EXTENDED ERASE/PROGRAM 
CYCLING 

EEPROM cycling failures have always concerned 
users. The high electrical field required by thin oxide 
EEPROMs for tunneling can literally tear apart the 
oxide at defect regions. To combat this, some sup- 
pliers have implemented redundancy schemes, re- 
ducing cycling failures to insignificant levels. Howev- 
er, redundancy requires that cell size be doubled; an 
expensive solution. 

Intel has designed extended cycling capability into 
its ETOX flash memory technology. Resulting im- 
provements in cycling reliability come without in- 
creasing memory cell size or complexity. First, an 
advanced tunnel oxide increases the charge carry- 
ing ability ten-fold. Second, the oxide area per cell 
subjected to the tunneling electrical field is one- 
tenth that of common EEPROMs, minimizing the 
probability of oxide defects in the region. Finally, the 
peak electric field during erasure is approximately 2 
Mv/cm lower than EEPROM. The lower electric field 
greatly reduces oxide stress and the probability of 
failure; increasing time to wearout by a factor of 
100,000,000. 


The 28F001BX-B and 28F001BX-T are capable of 
100,000 program/erase cycles on each of the two 
parameter blocks, main block and boot block. 


ON-CHIP PROGRAMMING 
ALGORITHM 


The 28F001 BX integrates the Quick Pulse program- 
ming algorithm of prior Intel Flash Memory devices 
on-chip, using the Command Register, Status Regis- 
ter and Write State Machine (WSM). On-chip inte- 
gration dramatically simplifies system software and 
provides processor-like interface timings to the 
Command and Status Registers. WSM operation, in- 
ternal program verify and Vpp high voltage presence 
are monitored and reported via appropriate Status 
Register bits. Figure 9 shows a system software 
flowchart for device programming. The entire se- 
quence is performed with Vpp at Vppn- Program 
abort occurs when RP# transitions to V||_, or Vpp 
drops to Vpp|_. Although the WSM is halted, byte 
data is partially programmed at the location where 
programming was aborted. Block erasure or a re- 
peat of byte programming will initialize this data to a 
known value. 


ON-CHIP ERASE ALGORITHM 



As above, the Quick Erase algorithm of prior Intel 
Flash Memory devices is now implemented internal- 
ly, including all preconditioning of block data. WSM 
operation, erase success and Vpp high voltage pres- 
ence are monitored and reported through the Status 
Register. Additionally, if a command other than 
Erase Confirm is written to the device after Erase 
Setup has been written, both the Erase Status and 
Program Status bits will be set to “1”. When issuing 
the Erase Setup and Erase Confirm commands, they 
should be written to an address within the address 
range of the block to be erased. Figure 10 shows a 
system software flowchart for block erase. 


Erase typically takes 1 -4 seconds per block. The 
Erase Suspend/Erase Resume command sequence 
allows interrupt of this erase operation to read data 
from a block other than that in which erase is 
being performed. A system software flowchart is 
shown in Figure 1 1 . 

The entire sequence is performed with Vpp at Vppn- 
Abort occurs when RP# transitions to V||_ or Vpp 
falls to Vpp[_, while erase is in progress. Block data is 
partially erased by this operation, and a repeat of 
erase is required to obtain a fully erased block. 
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BOOT BLOCK PROGRAM AND 
ERASE 

The boot block is intended to contain secure code 
which will minimally bring up a system and control 
programming and erase of other blocks of the de- 
vice, if needed. Therefore, additional “lockout” pro- 
tection is provided to guarantee data integrity. Boot 
block program and erase operations are enabled 
through high voltage Vhh on either RP# or OE#, 
and the normal program and erase command se- 
quences are used. Reference the AC Waveforms for 
Program/ Erase. 

If boot block program or erase is attempted while 
RP# is at V|h, either the Program Status or Erase 
Status bit will be set to “1 ”, reflective of the opera- 


tion being attempted and indicating boot block lock. 
Program/erase attempts while Vih < RP# < Vhh 
produce spurious results and should not be attempt- 
ed. 


In-System Operation 

For on-board programming, the RP# pin is the most 
convenient means of altering the boot block. Before 
issuing Program or Erase confirms commands, RP# 
must transition to Vhh- Hold RP# at this high volt- 
age throughout the program or erase interval (until 
after Status Register confirm of successful comple- 
tion). At this time, it can return to Vih or V||_. 



FULL STATUS CHECK PROCEDURE 



Bus 

Operation 

Command 

Comments 

Write 

Program 

Data = 40H 


Setup 

Address = Byte to be 
Programmed 

Write 

Program 

Data to be programmed 
Address = Byte to be 
Programmed 

Read 


Status Register Data. 
Toggle OE# or CE# to 
update Status Register 

Standby 


Check SR.7 
1 = Ready, 0 = Busy 

Repeat for subsequent bytes. 

Full status check can be done after each byte or after a 

sequence of bytes. 


Write FFH after the last byte programming operation to 

reset the device to Read Array Mode. 


Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR. 4 

1 = Byte Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR. 4 is only cleared by the Clear Status Register 
Command, in cases where multiple bytes are 
programmed before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 9. 28F001BX Byte Programming Flowchart 
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Bus 

Operation 

Command 

Comments 

Write 

Erase 

Data = 20H 


Setup 

Address = Within Block to be erased 

Write 

Erase 

Data = DOH 

Address = Within Block to be erased 

Read 


Status Register Data. 

Toggle OE# or CE# to update Status 
Register 

Standby 


Check SR.7 
1 = Ready, 0 = Busy 

Repeat for subsequent blocks. 

Full status check can be done after each block or after a sequence of 
blocks. 

Write FFH after the last block erase operation to reset the device to 

Read Array Mode. 

1 



FULL STATUS CHECK PROCEDURE 


Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4, 5 

Both 1 = Command Sequence Error 

Standby 


Check SR.5 
1 = Block Erase Error 

SR.3 MUST be cleared, if set during an erase attempt, before further 
attempts are allowed by the Write State Machine. 

SR. 5 is only cleared by the Clear Status Register Command, in cases 
where multiple blocks are erased before full status is checked. 

If error is detected, clear the Status Register before attempting retry or 
other error recovery. 



Figure 10. 28F001BX Block Erase Flowchart 
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Bus 

Operation 

Command 

Comments 

Write 

Erase 

Suspend 

Data = BOH 

Write 

Erase 

Status Register 

Data = 70H 

Standby/ 

Read 


Read Status Register 
Check SR. 7 
1 = Ready, 0 = Busy 
Toggle OE# or CE# to 
Update Status Register 

Standby 


Check SR.6 
1 = Suspended 

Write 

Read Array 

Data = FFH 

Read 


Read array data from 
block other than that 
being erased. 

Write 

Erase Resume 

Data = D0H 



290406-9 

Figure 11. 28F001BX Erase Suspend/Resume Flowchart 


Programming Equipment 

For PROM programming equipment that cannot 
bring RP# to high voltage, OE# provides an alter- 
nate boot block access mechanism. OE# must tran- 
sition to Vhh a minimum of 480 ns before the initial 
program/erase setup command and held at Vhh at 
least 480 ns after program or erase confirm com- 
mands are issued to the device. After this interval, 
OE# can return to normal TTL levels. 

DESIGN CONSIDERATIONS 
Three-Line Output Control 

Flash memories are often used in larger memory ar- 
rays. Intel provides three control inputs to accommo- 


date multiple memory connections. Three-line con- 
trol provides for: 

a) lowest possible memory power dissipation 

b) complete assurance that data bus contention will 
not occur 

To efficiently use these control inputs, an address 
decoder should enable CE#, while OE# should be 
connected to all memory devices and the system’s 
READ# control line. This assures that only selected 
memory devices have active outputs while deselect- 
ed memory devices are in Standby Mode. RP# 
should be connected to the system POWERGOOD 
signal to prevent unintended writes during system 
power transitions. POWERGOOD should also toggle 
during system reset. 


I 
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Power Supply Decoupling 

Flash memory power switching characteristics re- 
quire careful device coupling. System designers are 
interested in 3 supply current issues; standby current 
levels (Isb). active current levels (Ice) and transient 
peaks producted by falling and rising edges of CE#. 
Transient current magnitudes depend on the device 
outputs’ capacitive and inductive loading. Two-line 
control and proper decoupling capacitor selection 
will suppress transient voltage peaks. Each device 
should have a 0.1 /xF ceramic capacitor connected 
between its Vcc and GND, and between its Vpp and 
GND. These high frequency, low inherent-induc- 
tance capacitors should be placed as close as pos- 
sible to the device. Additionally, for every 8 devices, 
a 4.7 julF electrolytic capacitor should be placed at 
the array’s power supply connection between Vcc 
and GND. The bulk capacitor will overcome voltage 
slumps caused by PC board trace inductances. 


Vpp Trace on Printed Circuit Boards 

Programming flash memories, while they reside in 
the target system, requires that the printed circuit 
board designer pay attention to the Vpp power sup- 
ply trace. The Vpp pin supplies the memory cell cur- 
rent for programming. Use similar trace widths and 
layout considerations given to the Vcc power bus. 
Adequate Vpp supply traces and decoupling will de- 
crease Vpp voltage spikes and overshoots. 


Vcc> Vpp, RP# Transitions and the 
Command/Status Registers 

Programming and erase completion are not guaran- 
teed if Vpp drops below Vppn- If the Vpp Status bit of 
the Status Register (SR.3) is set to “1”, a Clear 
Status Register command MUST be issued before 
further program/erase attempts are allowed by the 
WSM. Otherwise, the Program (SR.4) or Erase 
(SR. 5) Status bits of the Status Register will be set 
to “1” if error is detected. RP# transitions to V||_ 
during program and erase also abort the operations. 
Data is partially altered in either case, and the com- 
mand sequence must be repeated after normal op- 
eration is restored. Device poweroff, or RP# tran- 
sitions to V||_, clear the Status Register to initial val- 
ue 80H. 

The Command Register latches commands as is- 
sued by system software and is not altered by Vpp 
or CE# transitions or WSM actions. Its state upon 
powerup, after exit from Deep-Powerdown or after 
Vcc transitions below V|_ko> is FFH, or Read Array 
Mode. 


After program or erase is complete, even after Vpp 
transitions down to Vppi_, the Command Register 
must be reset to read array mode via the Read Array 
command if access to the memory array is desired. 


Power Up/Down Protection 

The 28F001BX is designed to offer protection 
against accidental erasure or programming during 
power transitions. Upon power-up, the 28F001BX is 
indifferent as to which power supply, Vpp or Vcc, 
powers up first. Power supply sequencing is not re- 
quired. Internal circuitry in the 28F001BX ensures 
that the Command Register is reset to Read Array 
mode on power up. 


A system designer must guard against spurious 
writes for Vcc voltages above V[_ko when Vpp is 
active. Since both WE# and CE# must be low for a 
command write, driving either to Vm will inhibit 
writes. The Command Register architecture provides 
an added level of protection since alteration of mem- 
ory contents only occurs after successful completion 
of the two-step command sequences. 


Finally, the device is disabled, until RP# is brought 
to Vm, regardless of the state of its control inputs. 
This provides an additional level of protection. 



28F001BX Power Dissipation 

When designing portable systems, designers must 
consider battery power consumption not only during 
device operation, but also for data retention during 
system idle time. Flash nonvolatility increases us- 
able battery life because the 28F001BX does not 
consume any power to retain code or data when the 
system is off. 

In addition, the 28F001BX’s Deep-Powerdown mode 
ensures extremely low power dissipation even when 
system power is applied. For example, laptop and 
other PC applications, after copying BIOS to DRAM, 
can lower RP# to V||_, producing negligible power 
consumption. If access to the boot code is again 
needed, as in case of a system RESET#, the part 
can again be accessed, following the tpHAV wakeup 
cycle required after RP# is first raised back to Vm. 
The first address presented to the device while in 
powerdown requires time tpHAV, after RP# tran- 
sitions high, before outputs are valid. Further ac- 
cesses follow normal timing. See AC Characteris- 
tics — Read-Only Operations and Figure 1 2 for more 
information. 
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ABSOLUTE MAXIMUM RATINGS* 

Operating Temperature 

During Read 

During Erase/ Program 

Operating Temperature 

During Read 

During Erase/Program 

Temperature under Bias 
Temperature under Bias 
Storage Temperature. . . 

Voltage on Any Pin 

(except Ag, RP#, OE#, Vcc and Vpp) 

with Respect to GND -2.0V to 7.0V( 3 ) 

Voltage on Ag, RP#, and OE# 

with Respect to GND -2.0V to 13.5V( 3 - 4) 

Vpp Program Voltage 
with Respect to GND 

During Erase/Program -2.0V to 14.0V( 3 > 4) 

Vcc Supply Voltage 

with Respect to GND -2.0V to 7.0V( 3 ) 

Output Short Circuit Current 100 mA( 5 ) 

NOTES: 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 

* WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings " may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


1. Operating temperature is for commercial product defined by this specification. 

2. Operating temperature is for extended temperature product defined by this specification. 

3. Minimum DC voltage is -0.5V on input/output pins. During transitions, this level may undershoot to -2.0V for periods 
<20 ns. Maximum DC voltage on input/output pins is Vqc + 0.5V which, during transitions, may overshoot to Vcc + 2.0V 
for periods <20 ns. 

4. Maximum DC voltage on Ag or Vpp may overshoot to + 14.0V for periods <20 ns. 

5. Output shorted for no more than one second. No more than one output shorted at a time. 


0°C to 70°C(1) 

0°C to 70°Cd) 

— 40°C to +85°C(2) 

— 40°C to +85°C(2) 

. . — 1 0°C to 80°Cd) 

— 20°C to +90°C(2) 
. . . — 65°C to 125°C 


OPERATING CONDITIONS 


Symbol 

Parameter 

Min 

Max 

Unit 

Ta 

Operating Temperature^) 

0 

70 

°C 

t a 

Operating Temperature^) 

-40 

85 

°C 

Vcc 

Supply Voltage 

4.50 

5.50 

V 


DC CHARACTERISTICS v C c = 5.ov ± 10 %, t a = o°cto +70°C 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Conditions 

IlL 

Input Load Current 

1 



±1.0 

\iA 

Vcc = v cc Max 
Vin = V CC or GND 


Output Leakage Current 

1 



±10 

mi^^i 

Vcc = Vcc Max 
VoUT = Vcc or GND 

•ccs 

Vcc Standby Current 


1 




Vcc = Vcc Max 
CE# = RP# = V| H 

30 

100 

jxA 

Vcc = Vcc Max 

CE# = RP# = Vcc ±0.2V 

■CCD 

Vcc Deep-Powerdown Current 

1 


0.05 

1.0 

fxA 

RP# = GND ±0.2V 
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DC CHARACTERISTICS V C c = 5.0V ±10%, T A = 0°Cto + 70°C (Continued) 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Conditions 

•CCR 

Vqc Read Current 

1 


13 

30 

mA 

V CC = V CC Max » CE# = V|1_ 
f = 8 MHz, l 0 UT = 0 mA 

Iccp 

Vcc Programming Current 

1 


5 

20 

mA 

Programming in Progress 

•CCE 

Vqc Erase Current 

1 


6 

20 

mA 

Erase in Progress 

ICCES 

Vqq Erase Suspend Current 

1,2 


5 

10 

mA 

Erase Suspended 
CE# = Vih 

Ipps 

Vpp Standby Current 

1 


ED 

±10 


Vpp ^ Vqq 




B 

Vpp > Vqq 

IPPD 

Vpp Deep-Powerdown Current 

1 


0.80 


fxA 

RP# = GND ±0.2V 

Ippp 

Vpp Programming Current 


■ 

6 


mA 

Vpp = VppH 

Programming in Progress 

•PPE 

Vpp Erase Current 


■ 

■ 


mA 

Vpp = VppH 
Erase in Progress 

IPPES 

Vpp Erase Suspend Current 





juA 

Vpp = VppH 
Erase Suspended 

•id 

Ag Intelligent Identifier Current 

1 



500 


Ag = V| D 


Input Low Voltage 


-0.5 


0.8 

m 


EHf 

Input High Voltage 


2.0 



B 


BU 

Output Low Voltage 



■ 

b 

H 



Output High Voltage 

■ 

H 



V 

Vcc = Vqc Min 
Ioh = 2.5 mA 

V|D 

Ag Intelligent Identifier Voltage 


11.5 


13.0 

V 


VpPL 

Vpp during Normal Operations 




6.5 

V 


VppH 

Vpp during Prog/Erase Operations 



12.0 

12.6 

D 


Vlko 

Vqq Erase/Write Lock Voltage 


m 



D 


BWMI 



11.4 


12.6 

D 

Boot Block Prog/Erase 


DC CHARACTERISTICS v C c = 5.ov ±io%, t a = -40°cto +85°c 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Conditions 

IlL 

Input Load Current 

1 



±1.0 

jllA 

Vqc = Vqc Max 
V|N = Vqq or GND 

•lo 

Output Leakage Current 

1 



±10 

jllA 

Vcc = Vqq Max 
VoilT “ Vcc or GND 

ices 

Vqq Standby Current 



1.2 

2.0 

mA 

V CC = Vcc Max 
CE# = RP# = V| H 

30 

150 

juA 

V CC = Vcc Max 

CE# = RP# = Vqq ±0.2V 

•CCD 

Vqq Deep-Powerdown Current 

1 


0.05 

2.0 

juA 

RP# = GND ±0.2V 
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DC CHARACTERISTICS V C c = 5.0V ±10%, T a = -40°Cto + 85°C (Continued) 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 


Test Conditions 

•CCR 

Vcc Read Current 

1 


13 


mA 


Iccp 

Vcc Programming Current 

1 


5 

20 


Programming in Progress 

•CCE 

Vcc Erase Current 

1 


6 

20 

mA 

Erase in Progress 

Icces 

Vcc Erase Suspend Current 

1,2 


5 

10 

mA 

Erase Suspended 
CE# = V| H 

ipPS 

Vpp Standby Current 

1 


±1 

±15 


Vpp £ Vcc 



400 


Vpp > Vcc 

•PPD 

Vpp Deep-Powerdown Current 

1 


0.80 

1.0 

JLtA 

RP# = GND ±0.2V 

Ippp 

Vpp Programming Current 

1 


6 


ju,A 


IPPE 

Vpp Erase Current 

1 


■ 




>PPES 

Vpp Erase Suspend Current 

1 




jutA 

Vpp = Vppn 
Erase Suspended 

l|D 

Ag Intelligent Identifier Current 

1 



500 

M 

Ag = V|D 

V|L 

Input Low Voltage 


-0.5 


0.8 

D 


V|H 

Input High Voltage 


2.0 


Vcc + 0.5 

D 


V 0 L 

Output Low Voltage 




0.45 

V 

v cc = v cc Min 
Iql = 5.8 mA 

V OH1 

Output High Voltage (TTL) 


n 

■ 


V 

v cc = v cc Min 
Iqh = 2.5 mA 


Output High Voltage (CMOS) 





V 

lOH = -2.5 jaA 

Vqc = Vcc Min 

0 

1 

8 

> 

lOH == — 1 00 ja A 
Vcc = Vcc Min 


Ag Intelligent Identifier Voltage 





V 


SMI 

Vpp during Normal Operations 

3 

0.0 


6.5 

V 



Vpp during Prog/ Erase Operations 



BE 

12.6 

□ 





2.5 



V 


Vhh 

RP#,OE# Unlock Voltage 


11.4 


12.6 

V 

Boot Block Prog/ Erase 


CAPACITANCES t a = 25«C, f = 1 MHz 


Symbol 

Parameter 

Max 

Unit 

Conditions 

C IN 

Input Capacitance 

8 

PF 

V| N = 0V 

C OUT 

Output Capacitance 

12 

PF 

VqUT = 0V 


NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, Vpp = 12.0V, Ta = 25°C. These currents 
are valid for all product versions (packages and speeds). 

2. Icces is specified with the device deselected. If the 28F001 BX is read while in Erase Suspend mode, current draw is the 
sum of Icces and Iccr- 

3. Erase/ Programs are inhibited when Vpp - Vpp[_ and not guaranteed in the range between Vppn and Vpp[_. 

4. Sampled, not 100% tested. 
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AC INPUT/OUTPUT REFERENCE WAVEFORM 


2.4 

0.45 


INPUT 


"\/To 

Ah 


TEST POINTS 

55 


xs 


OUTPUT 


290406-10 

A.C. test inputs are driven at Vqh (2.4 Vjtl) for a Logic “1” and Vql (0-45 V-htl) for a Logic “0”. Input timing begins at 
V|h (2.0 Vjtl) and Vil (0.8 Vjtl)- Output timing ends at V|h and V|[_. Input rise and fall times (10% to 90%) < 10 ns. 


STANDARD TEST CONFIGURATION 
AC TESTING LOAD CIRCUIT 


1.3V 



C L = 100 pF 

Cl Includes Jig Capacitance 
Rl = 3.3 kft 


HIGH SPEED TEST CONFIGURATION 
AC TESTING LOAD CIRCUIT 


1.3V 

I 


DEVICE 

< 

< 


TEST 

_ 

be, 



L 


-o ou 


290406-23 

C L = 30 pF 

Cl Includes Jig Capacitance 
Rl = 3.3 kfi 
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AG CHARACTERISTICS— Read-Only Operations^) 


Symbol 

Parameter 

Notes 

28F001BX-70 

28F001BX-90 

Units 

Vcc = 5V 
±5% 

30 pF 

Vcc = 5V 
±10% 
100 pF 

V CC = 5V 
±10% 
100 pF 

Min 

Max 

Min 

Max 

Min 

Max 

tAVAV 

Read Cycle Time 


70 


75 


90 


ns 

*AVQV 

Address to Output Delay 



70 


75 



ns 

tELQV 

CE# to Output Delay 

2 


70 


75 


90 

ns 

tpHQV 

RP# to Output Delay 



600 


600 


600 

ns 

tGLQV 

OE# to Output Delay 

2 


27 


30 


35 

ns 

*ELQX 

CE# to Output in Low Z 

3 

0 


0 


0 


ns 

*EHQZ 

CE# to Output in High Z 

3 


55 


55 


35 

ns 

tGLQX 

OE# to Output in Low Z 

3 

0 


0 


0 


ns 

tGHQZ 

OE# to Output in High Z 

3 


30 


30 


30 

ns 

tQH 

Output Hold from 
Address CE#, or OE# 
Change, Whichever 
Occurs First 

3 

0 


0 


0 


ns 


NOTES: 

1. See AC Input/Output Reference Waveform for timing measurements. 

2. OE# may be delayed up to tcE-toE after the falling edge of CE# without impact on tcE- 

3. Sampled, but not 100% tested. 

4. See High Speed Test Configuration. 

5. See Standard Test Configuration. 
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intel. 


AC CHARACTERISTICS— Read-Only Operations^) 


Versions( 2 ) 

V CC ±10% 

E28F001BX-120 

N28F001BX-120 

P28F001BX-120 

E28F001BX-150 

TE28F001BX-150 

N28F001BX-150 

TN28F001BX-150 

P28F001BX-150 

Unit 

Symbol 

Parameter 

Notes 


Max 


Max 

*AVAV 

*RC 

Read Cycle Time 




150 



*AVQV ’ 

Ucc 

Address to Output Delay 



120 


150 

S1&9 



CE# to Output Delay 

3 


120 


150 




RP# High to Output Delay 



600 


600 



tOE 

OE# to Output Delay 

3 


50 


55 

I 

tELQX 

Ilz 

CE# to Output LowZ 

4 

0 


0 



tEHQZ 

tHZ 

CE# High to Output High Z 

4 


55 


55 

ns 



OE# to Output LowZ 

4 

0 


0 


ns 

tGHQZ 

*DF 

OE# High to Output High Z 

4 


30 


30 



tQH 

Output Hold from 
Addresses, CE # or OE # 
Change, Whichever is First 

4 

0 


0 


ns 


NOTES: 

1. See AC Input/Output Reference Waveform for timing measurements. 

2. Model Number Prefixes: E = TSOP (Standard Pinout), N = PLCC, P = PDIP, T = Extended Temperature. Refer to 
standard test configuration. 

3. OE# may be delayed up to tcE-toE after the falling edge of CE# without impact on tcE- 

4. Sampled, not 100% tested. 





















Figure 12. AC Waveform for Read Operations 
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AC CHARACTERISTICS— Write/Erase/Program OperationsO. 9) 


Symbol 

Parameter 

Notes 

28F001BX-70 

28F001BX-90 

Units 

Vcc = 5V 
± 5%C°) 
30 pF 


Vcc = 5V 
±10%(11) 
100 pF 







*AVAV 

twc 

Write Cycle Time 




mm 


90 


ns 

tpHWL 

tps 


2 

480 

■ 

480 

B 


■ 

ns 


tcs 

CE# Setup to WE# Going Low 


10 


10 


10 


ns 


t WP 

WE# Pulse Width 


35 


40 


40 


ns 

Q 

tpHS 

RP# Vhh Setup to WE# Going 
High 

2 

100 


on 


100 


ns 

tVPWH 

tVPS 

Vpp Setup to WE# Going High 

2 

100 







UVWH 

tAS 

Address Setup to WE# Going 
High 

3 

35 

■ 


B 

m 


ns 

tDVWH 

tos 

Data Setup to WE# Going High 

4 



s 


40 



tWHDX 

*DH 

Data Hold from WE# High 


10 


m 


10 





Address Hold from WE# High 


10 


10 


10 


ns 

IffiSSfl 

EB 

CE# Hold from WE# High 


El 


10 


10 


fads' J 

M 


WE# Pulse Width High 


E3 




bbui 





Duration of Programming 
Operation 

m 

H 

■ 


B 

H 





Duration of Erase Operation 
(Boot) 

m 


B 

m 

B 

H 


B 




m 



m 

B 

mu 


B 



Duration of Erase Operation 
(Main) 

m 


B 


B 


i 

B 

Kyi 


Write Recovery before Read 


0 


0 


0 


I 

tQWL 

tvPH 

Vpp Hold from Valid SRD 

2,6 

0 




0 



tQVPH 

tpHH 

RP# V H h Hold from Valid SRD 

2,7 

0 


0 


0 


ns 

tpHBR 


Boot-Block Relock Delay 

2 


100 


100 


100 

ns 



NOTES: 

1. Read timing characteristics during erase and program operations are the same as during read-only operations. Refer to 
AC Characteristics for Read-Only Operations. 

2. Sampled, not 100% tested. 

3. Refer to Table 3 for valid Ain for byte programming or block erasure. 

4. Refer to Table 3 for valid Din for byte programming or block erasure. 

5. The on-chip Write State Machine incorporates all program and erase system functions and overhead of standard Intel 
Flash Memory, including byte program and verify (programming) and block precondition, precondition verify, erase and erase 
verify (erasing). 

6. Program and erase durations are measured to completion (SR.7 = 1). Vpp should be held at Vppn until determination of 
program/erase success (SR.3/4/5 = 0). 

7. For boot block programming and erasure, RP# should be held at Vhh until determination of program/erase success 
(SR.3/4/5 = 0). 

8. Alternate boot block access method. 

9. Erase/Program Cycles on extended temperature products is 10,000 cycles. 

10. See high speed test configuration. 

1 1 . See standard test configuration. 
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28F001 BX-T/28F001 BX-B 


AC CHARACTERISTICS — Write/Erase/Program Operations^ 9 ) 


Versions Vcc±10%( 10 ) 

28F001BX-120 

28F001BX-150 

Unit 

Symbol 

Parameter 

Notes 

Min 

Max 

Min 

Max 

*AVAV 


Write Cycle Time 




150 


ns 

tpHWL 

tps 

RP# High Recovery to WE# Going Low 

2 





ns 

*ELWL 

tcs 

CE# Setup to WE# Going Low 


10 


mm 


ns 

tWLWH 

t w p 

WE# Pulse Width 


50 




ns 

tPHHWH 

tpHS 

RP# Vhh Setup to WE# Going High 




100 


ns 


tvps 

Vpp Setup to WE# Going High 

2 



100 


ns 



Address Setup to WE# Going High 

3 





ns 



Data Setup to WE# Going High 

4 

imitM 


mm 


jj||J 

tWHDX 

*DH 

Data Hold from WE# High 


mm 


10 



tWHAX 

*AH 

Address Hold from WE# High 




10 


ns 



CE# Hold from WE# High 







tWHWL 

tWPH 

WE# Pulse Width High 







tWHQVI 


Duration of Programming Operation 

mi 

15 


15 


/AS 



Duration of Erase Operation (Boot) 

mi 



1.3 


sec 

0959 


Duration of Erase Operation (Parameter) 

5,6,7 

mm 


1.3 


sec 



Duration of Erase Operation (Main) 

mu 





sec 



Write Recovery before Read 


0 


0 


/AS 

tQWL 

tVPH 

Vpp Hold from Valid SRD 


0 


0 



tQVPH 

tpHH 

RP# V H h Hold from Valid SRD 

2,7 

0 


0 


ns 

tpHBR 


Boot-Block Relock Delay 

2 


100 


100 

ns 



PROM Programmer Specifications 


Versions Vcc ±10% 

28F001BX-120 

28F001BX-150 

Unit 


Parameter 








OE# Vhh Setup to WE# Going Low 

2,8 

480 


480 


ns 

tWHGH 


OE# V H h Hold from WE# High 


480 


480 


ns 


NOTES: 

1 . Read timing characteristics during erase and program operations are the same as during read-only operations. Refer to 
AC Characteristics for Read-Only Operations. 

2. Sampled, not 100% tested. 

3. Refer to Table 3 for valid Ain for byte programming or block erasure. 

4. Refer to Table 3 for valid Din for byte programming or block erasure. 

5. The on-chip Write State Machine incorporates all program and erase system functions and overhead of standard Intel 
Flash Memory, including byte program and verify (programming) and block precondition, precondition verify, erase and erase 
verify (erasing). 

6. Program and erase durations are measured to completion (SR.7 = 1). Vpp should be held at Vppn until determination of 
program/erase success (SR.3/4/5 = 0). 

7. For boot block programming and erasure, RP# should be held at Vhh until determination of program/erase success 
(SR.3/4/5 = 0). 

8. Alternate boot block access method. 

9. Erase/Program Cycles on extended temperature products is 10,000 cycles. 

1 0. See standard test configuration. 
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ERASE AND PROGRAMMING PERFORMANCE 


Parameter 

Notes 

28F001BX-120 

28F001BX-150 

Unit 

Min 

Typd) 

Max 

Min 

Typd) 

Max 

Boot Block Erase Time 

2 


2.10 

14.9 


2.10 

14.9 

Sec 

Boot Block Program Time 

2 



0.52 


0.15 



Parameter Block Erase Time 

2 



14.6 


2.10 

B3 


Parameter Block Program Time 

2 







Sec 

Main Block Erase Time 

2 







Sec 

Main Block Program Time 

2 



7.34 


2.10 

7.34 

Sec 

Chip Erase Time 

2 


10.10 




65 

Sec 

Chip Program Time 

2 


2.39 

8.38 


2.39 

8.38 

Sec 


NOTES: 

1. 25°C, 12.0 V PP . 

2. Excludes System-Level Overhead. 
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Figure 17. AC Waveform for Write Operations 
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OE# (G) 


WE# (W) 


DATA (D/Q) 


WRITE PROGRAM OR 
ERASE SETUP COMMAND 


WRITE 

VALID ADDRESS AND DATA (PROGRAM) 
OR ERASE CONFIRM COMMAND 


AUTOMATED PROGRAM 
OR ERASE DELAY 


READ STATUS 
REGISTER DATA 
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Figure 18. Alternate Boot Block Access Method Using OE# 
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ALTERNATE CE#-CONTROLLED WRITESd) 


Symbol 

Parameter 

Notes 

28F001BX-70 

28F001BX-90 

Units 

V CC = 5V 
±5%(8) 
30 pF 

Vcc = 5V 
± 10%(9) 
100 pF 

V C c = 5V 
± 10%(9) 

100 pF 





Min 

Max 

*AVAV 

twc 

Write Cycle Time 




75 


90 


ns 

tpHEL 

tps 

RP# High Recovery to CE# 
Going Low 

2 

480 

■ 

480 


480 

§H 

ns 

tWLEL 

tws 

WE# Setup to CE# Going Low 


0 


0 


10 


ns 

tELEH 

*CP 

CE# Pulse Width 


50 


55 


55 





RP# Vhh Setup to CE# Going 
High 



■ 



100 


ns 


*VPS 

Vpp Setup to CE# Going High 

2 

100 






ns 



Address Setup to CE# Going 
High 

3 

35 


40 

■ 



ns 

tDVEH 

tos 

Data Setup to CE# Going High 

4 

35 


40 


40 


E3 

*EHDX 

tDH 

Data Hold from CE# High 




10 


10 


E8 

*EHAX 

*AH 

Address Hold from CE# High 


10 


El 


10 


ns 



WE# Hold from CE# High 


0 


m 


0 



*EHEL 

<EPH 

CE# Pulse Width High 


20 


20 


20 


ns 

tEHQVI 


Duration of Programming 
Operation 

5,6 

15 


15 


15 


fJLS 

tEHQV2 


Duration of Erase Operation 
(Boot) 

5,6 

1.3 


1.3 


1.3 


sec 

*EHQV3 


Duration of Erase Operation 
(Parameter) 

5,6 

1.3 


1.3 


1.3 


sec 

tEHQV4 


Duration of Erase Operation 
(Main) 



■ 


■ 

3.0 


sec 

tEHGL 


Write Recovery before Read 


0 


0 


0 


JlS 

tQVVL 

tVPH 

Vpp Hold from Valid SRD 

2,5 

0 


0 


0 


ns 

tQVPH 

tpHH 

RP# V H h Hold from Valid SRD 

2,6 

0 


0 


0 


ns 

tpHBR 


Boot-Block Relock Delay 

2 


100 


100 


100 

ns 


NOTES: 

1. Chip-Enable Controlled Writes: Write opej-ations are driven by the valid combination of CE# and WE#. In systems where 
CE# defines the write pulse width (within a longer WE# timing waveform), all set-up, hold and inactive WE# times should 
be measured relative to the CE# waveform. 

2. Sampled, not 100% tested. 

3. Refer to Table 3 for valid Ain for byte programming or block erasure. 

4. Refer to Table 3 for valid Din for byte programming or block erasure. 

5. Program and erase durations are measured to completion (SR.7 = 1). Vpp should be held at Vppn until determination of 
program/erase success (SR.3/4/5 = 0). 

6. For boot block programming and erasure, RP# should be held at Vhh until determination of program/erase success 
(SR.3/4/5 = 0). 

7. Alternate boot block access method. 

8. See high speed test configuration. 

9. See standard text configuration. 
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ALTERNATE CE# -CONTROLLED WRITES^) 


Versions Vcc ±10% 

28F001BX-120 

28F001BX-150 


Symbol 

Parameter 

Notes 



9Q9 


UVAV 

twc 

Write Cycle Time 






ns 

tpHEL 

tps 

RP# High Recovery to CE# Going Low 

2 





|Q[ 

l WLEL 

tws 

WE# Setup to CE# Going Low 


0 


0 


Q 

tELEH 

tcp 

CE# Pulse Width 


70 


m ■ 



tpHHEH 

tpHS 

RP# Vhh Setup to CE# Going High 

2 

100 




ns 


*VPS 

Vpp Setup to CE# Going High 

2 



100 


ns 


Us 

Address Setup to CE# Going High 




50 


ns 

tDVEH 

*DS 

Data Setup to CE# Going High 

4 

50 


50 


ns 

tEHDX 

*DH 

Data Hold from CE# High 


10 


mm 



*EHAX 

Uh 

Address Hold from CE# High 




mm 



tEHWH 

tWH 

WE# Hold from CE# High 


0 


0 



tEHEL 

*EPH 

CE# Pulse Width High 


25 







Duration of Programming Operation 


15 


15 


^9 



Duration of Erase Operation (Boot) 

5,6 

1.3 


1.3 


sec 

tEHQV3 


Duration of Erase Operation (Parameter) 

5,6 



1.3 


sec 

tEHQV4 


Duration of Erase Operation (Main) 

5,6 

3.0 


3.0 


sec 



Write Recovery before Read 


0 


0 


JULS 


tvPH 

Vpp Hold from Valid SRD 

2,5 

0 


0 


ns 

tQVPH 

tpHH 

RP# V H h Hold from Valid SRD 


0 


0 





Boot-Block Relock Delay 

2 


100 


100 

ns 


PROM Programmer Specifications 


Versions Vcc ±10% 

28F001BX-120 

28F001BX-150 

Unit 

Symbol 

Parameter 

Notes 



Min 

Max 

tGHHEL 

OE# Vhh Setup to CE# Going Low 

mm 

480 





tEHGH 

OE# Vhh Hold from CE# High 

mm 

480 




ns 


NOTES: 

1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CE# and WE#. In systems where 
CE# defines the write pulse width (within a longer WE# timing waveform), all set-up, hold and inactive WE# times should 
be measured relative to the CE# waveform. 

2. Sampled, not 100% tested. 

3. Refer to Table 3 for valid Ain for byte programming or block erasure. 

4. Refer to Table 3 for valid Din for byte programming or block erasure. 

5. Program and erase durations are measured to completion (SR.7 = 1). Vpp should be held at Vppn until determination of 
program/erase success (SR.3/4/5 = 0). 

6. For boot block programming and erasure, RP# should be held at Vhh until determination of program/erase success 
(SR.3/4/5 = 0). 

7. Alternate boot block access method. 
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Figure 19. Alternate AC Waveform for Write Operations 
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ORDERING INFORMATION 


T P 2 8 

3 

0 

0 

0 

B 

0 

0 

□ 

0 

0 

□ 


PACKAGE 

E STANDARD 32 LEAD TSOP 
N 32 LEAD PLCC 
P 32-PIN PLASTIC DIP 


L ACCESS SPEED (ns) 
70 ns 
90 ns 
1 20 ns 
150 ns 


TEMPERATURE RANGE 
T = EXTENDED (-40°C to +85°C) 
BLANK = COMMERCIAL (0°C to +70°C) 


>- T TOP BOOT DEVICE 
B BOTTOM BOOT DEVICE 


290406-18 


VALID COMBINATIONS: 



32-Lead TSOP 

32-Lead PLCC 

32-Pin PDIP 

Commercial 

E28F001BX-T70 

N28F001 BX-T70 

P28F001 BX-T70 


E28F001BX-T90 

N28F001 BX-T90 

P28F001 BX-T90 


E28F001BX-T120 

N28F001 BX-T 1 20 

P28F001 BX-T 1 20 


E28F001BX-T150 

N28F001 BX-T 1 50 

P28F001 BX-T 1 50 






E28F001BX-B70 

N28F001 BX-B70 

P28F001 BX-B70 


E28F001 BX-B90 

N28F001BX-B90 

P28F001 BX-B90 


E28F001BX-B120 

N28F001 BX-B1 20 

P28F001BX-B120 


E28F001BX-B150 

N28F001 BX-B1 50 

P28F001BX-B150 





Extended 

TE28F001 BX-T90 

TN28F001 BX-T90 

TP28F001 BX-T90 


TE28F001 BX-T 1 50 

TN28F001 BX-T 1 50 

TP28F001 BX-B90 






TE28F001 BX-B90 

TN28F001 BX-B90 



TE28F001 BX-B1 50 

TN28F001 BX-B1 50 



ADDITIONAL INFORMATION 


ER-20 “ETOX II Flash Memory 

Order 

Number 

294005 

AP-31 6 “Using Flash Memory for In- 

Technology” 


System Reprogrammable 

RR-60 “ETOX II Flash Memory 

293002 

Nonvolatile Storage” 

Reliability Data Summary” 


AP-341 “Designing an Updatable BIOS 


Using Flash Memory” 


Order 

Number 

292046 


292077 


4-339 




28F00 1 BX-T /28F00 1 BX-B 


iny 


REVISION HISTORY 


Number 

Description 

-004 

Removed Preliminary classification. 

Latched address Aie in Figure 5. 

Updated Boot Block Program and Erase section: “If boot block program or erase is attempted 
while RP# is at Vih, either the Program Status or Erase Status bit will be set to “1”, 
reflective of the operation being attempted and indicating boot block lock.” 

Updated Figure 11, 28F001BX Erase Suspend/Resume Flowchart 
Added DC Characteristics typical current values 

Combined Vpp Standby current and Vpp Read current into one Vpp Standby current spec with 
two test conditions (DC Characteristics table) 

Added maximum program/erase times to Erase and Programming Performance table. 

Added Figures 13-16 

Added Extended Temperature proliferations 

-005 

PWD changed to RP# for JEDEC standardization compatibility 
Revised symbols, i.e.; CE, OE, etc. to CE#, OE#, etc. 

-006 

Added specifications for -90 and -70 product versions. 
Added Vqh CMOS Specification. 
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intel. 

1.0 INTRODUCTION 

Intel’s Boot Block Flash Memories provide updatable 
code and data storage for a wide range of applications 
including cellular phones, modems, PC BIOS, automo- 
bile engine control and many others. System designers 
reduce system cost and improve reliability by using 
Intel’s flash memory parameter blocks to replace 
EEPROM for parameter data storage. 

Using software techniques described in this paper, de- 
signers can replace EEPROM with Intel’s flash memo- 
ry parameter blocks in many applications that previ- 
ously used EEPROM for parameter data storage. For 
example, cellular phone designs use Intel’s flash memo- 
ry parameter blocks to store data such as telephone 
numbers, time of use and user identification informa- 
tion. Automobile manufacturers use Intel’s parameter 
blocks in engine control applications to store fault 
codes and engine optimization parameters. In each of 
these cases, manufacturers save both EEPROM com- 
ponent and inventory costs by using Intel’s Boot Block 
Flash Memory for parameter storage in addition to 
storing application code. Additionally, improved reli- 
ability is achieved with lower system device and pin 
counts. Finally, the amount and frequency of parame- 
ter storage is improved. 

This paper describes a linked-list data structure for 
storing parameters in Intel’s flash memory parameter 
blocks using a scheme that emulates byte alterablility. 
A review of flash memory fundamentals shows how 
flash is used in a system and defines the constraints for 
implementing the software scheme. Reference source 
code will be available from Intel in the near future. 


2.0 REVIEW OF FLASH MEMORY 
FUNDAMENTALS 

Flash technology brings unique attributes to system 
memory. Like RAM, flash memory is electrically modi- 
fied in-system. Like ROM, flash is nonvolatile, retain- 
ing data after power is removed. However, unlike 
RAM, flash cannot be rewritten on a byte basis. Flash 
memory reads and writes on a byte-by-byte basis, and 
adds a new requirement: it must be erased before it can 
be rewritten. Table 1 shows each flash memory opera- 
tion, the size of data, and the time it takes for each 
operation. 

Writing (or programming) flash is the process of chang- 
ing “l”s to “0”s. Erasing flash is the process of chang- 
ing “0”s to ‘T”s Flash memory is erased on a block-by- 
block basis. Blocks are defined by a fixed address range 
as shown in Intel’s 4-M Boot Block Memory Map in 
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Figure 1. When a block is erased, all address locations 
within a block are erased in parallel, independent of 
other blocks in the flash memory device. 

Intel’s Flash Memory Boot Block products are speci- 
fied to work over 100,000 cycles when operating at 5V 
Vcc- A cycle is defined as an Erase operation. For ex- 
ample, if each of the 8 Kbytes in one of the parameter 
blocks are successively programmed and then the block 
erased, 1 cycle has completed. This specification is im- 
portant in determining how many parameters can be 
stored and how many times those parameters can be 
updated. 

Since flash memory cannot be re-written to the same 
address location without first erasing an entire block of 
memory, software techniques are used to emulate byte 
alterability using the two 8-KB parameter blocks 
shown in Figure 1. 


Table 1. Flash Memory Read, 
Write and Erase Operations* 


Operation 

Min 

Segment 

Typical 

Time 

Max 

Time 

Read 

Byte 

60 ns 

60 ns 

Write 

Byte 

10 jlls 

160 JLLS 

Erase 

Block 
(8 KB) 

0.8 sec 

4.4 sec 


'Specifications for Intel’s SmartVoltage 4-M boot block 
product operating in x8 mode at 5.0V Vcc and 5.0V Vpp. 
Refer to the SmartVoltage 2/4-M Datasheets. • 


3.0 SYSTEM OPERATION 

In addition to storing parametric data, Intel’s boot 
block flash memory is often used to store updatable 
application code. In many systems, the hardware-locka- 
ble boot block stores the kernel code necessary to ini- 
tialize the system and invoke a recovery routine if code 
is lost. The boot block also typically stores the code 
necessary to program and erase the flash memory.O) 
Today, flash memory products do not provide the capa- 
bility to read from one address location in the flash 
device while writing to another address in the same 
device. This means any code that writes to flash must 
be downloaded to RAM. 


1 Program and Erase code for Intel’s boot block flash 
memory products is available on the Intel BBS. 


4-343 



AP-604 


(Word Addresses) 

3FFFFH 

3E000H 

3DFFFH 

3D000H 

3CFFFH 

3C000H 

16-Kbyte BOOT BLOCK 


8-Kbyte PARAMETER BLOCK 


8-Kbyte PARAMETER BLOCK 


3BFFFH 

30000H 

96-Kbyte MAIN BLOCK 


2FFFFH 

128-Kbyte MAIN BLOCK 


20000H 



1FFFFH 

128-Kbyte MAIN BLOCK 


10000H 



OFFFFH 

. 

128-Kbyte MAIN BLOCK 


00000H 
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Figure 1. Intel’s Boot Block Flash Memory Map 



Figure 2. For In-System Write to Flash, Code is 
Executed out of RAM 


intel* 

4.0 SOFTWARE SCHEME FOR 
EMULATING BYTE 
ALTERABILITY 

By using the two parameter blocks in Intel’s boot block 
components along with software techniques, data can 
be stored a byte at a time and the Erase operation of 
flash can be completed as a background task, to emu- 
late byte alterability. 


5.0 PARAMETER DATA STRUCTURE 

A linked-list data structure provides an arrangement of 
data that is well-suited to the needs of flash memory. 
For example, suppose we want to store three parame- 
ters that will be updated. We store each parameter in a 

record. Each record has two fields: parameter value 

and next record. The first field contains the value of 

the parameter. The second field is a pointer containing 
the address of the next record for that parameter. Par- 
ameterX is a pointer variable that contains the address 
of the first record for that parameter. So Parameter 1 
represents an address. Stored at that address is the ad- 
dress of the first record of Parameter 1. The first record 
contains the first Parameter 1 value and the address of 
the second Parameter 1 record. The second record con- 
tains the latest value for that parameter and the address 
of the third record, and so on. In the last record, the 

next record field contains FFH to indicate there are 

no more records. FFH is used here to indicate no more 
records, since this is the default state of an erased byte 
in flash memory. Each time a parameter is updated, the 
code searches for the first available address location in 
the parameter block, writes the new value in the value 
field of the new record, and then updates the next rec- 

ord field of the previous record. So, each record in- 
cludes a value and a pointer, or link to the next record. 
Such a data structure is called a linked list. By using a 
linked list the system can quickly find the latest value 
for a given parameter. 

Figure 3 shows an example of the linked-list structure. 
To simplify the example, a one-byte field is used for 

both parameter value and next record. In an actual 

implementation, at least two bytes would be needed for 

next record, which points to another location in the 

parameter block. The number of bytes required for pa- 
rameter value will depend on the specific parameter 

information being stored. 
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Address 

Content 


Parameterl 

01H 

Parameter 1 Pointer variable 

Parameter 

03H 

Parameter 2 Pointer variable 

Parameter^ 

05H 

Parameter 3 Pointer variable 

01H 

F8H 

Parameter 1 value = F8H 

02H 

07H v 

Parameter 1 next_record = 07H 

03H 

22H \ 

Parameter 2 value = 22H 

04H 

09H \ \ 

Parameter 2 next_record = 09H 

05H 

44H Vi 

Parameter 3 value = 44H 

06H 

PPH V 

Parameter 3 next_record = FFH = latest 

07H 

55H A 1 

j Parameter 1 value = 55H 

08H 

OBH \ J 

Parameter 1 next_record = OBH 

09H 

F2H^X 

Parameter 2 value = F2H 

OAH 

FFH 

) Parameter 2 next_record = FFH = latest 

OBH 

F4H*" 

Parameter 1 value = F4H 

OCH 

FFH 

Parameter 1 next_record = FFH = latest 
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Figure 3. A Linked List Parameter Record 
Includes Two Fields: Parameter_Value and 
Next— Record 


An alternative approach to using a linked-list structure, 
is to define a parameter ID field and a parameter status 
field that indicates whether the current parameter rec- 
ord is the latest. In this alternate scheme, to retrieve the 
latest parameter, the system reads through every pa- 
rameter instance until it finds the latest value for a giv- 
en parameter. 


6-0 BLOCK TRANSFERS 

Parameters are stored until the parameter block is filled 
or until there is not enough memory in the parameter 
block to store another complete record. When this 
point is reached, the latest value for each parameter is 
transferred to the second parameter block, and the 
linked-list data structure continues in the second pa- 
rameter block. 

A Block Header record at the beginning of each pa- 

rameter block indicates the status of the block. That is, 
information such as which parameter block is the active 
block, if the block is transferring data, and if the block 
is erased. 


7.0 ERASING THE PARAMETER 
BLOCK 


After the valid parameters are transferred from the first 
parameter block to the second, the first parameter 
block is erased. Recall that flash memory requires ap- 
proximately half a second to erase each parameter 
block. Since this much time may not be available dur- 
ing system operation, Intel’s flash memory products 
feature an Erase Suspend command. With this com- 
mand, the Erase operation can be suspended to allow 
the system to read from another block in the device. 
When an Erase Suspend command is given to the flash 
memory, the Erase operation is suspended and the 
memory enters an erase suspend state where the system 
can read from another block in the flash memory. 
When time is available again for erasure, the Erase Re- 
sume command instructs the flash memory to continue 
erase from the point where it previously suspended 
erase. This allows the Erase operation to be implement- 
ed within a finite software loop time, by using multiple 
calls. Once the first parameter block is completely 
erased, it is ready to store parameter records after the 
second parameter block is filled. It is important to note 
that no new parameters may be written until the Block 
Erase operation completes. Current boot block flash 
memories do not allow writes while erase is suspended. 
See Figure 4 for a review of the parameter storage 
scheme. 



8.0 SYSTEM REQUIREMENTS 

As described earlier, RAM is required to execute code 
during program and erase operations. The amount of 
RAM required depends on the complexity of the pa- 
rameter storage data base. The code that must be 
downloaded to RAM includes the flash memory read, 
write and erase routines. The size of this code is in the 
range of 512 bytes to 1 Kbyte. In addition, Flash mem- 
ory space will be necessary to store the program code. 
Reference code that will be available from Intel, is ap- 
proximately 15 KB in size. Only a small subset if this, 
approximately 1 KB, is downloaded to RAM. 

Another system requirement is an adequate Vpp volt- 
age for write and erase. Many of today’s flash memory 
products require 12V to write and erase in-system. In- 
tel’s new SmartVoltage products feature 5V Write and 
Erase operation when 12V is not available. 
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Step 1: Store parameter records in Parameter Block 1. 

PARAMETER BLOCK 1 


PARAMETER BLOCK 2 


block_status record 


block_status record 



parameter records 


erased 


Step 2: When Parameter Block 1 fills up, transfer the latest parameter records to 

Parameter Block 2, and change the block_status records 

PARAMETER BLOCK 1 


PARAMETER BLOCK 2 


• ■ 

block_status record 


block_status record 



• , 

. 

parameter records 

■ 

► 



Step 3: Store parameter records in Parameter Block 2. Erase Parameter Block 1, using 

the Erase Suspend command to return to reading flash, when necessary. 

PARAMETER BLOCK 1 


PARAMETER BLOCK 2 


block_status record 


block_status record 



erased 


parameter records 






292148-4 


Figure 4. Using Two Parameter Blocks to Emulate Byte Alterability 


9.0 POWER LOSS 

What if power is lost in the middle of an erase or in the 
process of updating parameter values? Power loss can 
be reliably handled by defining additional fields in both 
the parameter and block records. For example, in addi- 
tion to the parameter_value and next record fields 

that we defined for our parameter record, we can define 


a parameter status field. One status field bit indicates 

that a parameter update is beginning and another that 
the parameter update has completed. So, if we lose 
power in the process of updating a parameter, we know 
the status of each parameter entry when power is re- 
stored. For example, when power is restored, if we find 
that the status bit reflects that a parameter update be- 
gan but did not finish, we know that record is invalid 
and should be discarded. The same concept can be 
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applied to the block status record to handle Erase op- 

erations that may be interrupted by power failure as 
well as parameter transfers between blocks. 

10.0 INITIALIZATION 

An initialization process determines the state of the pa- 
rameter blocks. By reading the block status record 

you can determine which block is the active block and 
whether the other block must be erased. Upon the first 
initialization, the parameter blocks can be erased and 
the block status records created. 


11.0 BIT MANIPULATION 

Earlier, we reviewed how flash memory is read and 
programmed on a byte-by-byte basis, and erased on a 
block basis. Intel’s flash memory actually has the capa- 
bility to be programmed one bit (or multiple bits) at a 
time. Recall flash memory programming is the process 
of changing “l”s to “0”s. Single bits can be pro- 
grammed by masking the other bits in a byte or word 
with “l”s as shown in Figure 5. By taking advantage of 
this feature, you can minimize the memory space neces- 
sary for the various status fields. 


Example 1 : 
1111 1111 
0111 1111 

Memory Contents 
Program Data 

0111 1111 

Resultant Memory Contents 

Example 2: 
0111 1111 
1011 1111 

Memory Contents 
Program Data 

0011 1111 

Resultant Memory Contents 

Example 3: 
0011 1111 
0001 1111 

Memory Contents 
Program Data 

0001 1111 

Resultant Memory Contents 
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Figure 5. Flash Memory can be Programmed 
a Bit at a Time by Masking all 
Other Bits in a Byte with “1”s 


12.0 TIMING 

System timing analysis is required to determine the 
amount of time available for: 

• Reading parameters 

• Downloading write/erase code to RAM 

• Writing parameters 

• Transferring parameters to a new block 

• Erasing a parameter block 

Precise timing will depend on the specific system imple- 
mentation. In addition to the device timing, software 
overhead timing should be considered. 

The time required for reading parameters will depend 
on the size of each parameter record and the number of 
parameter record instances that must be read before 
reaching the valid parameter record. Multiply the num- 
ber of byte or word reads by the system read cycle time 
to determine the total time for reading a valid parame- 
ter. 

Each time a Write or Erase operation is executed on the 
flash memory, a sub-routine containing the program 
and erase drivers must first be downloaded to RAM. 
The time required for downloading this code to RAM 
depends on the size of the code, which is likely to be 
1 KB or less. Multiplying the code size by the write 
cycle time determines the time for downloading the 
code to RAM. 

To determine the maximum time required for writing a 
parameter, the worst case word or byte write time is 
needed for the flash memory component. By multiply- 
ing the worst-case word write time by the number of 
words per parameter record, the worst-case parameter 
write time can be determined. 

The time for transferring valid parameters from one 
parameter block to the other will, of course, depend on 
the number of parameters stored. If this operation is 
completed as a foreground task, a block of time will be 
required that includes the time to read the valid param- 
eters and write these parameters to the new parameter 
block. This operation can also be treated as a back- 
ground task which is often necessary. For applications 
with a defined main software loop time, the transfer 
operation can be executed by determining the available 
time in the main loop, beginning the transfer of param- 
eters and then suspending this task before the main 
loop time expires. Multiple calls of the main loop are 
required to completely transfer all parameters to the 
new block. Total time to complete the task will depend 


PRSUGtflfllNMtf 


4-347 



AP-604 


iny 


on the amount of time available in each loop and the 
number of calls necessary to complete the operation. 

Like parameter transfers, block erase can be treated as 
a foreground or background operation. When treating 
erase as a background operation, total erase time will 
depend on the amount of time available in the software 
loop. Determine the number of calls required by divid- 
ing the total erase time by the amount of time available 
in each call. Multiply the number of calls by the total 
time per loop to determine the total time for erasing a 
parameter block. 


13.0 CYCLING 

Intel’s flash memory boot block products are specified 
at 100,000 erase cycles. To determine how this affects 
your parameter storage, use the equation shown in Fig- 
ure 6. The equation can be solved for either the number 
of parameter records or the parameter record size, de- 

pending on which variables are known. This implemen- 
tation provides improved cycling endurance, as com- 
pared to EEPROM. 


100,000 _ 

8 KB - (block_record size) 

number of 

Cycles 

parameter_record size 

parameter_records 
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Figure 6. Parameter Storage Equation 


14.0 CONCLUSION 

This paper describes software techniques for emulating 
byte alterability using two flash memory parameter 
blocks. System designers reduce system cost and im- 
prove reliability by using Intel’s boot block parameter 
blocks for parameter data storage, replacing EEPROM. 
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1.0 INTRODUCTION 

This document includes a feature overview, pinouts, 
and memory maps for Intel’s SmartVoltage boot block 
family, including 2/4/8-Mbit densities. These products 
offer feature and function compatibility, including the 
SmartVoltage technology (SVT) outlined below. Follow 
the design steps in Section 5.0 to upgrade today’s de- 
signs to SVT. 

2.0 BOOT BLOCK ARCHITECTURE 

Intel’s current boot block architecture products offer 
the familiar features that optimize it for updatable firm- 
ware storage. These features include: 

• Hardware-lockable boot block for secure kernel 
code storage 

• Parameter blocks for parameter storage 

• Main blocks for modular code updates, facilitating 
updatable firmware 

• x8 or xl6 user-selectable I/O operation 

• RP# for reset and write protection 

• PSOP and TSOP packages 

Intel is now integrating its SmartVoltage technology 
into the boot block family in order to increase the flexi- 
bility of these components. 

3.0 PINOUT COMPATIBLE DENSITY 
UPGRADES 

In addition, Intel is committed to providing density up- 
grades with pinout compatibility for the 2-Mbit, 
4-Mbit, and 8-Mbit densities. The pinouts in Figures 2, 
3, and 4 illustrate these compatible upgrade paths. 



Figure 1. The SmartVoltage Technology Boot 
Block Line Features a Pinout-Compatible 
Upgrade Path 


4.0 NEW SMARTVOLTAGE 
TECHNOLOGY FEATURES 

SmartVoltage offers the following new features: 

1. Voltage Flexibility 

• Vcc = 3.3V or 5V with enhanced circuits to opti- 
mize low-voltage performance when low power con- 
sumption is critical. 

• Program/Erase operation with Vpp = 5V for con- 
venient in-system writes without a DC-DC con- 
verter or Vpp = 12V when write/erase performance 
is a concern, such as during production. 

2. Write Protection 

• WP# pin replaces a DU pin and is used in conjunc- 
tion with the Vpp and RP# pins, as detailed in the 
table below, to control write protection of the boot 
block (see note on PSOP pinout diagram). 


Vpp 

RP# 

WP# 

Write Protection 

VlL 

X 

X 

All Blocks Locked 

^ VpPLK 

VlL 

X 

All Blocks Locked (Reset) 

^ VppLK 

V H H 

X 

All Blocks Unlocked 

^ VppLK 

VlH 

VlL 

Boot Block Locked 

^ Vpp L K 

V|H 

V|H 

All Blocks Unlocked 


5.0 UPGRADING FROM 12V TO SVT 

If you are designing with 12V Vpp products today, you 
must adhere to the following design steps to ensure you 
can upgrade to SVT: 

1. If using 5 V Program/Erase, allow for connecting 
Vpp to 5V and disconnecting Vpp from 12V. 

2. If adding a switch on Vpp for write protection, 
switch to GND instead of Vcc- 

3. Connect WP# (DU on existing products) to Vco 
GND, or a control signal. This pin cannot be left 
floating. 
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6.0 PACKAGE PINOUTS 



Figure 2. The 40-Lead TSOP Offers the Smallest Form Factor for Space-Constrained Applications 


28F800 







28F400 

28F800 


Vpp 


Vpp 

Vpp 

1 O 


44 

ZlRP# 

RP# 


RP# 





WP# 

WP#d 
NC d 

2 

3 


43 

42 

□ WE# 
Z1 a 8 

WE# 

a b 


WE# 
A 8 



a 7 


a 7 H 

4 


41 

=]A 9 

a 9 


Ag 



A 6 


a 6 

a 6 q 

5 


40 

ZD a io 

A 10 


A 10 



A 5 


a 5 

As3 

6 

PA28F200 

39 

Z] A ii 

An 


An 



a 4 


a 4 

A 4 C 

7 

44-Lead PSOP 

38 

P A 12 

A 12 


A 12 



a 3 


A3 

A 3 d 

8 

0.525" x 1.110" 

37 

ZD A 13 

a i 3 


A 13 



a 2 


A 2 

A 2 d 

9 

36 

d A 14 

A 14 


A 14 



A 1 


A 1 

Aid 

10 


35 

Z3 A i 5 

A 15 


A 15 



A o 


A 0 

Aod 

11 

TOP VIEW 

34 

=J A 16 

A 16 


A 16 



CE# 


CE# 

CE#C= 

12 


33 

HI BYTE# 

BYTE# 


BYTE# 



GND 


GND 

GND id 

13 


32 

Z]GND 

GND 


GND 



OE# 


OE# 

OE# C 

14 


31 

=3DQi 5 /A.i 

DQ15/A.1 


DQ^/A^ 



DQ 0 


DQ o 

DQ o d 

15 


30 

Z3 DQ 7 

DQ 7 


dq 7 



dq 8 


dq 8 

dq 8 1 = 

16 


29 

=3DQ 14 

DQ 14 


DQ 14 



DQ ! 


DQ , 

OQ^ C 

17 


28 

zddq 6 

DQ 6 


dq 6 



DQ 9 


DQ 9 

DQ 9 d 

18 


27 

iddq 13 

DQ i 3 


DQ i 3 



dq 2 


dq 2 

DQ 2 d 

19 


26 

=jdq 5 

dq 5 


dq 5 



DQ 10 


DQ10 

DQ 1Q C 

20 


25 

ZD DQ 12 

DQ 12 


DQ 12 



dq 3 


dq 3 

DQ 3 d 

21 


24 

ZDDQ 4 

dq 4 


dq 4 



DQ 11 


DQ n 

DQ n C 

22 


23 

13 v cc 

v cc 


v cc 
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NOTE: 









For the 8 -Mbit device, pin 2 has been changed to A 18 (WP# on 2/4-Mbit). Designs planning on upgrading to 
the 8 -Mbit density from the 2/4-Mbit density in this package should design pin 2 to control WP# functionality 

at the 2/4-Mbit level and allow for pin 2 to control A 18 after upgrading to the 8 -Mbit density. 



Figure 3. The 44-Lead PSOP Offers a Convenient Upgrade from JEDEC ROM Standards 











AB-60 


Intel 



Figure 4. The 48-Lead TSOP Offers the Smallest Form Factor for x16 Operation 
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7.0 MEMORY MAPS 



28F002-T 


28F004-T 

FFFFFH 

FC000H 

28F800-T 


3FFFFH 

16-Kbyte BOOT BLOCK 

7FFFFH 

7C000H 

16-Kbyte BOOT BLOCK 

16-Kbyte BOOT BLOCK 


3BFFFH 

3A000H 

39FFFH 

8-Kbyte PARAMETER BLOCK 

7BFFFH 

7A000H 

8-Kbyte PARAMETER BLOCK 

FBFFFH 

FA000H 

8-Kbyte PARAMETER BLOCK 


8-Kbyte PARAMETER BLOCK 

79FFFH 

78000H 

8-Kbyte PARAMETER BLOCK 

F9FFFH 

F8000H 

8-Kbyte PARAMETER BLOCK 


37FFFH 

20000H 

1FFFFH 

96-Kbyte MAIN BLOCK 

77FFFH 

60000H 

96-Kbyte MAIN BLOCK 

F7FFFH 

EOOOOH 

96-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 

5FFFFH 

128-Kbyte MAIN BLOCK 

DFFFFH 

128-Kbyte MAIN BLOCK 



OOOOOH 


40000H 


C0000H 




3FFFFH 

128-Kbyte MAIN BLOCK 

BFFFFH 

128-Kbyte MAIN BLOCK 





20000H 


AOOOOH 





1FFFFH 

128-Kbyte MAIN BLOCK 

9FFFFH 

128-Kbyte MAIN BLOCK 




OOOOOH 


80000H 






7FFFFH 

128-Kbyte MAIN BLOCK 







60000H 







5FFFFH 

128-Kbyte MAIN BLOCK 






40000H 







3FFFFH 



NOTE: 





128-Kbyte MAIN BLOCK 


These memory maps apply to the 28F002/004/008-T components, 
or the 28F200/400/800-T components in Byte-Wide (x8) mode. 

20000H 



1FFFFH 

128-Kbyte MAIN BLOCK 






OOOOOH 
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Figure 6. Byte-Wide x8-Mode Memory Maps (Top Boot) 













FFFFFH 

128-Kbyte MAIN BLOCK 






EOOOOH 







DFFFFH 

128-Kbyte MAIN BLOCK 













BFFFFH 

128-Kbyte MAIN BLOCK 






AOOOOH 







9FFFFH 







80000H 

128-Kbyte MAIN BLOCK 




7FFFFH 

128-Kbyte MAIN BLOCK 

7FFFFH 

128-Kbyte MAIN BLOCK 




60000 H 







5FFFFH 

128-Kbyte MAIN BLOCK 

5FFFFH 

128-Kbyte MAIN BLOCK 




40000H 


40000H 



3FFFFH 

128-Kbyte MAIN BLOCK 

3FFFFH 

128-Kbyte MAIN BLOCK 

3FFFFH 

128-Kbyte MAIN BLOCK 


20000H 


20000H 


20000H 



1FFFFH 

08000H 

96-Kbyte MAIN BLOCK 

1FFFFH 
08000 H 

96-Kbyte MAIN BLOCK 

1FFFFH 

08000H 

96-Kbyte MAIN BLOCK 


07FFFH 

06000H 

8-Kbyte PARAMETER BLOCK 

07FFFH 

06000H 

8-Kbyte PARAMETER BLOCK 

07FFFH 

06000H 

8-Kbyte PARAMETER BLOCK 


05FFFH 

04000H 

8-Kbyte PARAMETER BLOCK 

05FFFH 

04000H 

8-Kbyte PARAMETER BLOCK 

05FFFH 

04000H 

8-Kbyte PARAMETER BLOCK 


03FFFH 

OOOOOH 

16-Kbyte BOOT BLOCK 

03FFFH 

OOOOOH 

16-Kbyte BOOT BLOCK 

03FFFH 

OOOOOH 

16-Kbyte BOOT BLOCK 


28F002-B 

28F004-B 

28F800-B 
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These memory maps apply to the 28F002/004/008-B components, or the 28F200/400/800-B components in Byte-Wide 
(x8) mode. 


Figure 7. Byte-Wide x8-Mode Memory Maps (Bottom Boot) 
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1FFFFH 

1E000H 

1DFFFH 

1D000H 

1CFFFH 

1C000H 

1BFFFH 


OOOOOH 


28F200-T 


16-Kbyte BOOT BLOCK 
8-Kbyte PARAMETER BLOCK 
8-Kbyte PARAMETER BLOCK 

96-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


3FFFFH 

3EOOOH 

3DFFFH 

3DOOOH 

3CFFFH 

3COOOH 

3BFFFH 


28F400-T 


16-Kbyte BOOT BLOCK 
8-Kbyte PARAMETER BLOCK 
8-Kbyte PARAMETER BLOCK 

96-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


(Word addresses shown) 

NOTE: 

These membry maps apply to the denoted 28F200/400/800-T com- 
ponents in Word-Wide (x16) mode. 


7FFFFH 

7E000H 

7DFFFH 

7DOOOH 

7CFFFH 

7COOOH 

7BFFFH 


30000H 

2FFFFH 


20000H 

1FFFFH 


10000H 

OFFFFH 


OOOOOH 


28F800-T 


16-Kbyte BOOT BLOCK 
8-Kbyte PARAMETER BLOCK 
8-Kbyte PARAMETER BLOCK 

96-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 
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Figure 8. Word-Wide x16-Mode Memory Maps (Top Boot) 













7FFFFH 

128-Kbyte MAIN BLOCK 






70000H 







6FFFFH 

128-Kbyte MAIN BLOCK 






60000H 







5FFFFH 

128-Kbyte MAIN BLOCK 






50000H 







4FFFFH 

128-Kbyte MAIN BLOCK 






40000H 





3FFFFH 

128-Kbyte MAIN BLOCK 

3FFFFH 

128-Kbyte MAIN BLOCK 











2FFFFH 

128-Kbyte MAIN BLOCK 

2FFFFH 

128-Kbyte MAIN BLOCK 




20000H 


20000 H 



1FFFFH 

128-Kbyte MAIN BLOCK 

1FFFFH 

128-Kbyte MAIN BLOCK 

1FFFFH 

128-Kbyte MAIN BLOCK 


10000H 


10000H 


10000H 



OFFFFH 

96-Kbyte MAIN BLOCK 

OFFFFH 

96-Kbyte MAIN BLOCK 

OFFFFH 

96-Kbyte MAIN BLOCK 

m 

040Q0H 


04000H 


04000H 



03FFFH 

03000H 

8-Kbyte PARAMETER BLOCK 

03FFFH 

03000H 

8-Kbyte PARAMETER BLOCK 

03FFFH 

03000H 

8-Kbyte PARAMETER BLOCK 

9B 

02FFFH 

02000H 

8-Kbyte PARAMETER BLOCK 

02FFFH 

02000H 

8-Kbyte PARAMETER BLOCK 

02FFFH 

02000H 

8-Kbyte PARAMETER BLOCK 

9 - : 

01FFFH 

OOOOOH 

16-Kbyte BOOT BLOCK 

01FFFH 

OOOOOH 

16-Kbyte BOOT BLOCK 

01FFFH 

OOOOOH 

16-Kbyte BOOT BLOCK 


28F200-B 

28F400-B 

28F800-B 


(Word addresses shown) 
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These memory maps apply to the denoted 28F200/400/800-B components in Word-Wide (x16) mode. 



Figure 9. Word-Wide x16-Mode Memory Maps (Bottom Boot) 
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8.0 PRODUCT OFFERINGS 

Existing Boot Block Products 


Product 

Density x Org. 

Pkg. 

Speed (ns) 
(Vcc = 5V) 

Speed (ns) 
(Vcc = 3.3V) 

Extended 

Temp. 

Avail. 

28F001BX 

1 Mb, 128Kx8 

P, N, E 

70, 90,120,150 



Now 

28F200BX 

2 Mb, 256Kx8/128Kx16 

PA, E 

60, 80, 120 



Now 

28F002BX 

2 Mb, 256 Kx8 

E 

60, 80,120 


V* 

Now 

28F200BL 

2 Mb, 256Kx8/128Kx16 

PA, E 

a) 

150 

2) 

Now 

28F002BL 

2 Mb, 256 Kx8 

E 

(D 

150 

i>(2) 

Now 

28F400BX 

4 Mb, 512Kx8/256Kx16 

PA, E 

60, 80, 120 



Now 

28F004BX 

4Mb, 512Kx8 

E 

60, 80, 120 



Now 

28F400BL 

4 Mb, 512Kx8/256Kx16 

PA, E 

(D 

150 

i>(2) 

Now 

28F004BL 

4 Mb, 512Kx8 

E 

(D 

150 

*>(2) 

Now 


NOTES: 

1. The BL products also operate at 5V Vcc for programmer compatibility. 

2. — 20°C- + 70°C operating range for Read-Only available Q4’94. 
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SmartVoltage Boot Block Products 


Product 

Density x Org. 

Pkg. 

Speed (ns) 
(Vcc = 5V) 

Speed (ns) 
(V CC - 3.3V) 

Extended 

Temp. 

28F200BV 

2 Mb, 256Kx8/128Kx16 



110,150,180 

* 

28F200CV 

2 Mb, 256Kx8/128Kx16 

48 


110,150,180 

* 

28F002BV 

2 Mb, 256Kx8 

40 

60, 80, 120 

110,150,180 

* 

28F400BV 

4 Mb, 512Kx8/256Kx16 



110,150,180 


28F400CV 

4 Mb, 512Kx8/256Kx16 

48 


110,150,180 


28F004BV 

4 Mb, 512Kx8 

40 

60, 80,120 

110,150,180 


28F800BV 

8 Mb, 1 024Kx8/51 2Kx1 6 

44 

TBD 

TBD 


28F800CV 

8 Mb, 1024Kx8/512Kx16 

48 

TBD 

TBD 


28F008BV 

8 Mb, 1 024 Kx8 

40 

TBD 

TBD 



NOTE: 

1 . BV products also operate at 5V Vcc for programmer compatibility. 



Figure 10. Decoding the Product Names 
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1.0 INTRODUCTION 

As PC computing platforms increase in complexity, so 
does the associated BIOS code. Sophisticated hardware 
and BIOS software increase the potential for revisions. 
Time-to-market goals require faster completion of de- 
signs from conception to production, leaving less time 
for new-peripheral BIOS support. As an example, 
many 80286-based PC/ATs lack BIOS support for 
3 1 // floppy drives! Once a computer is out the door, 
code revisions are far more difficult and costly. Code 
revisions with EPROM require either a service call or 
sending EPROMs to the end user, assuming nothing 
else goes wrong in the process. The alternative to BIOS 
update is a prematurely obsolete system, unable to sup- 
port new industry standards and peripheral systems. 

Flash memory offers the same nonvolatile storage as 
EPROM, but additionally offers in-system write capa- 
bility. Using Intel’s 28F001BX for BIOS storage, code 
updates are done quickly in the factory during test and 
debug, while allowing cost-effective field updates to end 
users via floppy disks or modem BBS. 

This application note describes various methods of im- 
plementing a flash memory BIOS using the 28F001BX. 
Design targets are both laptop and desktop systems. 
The primary emphasis is on application of flash memo- 
ry for BIOS and ROM executable software applica- 
tions. Detailed 28F001BX information is covered in the 
datasheet, available through your local sales office. 

2.0 FLASH MEMORY 

This section provides a brief overview of Intel’s Flash 
Memory and in particular, Intel’s 28F001BX blocked 
flash memory family. It covers the following: 

° Flash memory’s EPROM roots 
° Program and Erase Automation 
® Blocked Architecture 
° Deep Powerdown Mode 

° Pinouts, physical layout and upgrade for different 
packages 

• Vpp specifications 

Major features of the 28F001BX are in-system write, 
selective block erase, program/erase automation, 
SRAM-like command interface, deep powerdown capa- 
bility, fixed V C c an d Vpp supplies and hardware lock- 
out protection. 

2.1 EPROM Roots; Review of Flash 
Process vs EPROM & EEPROM 

Intel’s ETOX II (EPROM Tunnel OXide) flash memo- 
ry is a single-transistor cell providing nonvolatile 


storage like EPROM, with electrical erase similar to 
EEPROM. Reprogramming flash memory entails elec- 
trically erasing all data bits in parallel, then randomly 
programming data into any byte in the array. The pro- 
gramming operation is achieved via channel hot elec- 
tron injection (CHE), just like EPROMs. Flash electri- 
cal erasure, however, is accomplished through Fowler- 
Nordheim (FN) tunneling. Using separate program and 
erase methods (CHE vs. FN Tunneling), in different 
cell locations, drain vs. source, permits process opti- 
mization for high cycling endurance — the number of 
complete erase and re-writes. Traditional low-density 
EEPROMs tunnel through the same memory cell junc- 
tion for both programming and erasure. Because 
EEPROMs erase before programming each byte, these 
processes must occur very fast. Therefore, internal volt- 
ages used to program or erase 5V-only EEPROM 
memory cells are high (e.g., 18V- 30V). The combina- 
tion of higher voltage with programming and erasing 
through the same junction contributes to EEPROM’s 
oxide breakdown, poor data retention and reduced cy- 
cling capability. 

Intel’s flash memory erasure (tunneling) voltage is be- 
low the critical oxide breakdown voltage. By using 
block erasure instead of EEPROM’s byte erasure, erase 
times are relaxed, reducing tunneling voltages. Pro- 
gramming Intel’s Flash Memory is non-destructive to 
the floating gate oxide compared to EEPROM’s use of 
tunneling for programming. These features for erase 
and programming provide Intel’s Flash Memory with 
the highest endurance (typically over 100K cycles) 
compared to that of traditional EEPROM cycling. Fur- 
thermore, flash memory exhibits lower failure rates at 
any given cycle count. 


2.2 Program and Eras® Automation 

The 28F001BX integrates a Write State Machine 
(WSM) on-chip to internally implement program and 
erase algorithms. Operations are initiated through com- 
mand sequence writes to the Command Register, and 
progress is reported back to the user through Status 
Register bits. Software timers are no longer required, as 
timing is now regulated through the on-chip oscillator. 
System software requirements are decreased in compar- 
ison to past algorithms, minimizing overhead and de- 
velopment effort, and allowing code execution and in- 
terrupt servicing while simultaneously programming or 
erasing the device. 

The Erase Suspend command halts block erase to exe- 
cute code dr read data from any other block. This fea- 
ture gives the system the capability to service higher 
level interrupts requiring data from the 28F001BX dur- 
ing the erase interval. After issuing the Erase Resume 
command, the WSM continues erase where it left off 
when suspended. 


4-359 


AP-341 



1FFFF 

8 Kbyte BOOT BLOCK 

1FFFF 


1E000 




1DFFF 

4 Kbyte PARAMETER BLOCK 



1D000 




1CFFF 

4 Kbyte PARAMETER BLOCK 


112 Kbyte MAIN BLOCK 

1C000 




1BFFF 


04000 



112 Kbyte MAIN BLOCK 

03FFF 

4 Kbyte PARAMETER BLOCK 



03000 




02FFF 

4 Kbyte PARAMETER BLOCK 



02000 




01FFF 

8 Kbyte BOOT BLOCK 

00000 


00000 



28F001BX-T 


28F001BX-B 


Figure 1. 28F001BX Memory Maps 


2.3 Blocked Architecture 

The 28F001BX family combines the safety of a hard- 
ware-protected 8 Kbyte “boot” block with the flexibili- 
ty of two 4 Kbyte “parameter” blocks and one 
112 Kbyte main block. Each block can be individually 
erased and programmed without affecting code stored 
in another block, ensuring data integrity. The boot 
block is intended to contain secure code which mini- 
mally will bring up the system and download code to 
the other blocks of the 28F001BX if required. Once 
programmed, it is hardware-locked from further altera- 
tion, guaranteeing true non-volatility. 

The 28F001BX-T’s lockable block location provides 
compatibility with microprocessors and microcontrol- 
lers that boot from the top of the memory map, such as 
many of Intel’s microprocessor families. The seg- 


mentation of the 28F001BX-B is identical. Its lockable 
block location provides compatibility with microproc- 
essors that boot from low memory, such as Motorola 
and AMD products. See Figure 1 for illustrations of the 
two memory maps available in the 28F001BX family. 

The two 4 Kbyte parameter blocks have multiple uses 
in BIOS environments. They can be used to back up the 
CMOS setup parameters such as floppy and hard disk 
type, processor speed, system memory size, graphic dis- 
play type and presence of a coprocessor. Today, should 
the system battery fail, the user loses information in 
battery-backed SRAM. The non-volatile parameter 
blocks provide the system capability to automatically 
back up and recover this information. Also, EISA sys- 
tems can store software variable information such as 
add-in board addresses, DMA channels and interrupt 
values/levels. 
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Figure 2. 28F001BX DIP Pin Configuration 


2.4 Deep Powerdown Mode 

Market analysts predict that the high-growth segments 
of the PC industry for the next several years will be in 
the laptop, palmtop and handheld product lines. Power 
management software is becoming an integral part of 
PC system BIOS as manufacturers attempt to squeeze 
the maximum amount of system operation time from 
their battery pack power supplies. A key indicator of 
this trend is Intel’s i386™SL microprocessor superset, 
which adds hardware power management to the Intel 
386 architecture and answers the needs of low-power 
applications. 


The 28F001BX family features deep powerdown capa- 
bility and is ideally suited for these same battery-oper- 
ated systems. Powerdown is entered through low volt- 
age on the RP# pin. Typical power consumption 
through Vcc in powerdown is 0.25 jllW, regardless of 
power supply voltages and activity on the external bus. 
Once BIOS is shadowed to system DRAM for high- 
speed execution, the 28F001BX can be shut down for 
minimal current drain. 

This same pin, with 12V present on it, gates program 
and erase of the boot block. Such a hardware lockout 
preserves the system boot code once initially pro- 
grammed and protects it from inadvertent alteration or 
computer virus compromise. 
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Figure 3. 28F001BX PLCC Lead Configuration 


2.5 28F001BX Pinouts, Physical 
Layout and Upgrade 

Intel’s 28F001BX is offered in three standard 32-pin 
packages: Plastic Dual In-line Package (PDIP), Plastic 
Leaded Chip Carrier (PLCC), and Thin Small Outline 
Package (TSOP). All three pinouts provide backward 
compatibility with Intel’s 28F010 bulk-erase flash. See 
Figures 2, 3, and 4 for pinout details. 

Plastic Dual In-Line Package 

PDIPs with sockets provide an excellent way to proto- 
type and debug new designs. The 28F001BX is back- 
ward pin-compatible with 1 Mbit standard flash and 
EPROMs. 


Plastic Leaded Chip Carrier 

Most system designs today require surface mount tech- 
nology (SMT) due to shrinking board real estate and 
portable form factors. PLCC is one SMT component 
that uses as little as 35% of the overall board space 
compared to PDIP. Its small size is attributed to the 
center-to-center lead spacing of 50 mils versus 100 mils, 
as well as its four-sided pinout. The J-lead design allows 
the PLCC to be directly soldered to the circuit board. 
Most SMT manufacturing equipment can easily handle 
the PLCC’s 50-mil lead pitch. PLCC SMT sockets such 
as that offered by AMP (P/N 821977-1) have an identi- 
cal foot-print for 32-pin devices. Such sockets can be 
used in place of directly soldering a PLCC for proto- 
type build and code testing. Once the reprogramming 
code is tested and debugged, flash PLCCs can then be 
surface-mounted without socketing during production 
runs. 


I 
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Thin Small Outline Package 

TSOP is the package of choice for hand-held equipment 
or palmtop/laptop computers. These compact systems 
require minimal height and area for all components, for 
which TSOP excels. TSOP height measures 1.2mm ver- 
sus 3.5mm for PLCC. TSOP area is 8mm x 20mm com- 
pared to PLCC’s 11.43mm x 13.97mm. Therefore, 
TSOP has significantly less total volume: TSOP = 
172.8mm 3 , while PLCC = 656.3mm 3 , and DIP = 
1872.3mm 3 . State-of-the-art center-to-center terminal 
spacing of 20 mils yields a smaller package with nar- 
rower conductor traces than PLCC or PDIP. Location 


of pins on both ends of the package allows traces for 
TSOP to be routed underneath the chip, reducing 
board layers. TSOP for the 28F001BX is available in 
the standard (E) pin configuration. For multiple chip 
flash systems, Intel’s bulk-erase 28F010 flash memory 
is available in both standard (E) and reverse (F) pin 
configurations (see Figure 5) allowing components to 
be laid out end-to-end and side-to-side for highest 
board density (see Figure 6). Note how pins 32-17 on 
the standard pinout match pins 1-16 on the reverse 
pinout, and how pins 1-16 on the standard pinout 
match pins 32-17 on the reverse pinouts. 
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Figure 4. 28F001BX TSOP Lead Configuration 
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Figure 5. 28F010 Standard and Reverse TSOP Lead Configurations 
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2.6 Vpp Specifications 

Fixed Vpp and Vqq 

Flash memories, like EPROMs, require a 12V pro- 
gramming power supply. Unlike EPROMs, however, 
the Vpp for flash memory is a fixed, standard level. 
When combined with the Command Register 
erase/program control, Intel flash memories use a sim- 
ple, SRAM-like hardware interface with standard mi- 
croprocessor timings. 

Intel’s Flash Memory Vpp specification is 12.0V 
±0.6V (5%), compatible with most off-the-shelf sys- 
tem power supplies. The IBM PC technical reference 
manual specifies the 12V power supply at 12.0V, + 5% 
and —4%. Additionally, some hard and floppy drives 
require 12V ±5%. Therefore, most PC power supplies 
have 12V supplies with ± 5 % or better tolerance. Possi- 


ble exceptions to this are laptop and/or palmtop PCs. 
Some of these require 5V-only designs, in which case 
5V is charge-pumped to 12V. It is essential to use the 
specified Vpp when programming and erasing flash. 
Once the commands to program or erase are issued, the 
device internally derives the required voltage references 
from the Vpp supply. Therefore, an improper Vpp level 
degrades the performance of the part. 

The Write State Machine automatically monitors the 
voltage present on the Vpp pin, beginning when pro- 
gram or erase setup commands are issued and continu- 
ing throughout the internal algorithm interval. If low 
Vpp is detected, the WSM automatically aborts the 
program or erase attempt and reports an improper volt- 
age error to the user through the Status Register. The 
hardware design section discusses various methods of 
Vpp generator if your 12V power supply does not meet 
the proper tolerances or 12V is not available. 
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RP#, Vqc and Vpp Lockout Protection 

The RP# (Resert/Powerdown) pin provides hardware 
write protection for 28F001BX flash memories. Until 
this pin transitions to TTL-level Vjh, write attempts to 
the device Command Register are ignored, regardless 
of power supply levels or activity on the system bus and 
control inputs. Typically, the system designer will gate 
this signal with a system POWER GOOD indicator 
output to ensure system stability before memory access- 
es begin. 

The 28F001BX family provides additional protection 
for designs that tie 12V directly to the device. Since the 
12V supply is less capacitively loaded than the 5 V sup- 
ply, the 12V power supply reaches full value faster dur- 
ing power-on. If Command Register lockout protection 
was not provided, a finite possibility exists that inadver- 
tent writes may occur during power-on. For this case, 
Intel’s 28F001BX flash memory supplies Command 
Register lockout protection when V^c is below 2.5V, 
preventing writes to flash memory from occurring. 
Since CMOS logic is valid at 2.0V, a 0.5V margin of 
protection exists, providing extra time for control sig- 
nals to settle before the Command Register is activated. 
Program/erase inhibit is guaranteed with Vpp below 
6.5V, with corresponding Vpp low reported through 
the Status Register. Once V^c reaches 2.5V, the Com- 
mand Register begins processing valid commands, and 
program/erase attempts may initiate with Vpp greater 
than 6.5V. At this point, the system is responsible for 
write control. 


3.0 HARDWARE DESIGN 
CONSIDERATIONS 

The system level hardware requirements for imple- 
menting BIOS and application storage in flash are: 

• Write Enable available to all of the flash memory 

• 12V routed to flash location or generated on-board 

• CMOS control-signal interface, or RP# gated by a 
power-good signal 

• Data buffer or transceiver that works in both write 
and read directions 

• Space in memory map allocated for each applica- 
tion’s size 

Intel’s i386SL microprocessor superset was chosen for 
the design example, shown in Figure 7. The Intel386SL 
microprocessor superset integrates all major compo- 
nents of a Intel386 based design on two chips, including 
bus memory, cache controllers and the ISA peripheral 
subsystem. Additionally, it consolidates hardware pow- 
er management for battery-operated designs such as 
laptop, handheld and palmtop computers. 

Note the clean interface between the superset and 
28F001BX-T. Flash memory was comprehended early 
in the design of the Intel386SL microprocessor super- 
set, to ensure a minimal-chip interface. Transceivers for 
the system bus, as well as a flash memory CE# signal, 
are integrated on the Intel386SL. 


When the 28F001BX Vcc powers up, or after the RP# 
pin transitions to Vjl and back to Vjjj, the Command 
Register is automatically initialized to Read Array 
mode. 
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Figure 7. lnte!386SL Microprocessor Superset with 28F001BX-T Flash BIOS 
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The RP # pin is gated by a power good signal to ensure 
control logic integrity before writes to the 28F001BX-T 
are allowed. It is also gated by System Reset, to abort 
program or erase if required for CPU reboot, and by a 
separate General Purpose Input-Output (GPIO) line to 
power down the device once BIOS is shadowed to 
RAM. CMOS logic will guarantee lowest power dissi- 
pation. 

Similarly, system 12V is gated both by System Reset 
and a GPIO line. Software can switch 12V to the 
28F001BX-T only when programming or erasing it, 
minimizing system power consumption. Vpp genera- 
tion and switching methods are discussed in Section 
3.3. 

Application code, assuming a ROM in the BIOS sock- 
et, is sometimes designed to write to BIOS locations to 
generate software timing delays (versus using NOPs). 
Gating WR# to the flash memory with a GPIO line 
disables writes until desired by BIOS update software. 


3.1 BIOS Boot Code Requirements 
and System Configurations 

The previous design assumed that shadow RAM was 
available in the system. Referencing Figure 8, we see 
that the BIOS is actually stored in the main block of the 
28F001BX, from system address E0000H-FBFFFH. 
In this scenario, the processor jump vectors, BIOS 
checksum and recovery code are stored in the 8 Kbyte 
boot block. This is the area the processor will jump to 
on powerup or after reset. The boot block code will 
execute a checksum check of the main block for a valid 
BIOS. If successful, the processor will check system 
RAM, copy the main block code to high memory 
DRAM and jump to this area for the remainder of 


Power On Self Test (POST), as well as further BIOS 
calls. Optionally, the 28F001BX can then be disabled 
for power savings. 

If BIOS checksum determines an invalid BIOS, the sys- 
tem RAM and floppy drive (or possibly modem) are 
initialized using the boot block recovery code. The sys- 
tem requests (through screen display or speaker 
“beeps”) that the user install the BIOS update floppy 
disk. A search of the floppy disk is made for a specific 
file name, and once found, update code is used to re-ini- 
tialize the main BIOS block. System reboot restores 
normal operation. Alternatively, the BIOS recovery 
code can contain specific, non-DOS sector/track infor- 
mation pertaining to the location of the new BIOS up- 
date file. Thus, the file is protected and not readable to 
basic DOS users. 

If ROM BIOS disable is overriden by system software 
or the user (through setup utility), the design must 
compensate for the altered BIOS location to prevent 
BIOS calls jumping to incorrect code locations. The 
following two methods provide alternative solutions for 
the system designer. 

Address Shift Configuration 

In this scenario, after BIOS initialization is complete, a 
write to a latch, register or flip-flop shifts addresses for 
future BIOS code fetches by 16 Kbytes. This allows the 
system to correctly access the main block and bypass 
parameter and boot blocks. A system reset or loss of 
power clears this latch, allowing booting from the boot 
block once again. Figure 9 shows the input and output 
signals required for a p,PLD address shifter. It shifts 
addresses in the range FFFFFH-E4000H (112 Kbytes) 
to FBFFFH-E0000H. 


1 Mbyte DOS Map 





28F001BX-T Memory Map 
16 Byte Jump Vector 


Boot Kernel, 
Recovery Code 


Parameter Block 


Parameter Block 


Main BIOS Area 
optionally 
including 

Power Management, 
Video Drivers, 
ROM-Executable DOS, 
etc. 
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Figure 8. 28F001BX-T in 1 Mbyte DOS Memory Map 
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Figure 9. Address Shift Circuitry 


Address Inversion Configuration 

Figure 10 presents an alternative approach to configur- 
ing the 28F001BX in the system memory map. Simple 
inversion of address line to the 28F001BX moves 
the boot block to the lower half of flash memory as seen 
by the system. In normal operation, the processor boots 
and executes from the main array areas, which store the 
system BIOS, video BIOS and/or DOS in ROM. 



Figure 10. Inversion Configuration (Normal) 


inlel. 

If power loss aborts a BIOS update, the main array 
block will be partially programmed/erased and the 
code in this block unusable. The system will “hang” or 
not boot at all. To boot from the boot recovery block, 
restore address polarity, producing the memory 
map shown in Figure 11. A keyboard sequence, switch 
on the back of the PC or jumper on the motherboard 
can toggle Aj6 restore logic and . “un-invert” it. After 
reconfiguration, the processor boots from the boot 
block and executes its recovery algorithm to restore 
main array block contents. Re-inverting A 15 reinstates 
normal system bootup and operation. 



Figure 11. Inversion Configuration (Recovery) 


Since standard BIOS code does not support boot block 
recovery, your BIOS software engineers must design 
the recovery code for the 8 Kbyte block. See Section 4.6 
for a flowchart of an example recovery algorithm. 
Third-party BIOS vendors, working with Intel, have 
also developed recovery code for the 28F001BX (see 
Appendix C). With the exception of this recovery sec- 
tion, the rest of the BIOS remains the same. 
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3.2 Vpp Generation 

For flash BIOS designs, the 12V Vpp can be provided 
by: 

1. Using the existing 12V supply from PC Power Sup- 
ply, or 

2. Generating 12V using a charge pump or DC- DC 
converter from the 5V supply. 

Flash typically requires only 10 mA for program or 
erase (30 mA max); otherwise only 10 jliA is drawn in 
standby mode, and 0.8 jmA in deep powerdown mode. 

Using System 12V Directly 

As stated earlier, the IBM PC technical reference man- 
ual specifies the 12V supply as +5% and — 4%, which 
meets the Intel Flash Memory Vpp requirement. If 
your power supply meets this condition and has CMOS 
logic, 12V from the PC power supply can be tied direct- 
ly to flash memory, eliminating the need to add extra 


circuitry for Vpp generation. This is possible due to the 
RP#, Vcc and Vpp write lockout protection offered in 
the 28F001BX. 

Pumping 5V to 12V 

If your system does not provide 12V or does not meet 
flash memory specifications, several 5-to-12V convert- 
ers are available, including surface-mount versions. Ap- 
plication Note AP-316, available from your local Intel 
Sales Office, lists several Vpp solutions which offer 
on/off control of Vpp and provide a steady Vpp rise 
and little overshoot. Figure 12 shows one example. On 
power-up, system reset or when Vcc is below 4.5V, 
Vpp is forced off. It is enabled (or disabled) by writing 
to the VppEN# I/O port address. On/off capability is 
essential for battery-operated equipment and eliminates 
the need for WE# filtering. The VppEN# signal 
“OR’ed” with the system memory write (MEMWR#) 
functions as the clock signal for the 74FC74 D-flip- 
flop. The D-input is latched when MEMWR# goes 
high. Writing a one or a zero turns Vpp on or off, 
respectively. 



Figure 12. Vpp Generation with Write Protection 
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Linear Technology’s LT1072, a switching regulator, is 
used as a 5V to 12V charge pump. The 10. 7K and 
1.24K resistors are used to establish the correct refer- 
ence voltage to obtain 12V. The 100 /xF capacitor at the 
output can handle up to 200 mA. For a single- or dou- 
ble-chip BIOS design, this capacitor value can be 
halved or even quartered to allow selection of a SMT 
capacitor value, since the maximum Ipp current per 
device is only 30 mA (10 mA typical). Allow sufficient 
time when switching Vpp on, letting the charge pump 
level out and enabling the Command Register to re- 
ceive program or erase commands. The diode, 
MUR 120, keeps the inductor from absorbing current 
from the charged output capacitor. 

Security 

Controlling Vpp provides the benefit of system hard- 
ware security. Beyond this, you can design for even 
higher security levels. The first level could be the design 
of a simple software password routine that would only 
turn on Vpp when a correct password is given. Alterna- 
tively, you can provide a jumper to allow 12V to the 
part for a BIOS update and then return it when repro- 
gramming is finished. The system should check this pin 
to see if the jumper was left in the programming posi- 
tion and remind the user to move it. Unless Vpp is at 
12V, the flash memory contents cannot be changed and 
acts just like ROM. Disabling Vpp until voltages have 
stabilized provides additional power-up protection. 

The Motorola component, MC34064, is an under-volt- 
age sensing circuit that begins functioning when Vcc is 
above IV. Between IV and 4.6V, the RESET # output 
is active. This (or a system RESET#) clears the 
74FC74, keeping Vpp off. Alternatively, if you use 
CMOS logic, you could make use of Intel’s flash memo- 
ry Vcc an d Vpp lockout functions. While Vcc ls below 
2.5V, the Command Register is locked out. Since 
CMOS control logic is active at 2.0V, a 0.5V safety 
margin exists for control logic to settle down before the 
part becomes active. Program and erase attempts are 
inhibited with Vpp below 6.5V. For both CMOS and 
non-CMOS designs (i.e., control logic active at 2.0V), 
gate RP# with the power supply’s “Power Good” sig- 
nal or the MC34064’s RESET# output (Figure 13). 
Until RP# transitions to Vjh, the part ignores all write 
attempts, regardless of power supply voltages and bus 
activity. 



Figure 13. V PP Switch Using MTD4P05 


Using a MOSFET Switch 

For laptops or palmtops, an always-active 12V may not 
provide acceptable power management. For these sys- 
tems, a MOSFET switch will toggle 12V to the flash 
memory, minimizing current draw when not needed. 
Several DC switches exist, but there are a few issues to 
consider in your selection. Choose a switch with low 
“ON” resistance to keep the Vpp voltage within flash 
memory tolerances. The system 12V power supply 
must be specified to a tighter range to allow for any 
voltage drop through the switch. Allocate an I/O line 
(Vpp enable) to turn the switch on and off. To handle 
“warm RESETS”, the Vpp enable must be gated with 
the system RESET # line. The Motorola MTD4P05 is 
one example of a surface-mount switch with low drain- 
source resistance. Assuming a 12V + 5% and —4% 
supply: 

Rds = 0.6fl 

Ipp = 30 mA (Worst Case) 

AV§ WITCH Drop = (30mAx0.6fi) = 0.02V, 

< (4% of Vpp =) 0.48 V. 

Figure 13 shows a schematic of a Vpp switch design. 

3.3 Modifying an Existing 
Motherboard 

EPROM/ROM Designs 

If you are modifying an existing motherboard design 
for a flash memory BIOS, there are a few things you 
should consider. First, check the logic design to deter- 
mine if WR# is decoded and connected to the BIOS 
EPROM location. Typical motherboard logic designs 
do not allow writes to the EPROM locations and treat 
EPROM writes as invalid (e.g., ROMCS# not generat- 
ed with MEMWR#). This is overcome by generating 
the BIOS location’s WR# externally by either adding 
the necessary discrete logic or adding a 3-to-8 decoder 
(see Figure 14 for an example). In either case, tap into 
the M/IO# and WR# control lines and configure the 
decoder to provide a logic low for the M “AND” 
WR# “AND” BIOS address condition. 
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Figure 14. Discrete and Single-Chip Decoder WE# Solutions 


Secondly, check to see if the BIOS code transceiver or 
buffer for the EPROM location works in both direc- 
tions. The transceiver may need a special BIOS call to 
unlock it in the “write” direction, or you may have to 
reprogram the logic for that portion of your board. If 
your chip set data buffer works only in one direction, a 
transceiver and direction logic must be added to the 
CPU bus to pass data to and from flash memory. 

Your system must also be capable of routing 12V to the 
BIOS socket for program and erase. Control RP# with 
system RESET# and POWERGOOD (see Section 3.0) 
and optionally provide capability for deep powerdown 
mode via an I/O line. Finally, address inversion or shift 
mechanisms outline in Section 3.1 can optionally be 
added for recovery capability with the 28F001BX. 

28F010 Flash Memory Designs 

If your design currently incorporates Intel’s 28F010 
flash memory, hardware upgrade to the 28F001BX is 
simple. Transceiver, BIOS write and Vpp requirements 
will have already been considered in the original design. 
Control RP# as described in Section 3.0. Finally, in- 
vert or shift the system addresses as in Section 3.1 if 
BIOS “ROM” access after shadowing to DRAM is an- 
ticipated. 


3.4 In-System Write vs On-Board 
Programming 

When devices are soldered directly to a printed circuit 
board, one of two sources control flash memory repro- 
gramming: 

1. the system’s own processor, or 

2. a PROM programmer connected to the board. 

These options are called In-System Write (ISW) and 
On-Board Programming (OBP), respectively. Their re- 
spective benefits are discussed in detail in AP-316. 

With ISW, the system drives the reprogramming pro- 
cess and generates Vpp locally. Under this scenario, the 
board manufacturer will initially program at least the 
boot block in a PROM programmer. This removes the 
need for circuitry on-board to unlock the boot block, 
guaranteeing boot code integrity throughout system 
life. A good design practice for ISW-type designs is to 
socket the first few flash BIOS prototypes. SMT-only 
designs can also socket using PLCC SMT sockets. 
Socketing enables the system designer to easily work 
out any bugs with in-system flash reprogramming by 
allowing the removal of a flash part for external repro- 
gramming in a PROM programmer. Once ISW repro- 
gramming is fully debugged, pre-programmed flash 
parts can be soldered directly to the circuit board with- 
out a socket. All flash memory components are exposed 
to a data-retention bake testing and checked for any 
data loss before shipping. It is extremely unlikely that 
data in a production flash device can be corrupted from 
heat by a production-run soldering application. 
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OBP uses an external board programmer to supply Vpp 
and Vhh an d control the programming process. Cer- 
tain design considerations must be evaluated prior to 
laying out the design. Some manufacturers using TSOP 
may also want to remove a handling step from the man- 
ufacturing process by providing the capability to pro- 
gram flash for the first time after being soldered direct- 
ly onto the circuit board. OBP can accomplish this if 
the design is first laid out correctly to support OBP. 
External circuitry generates voltages needed to unlock 
and program/erase the boot block. 


3.5 Ideas for Using Extra Adaptor 
Space 

Laptop and palmtop systems may have adaptor space 
available in the system memory map since there typi- 
cally isn’t much room for add-in boards. Additionally, 
they may not use up the entire 128K of BIOS space due 
to their fixed feature set and limited upgrade capability. 
This extra memory space can hold ROM executable 
programs like Lotus 123, WordPerfect, Microsoft 
Works, etc. Using Intel’s flash TSOPs, a small applica- 
tion cache can reduce a laptop’s disk access and in- 
crease battery life. 

Additionally, ROM-Executable DOS can be placed 
anywhere in adapter space. For example, MS-DOS 
ROM Version 3.22 requires 62 KB of adaptor space 
today (this may change on subsequent revisions). One 
location for MS-DOS ROM Version 3.22 is directly un- 


der the BIOS (again see Figure 8). Today’s typical 
BIOS consumes 64 KB or less; consequently, both the 
BIOS and MS-DOS ROM Version 3.22 could reside in 
a single 28F001BX (128 Kbytes), yielding reduced 
chipcount. However, if power management code is add- 
ed to the BIOS, system BIOS code could grow to 
80 KB or more. Therefore, designs that include both 
power management and MS-DOS ROM Version 3.22 
should consider using both a 28F001BX and 28F010 
flash device (or two 28F001BX’s). This leaves extra 
space for BIOS and MS-DOS ROM to grow in the de- 
sign, while providing additional storage for the video 
BIOS. 


4.0 SOFTWARE DESIGN 
CONSIDERATIONS 

Intel’s Flash Memory provides a cost-effective, updata- 
ble, nonvolatile code storage medium. The 28F001BX 
integrates the Quick-Pulse Programming and Quick- 
Erase algorithms of prior Intel Flash Memories on- 
chip, using the Command Register, Status Register and 
Write State Machine (WSM). On-chip integration dra- 
matically reduces system overhead, simplifies system 
software creation and debug and provides SRAM-like 
timings to the Command and Status Registers. WSM 
operation, internal program/erase verify and Vpp high 
voltage presence are monitored and reported via appro- 
priate Status Register bits. Table 1 lists the 28F001BX 
command set, while Table 2 details the Status Register 
bits and their meanings. 


Table 1. 28F001BX Command Definitions 


Command 

Bus 

Cycles 

Req’d 

Notes 

First Bus Cycle 

Second Bus Cycle 

1,2 

Operation 

Address 

Data 

Operation 

Address 

Data 

Read Array/Reset 

1 


Write 

X 

§HQ 




Intelligent Identifier 

3 

1,2,3 

Write 

X 


Read 


IID 

Read Status Register 


2 


X 

70H 

Read 

X 

SRD 

Clear Status Register 

1 



X 

50H 




Erase Setup/ Erase Confirm 

2 

1 


BA 


Write 

BA 



2 


Write 

X 



X 


Program Setup/ Program 

2 

1,2 

Write 

PA 

40H 

Write 

PA 

PD 


NOTES: 

1. I A = Identifier Address; 00H for manufacturer code, 01 H for device code. 

BA = Address within the block being erased. 

PA = Address of memory location to be programmed. 

2. SRD = Data read from Status Register. See Table 2 for a description of Status Register bits. 

PD = Data to be programmed at location PA. Data is latched on the rising edge of WE#. 

IID = Data read from intelligent identifier. 

3. Following the intelligent identifier command, two read operations access the manufacturer and device codes. 

4. Commands other than shown above are reserved by Intel for future device implementations and should not be used. 
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Table 2. 28F001BX Status Register Definitions 


WSMS 

ESS 

ES 

PS 

VPPS 

R 

R 

R 

7 

6 

5 

4 

3 

2 

1 

0 


SR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 

0 = Busy 

SR.6 = ERASE SUSPEND STATUS 

1 = Erase Suspended 

0 = Erase In Progress/Completed 
SR. 5 = ERASE STATUS 

1 = Error In Block Erase 

0 = Successful Block Erase 
SR.4 = PROGRAM STATUS 

1 = Error In Byte Program 

0 = Successful Byte Program 
SR. 3 = V PP STATUS 

1 = Vpp Low Detect; Operation Abort 
0 = Vpp OK 


SR.2-SR.0 = RESERVED FOR FUTURE ENHANCEMENTS 


NOTES: 

The Write State Machines Status Bit must first be 
checked to determine program or erase completion, be- 
fore the Program or Erase Status bits are checked for 
success. 

If the Program AND Erase Status bits are set to I’s dur- 
ing an erase attempt, an improper command sequence 
was entered. Attempt the operation again. 

If Vpp low status is detected, the Status Register must be 
cleared before another program or erase operation is at- 
tempted. 

The Vpp Status bit, unlike an A/D converter, does not 
provide continuous indication of Vpp level. The WSM in- 
terrogates the Vpp level only after the program or erase 
command sequences have been entered and informs the 
system if Vpp has not been switched on. The Vpp Status 
bit is not guaranteed to report accurate feedback be- 


tween Vppi_ and VppH- 


These bits are reserved for future use and should be masked out when polling the Status Register. 


The WSM on-chip oscillator internally times the pro- 
gram/erase algorithms, making software timers unnec- 
essary. Block precondition is also controlled by the 
WSM as part of the erase algorithm. Block data pro- 
gramming to “0’s” before erasing is no longer needed. 


° Initializing the system 
° Code loader routine 
° Flash re-programming 
® Recovery routines 



Intel’s high quality design, manufacturing and testing 
result in outstanding reliability and performance 
throughout device life. Although Program Status and 
Erase Status bits are provided for Status Register com- 
pleteness, errors will probably not be encountered, if 
proper Vpp levels and software sequences are imple- 
mented. 

Intel offers standard software drivers, written in “C”, 
to assist software engineers implementing 28F001BX 
reprogramming for update utilities. These high-level 
routines, found in Appendix A, are adaptable to a wide 
range of juP and /xC platforms and system architec- 
tures. 

Covered in this section are the major software steps for 
a flash BIOS update utility: 

• Update software for a modified system 

• Pseudo-Code overview 


® Power management 


4.1 Update Software for a Modified 
System 

The design example of Section 3.0 assumes BIOS shad- 
owing for BIOS code execution while allowing BIOS 
writes to the flash socket. Many systems provide a reg- 
ister which enables BIOS writes and reads. Some sys- 
tems may not allow BIOS reads from RAM while per- 
forming BIOS writes to the flash socket, or vice versa. 
The reasons may be simple; no shadow RAM exists in 
the system (8088 or 8086 systems), or system logic 
treats “ROM writes” as an invalid operation. In these 
cases, perform all your required BIOS calls before you 
erase and program the flash memory. But keep in mind, 
to update the user on the progress of flash program- 
ming and indicate when programming is finished, you 
should add some basic screen or speaker “beep” rou- 
tines to your update utility. 
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4.2 Pseudo-Code Overview 

The following pseudo-code for an update utility pro- 
vides a brief description of the process of updating a 
BIOS in-situ. It is based on software developed by a 
customer for a PC platform with BIOS update capabili- 
ty. This Intel386-33 MHz system uses the 28F001BX 
for BIOS storage. Modify the flowchart below, if need- 
ed, for your particular chipset and hardware environ- 
ment. 

Pseudo-Code for Flash Update Routine ^ 

Initialize system (set up user screen, check battery pow- 
er, check device ID) 

Get BIOS file options (from floppy or modem) 

If no file present 

Send error message to insert BIOS update flop- 
py, or press ESC to exit 

Display BIOS update files, prompt user for choice and 
load to memory 

If file invalid, 

Prompt for file or exit 

Inform user what is about to happen, with option to 
continue or exit 

If user continues, inform them to not turn off the 
power or soft-reboot (CNTL-ALT-DEL) 

Erase 28F001BX main/parameter blocks 
If system interrupt occurs 

Suspend erase if flash memory access is required 
Resume Erase 

Write file[s] into flash memory 

Indicate to user that flash reprogramming is over 

Reboot the system 

4.3 Initializing the System 

Checking Power 

If your application is a laptop or palmtop computer, 
first check the battery to make sure there is enough 
power to do the update. If not, inform the user to re- 
charge the system before continuing the update and exit 
the update program. This ensures that the system won’t 
stop in the middle of an update. Next, initialize access 
to flash for reads and writes, then try reading the device 
ID through the Command Register. Checking the de- 
vice ID before programming or erasing helps determine 


intel. 

if reads and writes work correctly and that the flash 
memory in the system matches your code before start- 
ing to reprogram the part. The manufacturer ID for 
Intel flash memories is 89H (10001001), located at de- 
vice address 00000H. Device IDs are located at address 
0000 1H; the ID for the 28F001BX-T is 94H 
(10010100), and the 28F001BX-B device ID is 95H 
(10010101). These device addresses, in the DOS memo- 
ry map, correspond to system addresses E0000H (mfgr. 
ID) and E0001H (device ID). If Ai6 inversion is used 
as described in Section 3. 1, system addresses for mfgr. 
ID and device ID under normal operation are F0000H 
and F0001H. 

NOTE: 

During the initialization, you can also perform, a scan 
of the adaptor space to ascertain if there is more flash 
in the system. Other Intel Flash Memories share com- 
mon manufacturer IDs but have unique device IDs, 
listed below: 


Device 

Device 
ID (Hex) 

Device ID 
(Binary) 

28F256A 

B9H 

10111001 

28F512 

B8H 

10111000 

28F010 

B4H 

10110100 

28F020 

BDH 

10111101 

28F001 BX-T 

94H 

10010100 

28F001 BX-B 

95H 

10010101 


4.4 Code Loader Routine 

The update utility described in the previous section 
provides an optional mouse-driven color graphical user 
interface (GUI) and allows not only BIOS update to 
the main block but also update of the parameter blocks, 
and copy/compare of block data to a DOS file. These 
types of features convey to the end user the ease and 
simplicity of performing a BIOS update. For example, 
the main block update utility lists all possible BIOS 
files in the selected drive and directory, and prompts 
the user for the desired file. System OEMs may want to 
encode a specific BIOS file name into the generic loader 
utility “.COM” or “.EXE” file. This allows automatic 
reading of the new BIOS file into a program buffer, 
bypassing the user prompt. 

Once the file is loaded into RAM, the routine informs 
the user of the impending BIOS update and provides 
the option to exit if desired. If continued, it warns the 
user to not turn off power or reboot during the BIOS 
update procedure. It then erases and reprograms the 
main block with new BIOS data, notifies the user of 
successful update and reboots. 
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4.5 Flash Reprogramming Routines 

On-Chip Erase Algorithm 

The 28F001BX system erase algorithm is shown in Fig- 
ure 15. Note that the actual device erase algorithm 
(Quick-Erase) is controlled internally, including all tim- 
ing and block preconditioning. This provides the same 
high level of reliability proven on Intel’s ETOX II tech- 
nology, while reducing system debug efforts. Erase 
progress is reported to system software thru specific 
Status Register bits. The 28F001BX erases all bits of a 
block in parallel. Minimum and typical erase times for 
each block are listed below: 


Block 

Minimum 
Time (Sec) 

Typical 
Time (Sec) 

Parameter (ea.) 

1.3 

2.1 

Main 

3.0 1 

3.8 

Boot 

1.3 

2.1 


The actual erase time depends on the Vpp voltage level 
(11.4V- 12.6V), temperature and the number of erase 
cycles already completed on the part. System software 
must comprehend adequate time for Vpp, after enabled, 
to ramp to 12V before erase is attempted. Capacitors on 
the Vpp bus, in addition to the intrinsic pump nature of 
many 12V solutions, cause an RC ramp. Systems that 
direct-wire 12V need not worry about this delay. 

Erase Suspend/Resume 

Erase suspend gives the user the ability, while erasing a 
block of the 28F001BX, to read data or execute code 
from another block. This capability, in conjunction 
with the minimal system overhead provided by the 
WSM, makes disabling of interrupts during block erase 
unnecessary. Once given the erase suspend command, 
the WSM halts, reports suspend status to the Status 
Register and allows array reads. When issued erase re- 
sume, it proceeds at the point where it was suspended. 
Figure 16 details the system code flowchart that sus- 
pends and resumes erase. 
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Bus 

Operation 

Command 

Comments 

Write 

Erase 

Data = 20H 


Setup 

Address = Within Block 
to be erased 

Write 

Erase 

Data = DOH 
Address = Within Block 
to be erased 

Read 


Status Register Data. 
Toggle OE# or CE# to 
update Status Register 

Standby 


Check SR. 7 
1 = Ready, 0 = Busy 

Repeat for subsequent blocks. 

Full status check can be done after each block or after 

a sequence of blocks. 


Write FFH after the last block erase operation to reset 

the device to Read Array Mode. 



292077-14 


FULL STATUS CHECK PROCEDURE 



Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4, 5 
Both 1 = Command 
Sequence Error 

Standby 


Check SR. 5 
1 = Block Erase Error 

SR. 3 MUST be cleared, if set during an erase attempt, 
before further attempts are allowed by the Write State 
Machine. 

SR. 5 is only cleared by the Clear Status Register 
Command, in cases where multiple blocks are erased 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 15. 28F001BX Block Erase Algorithm 
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Bus 

Operation 

Command 

Comments 

Write 

Program 

Data = 40H 


Setup 

Address = Byte to 
be programmed 

Write 

Program 

Data to be Programmed 
Address = Byte to 
be programmed 

Read 


Status Register Data. 
Toggle OE# or CE# to 
update Status Register 

Standby 


Check SR.7 
1 = Ready, 0 = Busy 

Repeat for subsequent bytes. 

Full status check can be done after each byte or after 

a sequence of bytes. 

: 

Write FFH after the last byte programming operation to 

reset the device to Read Array Mode. 
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FULL STATUS CHECK PROCEDURE 



Bus 

Operation 

Command 

Comments 



Check SR.3 



1 = Vpp Low Detect 



Check SR.4 



1 = Byte Program Error 


SR.3 MUST be cleared, if set during a program 
attempt, before further attempts are allowed by the 
Write State Machine. 


SR. 4 is only cleared by the Clear Status Register 
Command, in cases where multiple bytes are 
programmed before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Figure 17. 28F001BX Byte Programming Algorithm 
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On-Chip Programming Algorithm 

As with 28F001BX erase, the Intel flash Quick-Pulse 
algorithm is internally controlled by the WSM. Figure 
17 shows a system software flowchart for the Com- 
mand Register/Status Register interface. Minimum 
and typical programming times (per byte) are 15 jlls 
and 18 fis, respectively. Actual time varies with Vpp, 
temperature and cumulative programming cycles on 
the device. Ensure that stable 12V is applied to the 
device before attempting byte programming. 

Full Status Checks 

After polling the Status Register and determining that 
the WSM is again READY, system software should 
further analyze the Status Register to ensure that pro- 
gram or erase has successfully completed. The WSM 
will return to READY status after program or erase 
command sequences under any of the following condi- 
tions: 

• Program/erase completed successfully, 

• Vpp transition below specification during the pro- 
gram/erase attempt, 

• Improper sequence of erase setup/confirm com- 
mands to the WSM, or 

• Inability to erase the specified block, or program the 
desired byte. 

Figures 15 and 17 detail the additional Status Register 
data analysis to ensure that program or erase have suc- 
cessfully occurred. 


4.6 Recovery Routine Overview 

Unsuccessful BIOS update can occur for any of the 
reasons listed below: 

1. Vpp transitions out of specified tolerance during 
program or erase. 

2. Incorrect code in the update BIOS disk file, or dam- 
aged BIOS disk. 

3. Loss of system power during program or erase. 

4. System reset (such as reboot) during program or 
erase. 

The Status Register, through bit 3, reports Vppn loss to 
system software. The BIOS update utility can detect 
scenario 1 and recover by simply re-attempting block 
update. 

A checksum of update BIOS code after copy from disk 
to RAM, before flash erase and reprogram, will elimi- 
nate error caused by scenario 2. 


PC motherboard logic should gate the 28F001BX RP# 
pin with both POWER GOOD and RESET # signals, 
to abort program or erase attempts if either scenario 3 
or 4 were to occur. This allows the processor to execute 
code out of the 8 Kbyte boot block upon system recov- 
ery. System reset or loss of system power will clear the 
Status Register to value 80H, leave the block being up- 
dated partially programmed or erased and reset the 
28F001BX to Read Array mode. As detailed previously 
in Section 3.1, a checksum of the main block will alert 
the system to an incomplete BIOS. Recovery is 
achieved by the following or similar steps: 

• Initialize CPU and system logic. 

• Initialize the system floppy disk. 

• Prompt the user to insert a BIOS diskette, through 
speaker “beep”. 

• Erase and reprogram the main and/or parameter 
blocks with file data. 

• Reboot 


4.7 Power Management 


Battery-powered PCs incorporate a variety of tech- 
niques to prolong system life between recharges. Typi- 
cally, power management software senses user inactivi- 
ty and shuts off power-intensive sections of the system. 
Options include: 



• Display powerdown 


• Disk/hard drive powerdown 


• System clock slowdown or suspend, and 

• Powerdown of non-volatile circuitry in the system. 


The 28F001BX fits the latter description. When the 
RP# pin transitions to GND, the device enters an ul- 
tra-low power mode, typically consuming 0.25 jmW 
thru Vco This technique can also be used to power 
down the BIOS memory after BIOS code has been 
shadowed to DRAM, if available in the system. When 
not programming or erasing the 28F001BX, the system 
should shut off 12V Vpp to the part to minimize cur- 
rent draw through this supply. 


User inactivity is typically detected if the keyboard has 
not been used, or the disk drive has not been accessed, 
for a predetermined interval (this is often user-pro- 
grammable). Power management software must ensure 
that a BIOS update is not occurring, before powering 
down the 28F001BX, to prevent incomplete update. 


For more information on power management tech- 
niques, consult datasheets and application notes on the 
Intel386SL microprocessor superset. 
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5.0 SUMMARY 

5.1 Traditional BIOS Storage and 
Disadvantages 

Traditional BIOS storage has been in EPROM, which 
offers nonvolatility and factory programming capabili- 
ty. In earlier PCs, the BIOS code was fairly simple (rel- 
ative to today’s software) and updates were infrequent, 
so EPROMs or ROMs were an acceptable BIOS stor- 
age medium. Today’s systems are much more sophisti- 
cated, with many designs supporting the Intel 
i 386 /i 486 TM microprocessors and new bus architec- 
tures like MCA and EISA for the first time. These new 
buses allow peripherals to take control of the system 
bus ... it is difficult to guess what new system configu- 
rations might emerge. Therefore, the potential for a 
change in the BIOS code is much greater and the fre- 
quency of change is likely to increase. 

A system designer may use EPROMs for BIOS storage 
to reduce initial system (component) costs, but the 
long-term update cost is much more than the difference 
between EPROM and flash memory components. A 
major manufacturer of PCs has estimated that a service 
call for a BIOS update with EPROMs can cost up- 
wards of $300.00 for ONE update at ONE site. 
EPROMs are also susceptible to bent leads during in- 
sertion by the technician, or more likely, the end user. 
Service is becoming a key differentiator between the 
multitudes of PC makers. Reducing the number of 
times a PC has to be opened for any reason and provid- 
ing improved service increases customer confidence and 
promotes a reliable image. 


5.2 Advantages of an Updatable BIOS 

Using flash memory for BIOS storage provides a flex- 
ible code medium that allows the BIOS code to adapt to 
changing hardware and software conditions. BIOS up- 
dates in flash are inexpensive, via a floppy disk or mo- 
dem. They remove EPROM inventories, reduce pack- 
aging requirements, reduce total postage costs and 
eliminate service cost for BIOS code updates by remov- 
ing the need for a technician to do the update. A com- 
pany that supports mutiple OEMs can improve version 
management control by using a flash BIOS and floppies 
or a BBS for updates. An additional benefit is that not 
only the BIOS, but DOS itself can be stored in the same 
flash memory device. 


5.3 Advantages of Adding DOS in 
FLASH 

Once the requirements for flash memory BIOS are met, 
the capability is also in place for adding DOS in 
FLASH. Why put DOS in FLASH? For laptop and 


palmtop PCs, battery longevity is of paramount con- 
cern, followed closely by weight and increasing user 
RAM (640 KB) space. Extra user RAM is needed for 
applications that require more than the typical 
570 Kbytes (640 KB -70 KB) available with disk-based 
DOS. Digital Research Incorporated and Microsoft 
both make “DOS-in-ROM” products that address 
these needs. MS-DOS ROM version 3.22 is an example. 

Microsoft’s MS-DOS ROM Version 3.22 is a full-func- 
tion version of MS-DOS 3.2. It features instant-on and 
employs only 15 KB of the 640 KB DOS RAM user 
space, leaving the rest for applications. Since MS-DOS 
ROM Version 3.22 loads from adaptor space, both disk 
access and DOS loadtime are reduced. For laptops, 
anything that can reduce disk access equates to battery 
longevity. Laptops can reduce weight by using MS- 
DOS ROM Version 3.22 and replacing the floppy drive 
with an IC card. Adding MS-DOS ROM Version to 
desktops also liberates additional user RAM for the 
same above reasons, but may not be optimal for high 
speed 32-bit systems. 

All future versions of MS-DOS will be supported with 
equivalent versions of MS-DOS ROM. See Appendix B 
for more information. 


5.4 Advantages of Adding 

1 MB-4 MB of Resident Code 
Storage 

There is a growing need for systems to be able to pro- 
vide a small suite of bundled applications. Benefits to 
the user are faster application execution thru reduced 
hard or floppy disk access, no power used to store the 
resident code, and instant-on. No time is wasted trans- 
ferring data over a disk I/O interface. The code is 
instead loaded to RAM with a simple memory copy 
function or procedure. In some cases, code is directly 
executed by the processor. Tandy’s Deskmate is an ex- 
ample of such a system. Future versions of Deskmate- 
like user interfaces could easily be made flash-updata- 
ble. SRAM is too expensive and requires power to just 
store files. Furthermore, battery backup is not a reliable 
means of achieving nonvolatility. Intel’s Flash Memory 
can provide user configurability for 1 MB-4 MB of 
code storage for just 2x-3x the cost of EPROMs and 
less than half the cost of SRAM. Applications such as 
Lotus 123, WordPerfect and Microsoft Works also 
come in either a direct-execute “ROM” version or a 
load-from-ROM format. Many other ROM application 
software packages are in development, servicing the 
successful and growing needs of the laptop/palmtop 
computers. Therefore, if an application can be stored or 
runs from ROM, it can be stored and run from flash. 
As software packages are periodically updated, flash 
memory provides the capability of updating these 
“ROM” applications at little cost to the software ven- 
dor and with no system disassembly required. 
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APPENDIX A 
SOFTWARE ROUTINES 




/* Copyright Intel Corporation, 1991 */ 
/* Brian Dipert, Intel Corporation, July 14, 1991, Revision 1.4 */ 
/* The following drivers control the Command and Status Registers of */ 
/* the 28F001BX Flash Memory to drive byte program, block erase. Status */ 
/* Register read and clear and array read algorithms. */ 
/* Sample Vpp and RP# control blocks are also included. */ 
/* The functions listed below are included: */ 
/* erasbgn() : Begins block erasure */ 
/* erassusp() : Suspends erase to allow reading data from a block of the */ 
/* 28F001BX other than that being erased */ 
/* erasres(): Resumes erase if suspended */ 
/* end(): Polls the Write State Machine to determine if block erase or */ 
/* byte program have completed */ 
/* eraschk(): Executes full status check after erase completion */ 
/* progbgn(): Begins byte programming */ 
/* progchk(): Executes full status check after byte program completion */ 
/* idread(): Reads and returns the manufacturer and device IDs of the */ 
/* target 28F001BX */ 
/* statrd(): Reads and returns the contents of the Status Register */ 
/* statclr(): Clears the Status Register */ 
/* rdmode(): Puts the 28F001BX in Read Array mode */ 
/* rdbyte(): Reads and returns a specified byte from the target 28F001BX */ 
/* vppup() : Enables high voltage Vpph */ 
/* vppdown() : Disables Vpph */ 
/* pwdon(): Ramps the RP# pin to high voltage Vhh, enabling boot block */ 
/* program/erase */ 
/* pwdoff () : Disables high voltage Vhh on RP# , disabling program */ 
/* and erase of boot block */ 
/* */ 
/* Addresses are transferred to functions as pointers to far bytes (ie long */ 
/* integers). An alternate approach is to create a global array the size of the */ 
/* 28F001BX and locate "over" the 28F001BX in the system memory map. Accessing */ 
/* specific locations of the 28F001BX is then accomplished by passing the chosen */ 
/* function an offset from the array base versus a specific address. Different */ 
/* microprocessor architectures will require different array definitions; ie for */ 
/* the Intel architecture, define it as "byte boot [2] [10000]" and pass each */ 
/* function TWO offsets to access a specific location. MCS-51 architectures */ 
/* are limited to "byte boot [10000] " ; alternate approaches such as writing to */ 
/* control bits will be required to access the full flash array */ 
/* */ 
/* To create a far pointer, a function such as MK_FP() can be used, given */ 
/* a segment and offset in the Intel architecture. I use Turbo-C ; see your */ 
/* compiler reference manual for additional information. */ 
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y** ************************************************************************ ********* j 


/* Revision History: Rev 1.4 ♦/ 

/* ♦/ 

/* Changes from 1.0 to 1.1: Added typedef for "byte" to accurately reflect */ 

/♦ this x8 device. Altered variable definitions accordingly. Combined ♦/ 

/* functions progend() and erasend() into function end(). */ 

/* ♦/ 

/* Changes from 1.1 to 1.2: Added this revision history block. Added above ♦/ 

/* comments on alternate addressing methods. */ 

/* */ 

/* Changes from 1.2 to 1.3: Added pass/fail error return from idread(), */ 

/* idread() at beginning of progbgn() and erasbgn(), pass/fail error */ 

/* return from progbgn() and erasbgn(). */ 

/* ♦/ 

/* Changes from 1.3 to 1.4: Revised code to reflect simplified program and */ 

/* erase algorithms. 28F001BX automatically transitions to Read Status Register */ 

/♦ mode after program command sequence, erase command sequence and remains in */ 

/* Read Status Register mode after Erase Suspend is issued. Address 0000H is no */ 

/* longer required to read or clear the Status Register. */ 


y***********************************************************************************/ 

typedef unsigned char byte ; 

y*********************************************************************************** 

/* Function: Main 

/* Description: Included only to omit errors when attempting to compile code. */ 

/* The end customer would insert their main program here. */ 

/***********************************************************************************/ 

main() 

[ 

1 


/***********************************************************************************/ 

/* Function: Erasgbn */ 

/* Description: Begins erase of a block. */ 

/* Inputs: blckaddr: System address within the block to be erased */ 

/* Outputs: None */ 

/* Returns: 0 = Erase successfully initiated */ 

/* 1 = Erase not initiated (ID check error) */ 

/* Device Read Mode on Return: Status Register (ID if returns 1) */ 

**************************** ****************************************************** j 

#define ERASETUP 0X20 /* Erase Setup command */ 

#define ERASCONF OXDO /* Erase Confirm command */ 


int erasbgn (blckaddr) 


byte far *blckaddr; /* 

/* 


if (idread ( )==1) /* 

return (1) ; 

♦blckaddr = ERASETUP; /* 

♦blckaddr = ERASCONF ; /♦ 

return (0) ; 

} 


blckaddr is an address within the block to be 
erased 


ID read error; device not powered up? 

Write Erase Setup command to block address 
Write Erase Confirm command to block address 


*/ 

*/ 


*/ 

*/ 

*/ 
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j**************************** ****************************************** **************/ 

/* Function: Erassusp */ 

/* Description: Suspends block erase to read from another block */ 

/* Inputs: None */ 

/* Outputs: None */ 

/* Returns: 0 = Erase suspended */ 

/* 1 = Error; Write State Machine not busy (erase suspend not possible) */ 

/* Device Read Mode on Return: Read Status Register */ 

#define RDYMASK 0X80 /* Mask to isolate the WSM Status bit of the */ 

/* Status Register */ 

#define WSMRDY 0X80 /* Status Register value after masking, signifying */ 

/* that the WSM is no longer busy */ 

#define SUSPMASK 0X40 /*Mask to isolate the Erase Suspend Status bit of the */ 

/* Status Register */ 

#define ESUSPYES 0X40 /* Status Register value after masking, signifying */ 

/* that erase has been suspended */ 

#define STATREAD 0X70 /* Read Status Register command */ 

#define SYSADDR 0 /* This constant can be initialized to any address */ 

/* within the memory map of the target 28F001BX */ 

/* and is alterable depending on the system */ 

/* architecture */ 

#define SUSPCMD OXBO /* Erase Suspend command */ 


int erassusp () 


byte far *stataddr; /* Pointer variable used to write commands to device */ 

stataddr = (byte far *) SYSADDR; 

*stataddr = SUSPCMD; /* Write Erase Suspend command to the device */ 

*stataddr = STATREAD; /* Write Read Status Register command to 28F001BX */ 

while ( (*stataddr & RDYMASK) != WSMRDY) 

; /* Will remain in while loop until bit 7 of the */ 

/* Status Register goes to 1, signifying that the */ 

/* WSM is no longer busy */ 

if ( (*stataddr & SUSPMASK) == ESUSPYES) 

return(O) ; /* Erase is suspended ... return code "0" */ 

return(l) ; /* Erase has already completed; suspend not possible. */ 

/* Error code "1" */ 

} 
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/* Function j Erasres */ 

/* Description: Resumes block erase previously suspended */ 

/* Inputs: None */ 

/* Outputs: None */ 

/* Returns: 0 = Erase resumed */ 

/* 1 = Error; Erase not suspended when function called */ 

/* Device Read Mode on Return: Status Register */ 

#def ine RDYMASK 0X80 /* Mask to isolate the WSM Status bit of the */ 

/* Status Register */ 

#define WSMRDY 0X80 /* Status Register value after masking, signifying */ 

/* that the WSM is no longer busy */ 

#define SUSPMASK 0X40 /* Mask to isolate the Erase Suspend Status bit */ 

/* of the Status Register */ 

#define ESUSPYES 0X40 /* Status Register value after masking, signifying */ 

/* that erase has been suspended */ 

#define STATREAD 0X70 /* Read Status Register Command */ 

#define SYSADDR 0 /* This constant can be initialized to any */ 

/* address within the memory map of the target */ 

/* 28F001BX and is alterable depending on the */ 

/* system architecture */ 

#define RESUMCMD OXDO /* Erase Resume Command */ 


int erasres () 

{ 

byte far *stataddr; /* Pointer variable used to write commands to device */ 


stataddr = (byte far *) SYSADDR, 

*stataddr = STATREAD; /* Write Read Status Register command to 28F001BX */ 

if ( (*stataddr & SUSPMASK) != ESUSPYES) 

return (1) ; /* Erase not suspended. Error code "1" */ 

*stataddr = RESUMCMD; /* Write Erase Resume command to the device */ 

while ( (*stataddr & SUSPMASK) == ESUSPYES) 

; /* Will remain in while loop until bit 6 of the */ 

/* Status Register goes to 0, signifying */ 

/* erase resumption */ 

while ( (*stataddr & RDYMASK) == WSMRDY) 

; /* Will remain in while loop until bit 7 of the */ 

/* Status Register goes to 0, signifying */ 

/* that the WSM is once again busy */ 

return (0) ; 


4-384 



AP-341 


iny 




/* Function: End */ 
/* Description: Checks to see if the WSM is busy */ 
/* (is program/erase completed?) */ 
/* Inputs: None */ 
/* Outputs: statdata: Status Register data read from device */ 
/* Returns: 0 = Program/Erase completed */ 
/* 1 = Program/Erase still in progress */ 
/* Device Read Mode on Return: Status Register */ 


/*****.*******************#*********#**********#*****************%******************/ 


#define RDYMASK 0X80 

#define WSMRDY 0X80 

#define STATREAD 0X70 

#define SYSADDR 0 


/* Mask to isolate the WSM Status bit of the */ 
/* Status Register */ 
/* Status Register value after masking, signifying */ 
/* that the WSM is no longer busy */ 
/* Read Status Register command */ 
/* This constant can be initialized to any */ 
/* address within the memory map of the target */ 
/* 28F001BX and is alterable depending on the */ 
/* system architecture */ 


int end (statdata) 


byte * statdata; 

I 


/* Allows Status Register data to be passed back */ 

/* to the main program for further analysis */ 


byte far *stataddr; /* Pointer variable used to write commands to 

/* device 

stataddr = (byte far*) SYSADDR ; 

*stataddr = STATREAD; /* Write Read Status Register command to 28F001BX 

if ( ( (*statdata = *stataddr) & RDYMASK) != WSMRDY) 

return (1); /* Program/erasure still in progress. . .code "1" 

return (0); /* Program/erase attempt completed. . .code n 0 n 

) 


V 

V 

V 

*/ 

*/ 
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/* Function: Eraschk */ 

/* Description: Completes full Status Register check for erase (proper */ 

/* command sequence, Vpp low detect, erase success). This routine assumes */ 

/* that erase completion has already been checked in function end() and */ 

/* therefore does not check the WSM Status bit of the Status Register */ 

/* Inputs: statdata: Status Register data read in function end */ 

/* Outputs: None */ 

/* Returns: 0 = Erase completed successfully */ 

/* 1 = Error; Vpp low detect */ 

/* 2 = Error; Block erase error */ 

/* 3 = Error; Improper command sequencing */ 

/* Device Read Mode on Return: Same as when entered */ 

#define ESEQMASK 0X30 /* Mask to isolate the Erase and Program */ 

/* Status bits of the Status Register */ 

#define ESEQFAIL 0X30 /* Status Register value after masking if erase */ 

/* command sequence error has been detected */ 

#define ERRMSK 0X20 /* Mask to isolate the Erase Status bit of the */ 

/* Status Register */ 

#define ERASERR 0X20 /* Status Register value after masking if erase error */ 

/* has been detected */ 

#define VLOWMASK 0X08 /* Mask to isolate the Vpp Status bit of the Status */ 

/* Register */ 

#define VPPLOW 0X08 /* Status Register value after masking if Vpp low */ 

/* has been detected */ 

int eraschk (statdata) 

byte statdata; /* Status Register data that has been already read */ 

/* from the 28F001BX in function end() */ 


if ((statdata & VLOWMASK) == VPPLOW) 

return (1) ; /* Vpp low detect error, return code n l n */ 

if ((statdata & ERRMSK) == ERASERR) 

return (2) ; /* Block erase error detect, return code "2" */ 

if ((statdata & ESEQMASK) == ESEQFAIL) 

return (3) ; /* Erase command sequence error, return code "3 n */ 

return (0) ; /* Block erase success, return code "0" */ 

1 
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/* Function: Progbgn */ 

/* Description: Begins byte program sequence */ 

/* Inputs: pdata: Data to be programmed into the device */ 

/* paddr: Target address to be programmed */ 

/* Outputs: None */ 

/* Returns: 0 = Program successfully initiated .*/ 

/* 1 = Program not initiated (ID check error) */ 

/* Device Read Mode on Return: Status Register (ID if returns 1) */ 

#define SETUPCMD 0X40 /^Program Setup command */ 

int progbgn (pdata, paddr) 

byte pdata; /* Data to be programmed into the 28F001BX */ 

byte far *paddr; /* paddr is the destination address for the data */ 

/* to be programmed */ 


if (idread () == 1) 
return (1) ; 
*paddr = SETUPCMD; 

*paddr = pdata ; 

return (0) ; 


/* Device ID read error. . .powered up? 

/* Write Program Setup command and 
/* destination address 

/* Write program data 
/* and destination address 


*/ 

*/ 

V 

*/ 

*/ 


I 


4-387 


AP-341 



f************ ******** ******** *************************************************** ***^ 


/* Function: Progchk */ 
/* Description: Completes full Status Register check for byte program (Vpp low */ 
/* detect, programming success). This routine assumes that byte program */ 
/* completion has already been checked in function end() and */ 
/* therefore does not check the WSM Status bit of the Status Register */ 
/* Inputs: statdata: Status Register data read in function end */ 
/* Outputs: None */ 
/* Returns: 0 = Byte programming completed successfully */ 
/* 1 = Error; Vpp low detect */ 
/* 2 = Error ; Byte program error */ 
/* Device Read Mode on Return: Status Register */ 


j********************************* ****************************** *******************/ 


#def ine PERRMSK 
#define PROGERR 
#define VLOWMASK 
#define VPPLOW 


0X10 /* Mask to isolate the Program Status bit of the 
/* Status Register 

0X10 /* Status Register value after masking if program 

/* error has been detected 

0X08 /* Mask to isolate the Vpp Status bit of the Status 

/* Register 

0X08 /* Status Register value after masking if Vpp low 

/* has been detected 


int progchk (statdata) 


byte statdata; 


/* Status Register data that has been already read 
/* from the 28F001BX in function end() 


*/ 

V 

*/ 

*/ 

*/ 

*/ 

*/ 

*/ 


*/ 

*/ 


if ((statdata & VLOWMASK) == VPPLOW) 

return (1) ; /* Vpp low detect error, return code "1" */ 

if ((statdata & PERRMSK) = PROGERR) 

return (2) ; /* Byte program error detect, return code "2" */ 

return (0) ; /* Byte/string program success, return code "0" */ 

} 
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/* Function: Idread */ 
/* Description: Reads the manufacturer and device IDs from the target 28F001BX */ 
/* Inputs: None */ 
/* Outputs: mfgrid: Returned manufacturer ID */ 
/* deviceid: Returned device ID */ 
/* Returns: 0 = ID read correct */ 
/* 1 = Wrong or no ID */ 
/* Device Read Mode on Return: Intelligent Identifier */ 




#def ine MFGRADDR 

0 

/* 

Address "0" for the target 28F001BX... 

*/ 



/* 

alterable depending on the system 

*/ 



/* 

architecture 

*/ 

#define DEVICADD 

1 

/* 

Address n l n for the target 28F001BX... 

*/ 



/* 

alterable depending on the system 

*/ 



/* 

architecture 

*/ 

#define IDRDCOMM 

0X90 

/* 

Intelligent Identifier command 

*/ 

#define INTELID 

0X89 

/* 

Manufacturer ID for Intel devices 

*/ 

#define DVCIDBT 

0X94 

/* 

Device ID for 28F001BX-T ; change to 95H if 

*/ 



/* 

using 28F001BX-B I ! ! 

*/ 

int idread (mfgrid, deviceid) 




byte *mfgrid; 


/* 

The manufacturer ID read by this function, to 

*/ 



/* 

be transferred back to the calling 

*/ 



/* 

program 

*/ 

byte *deviceid; 


/* 

The device ID read by this* function, to be 

*/ 



/* 

transferred back to the calling function 

*/ 

{ 

byte far *tempaddr; 


/* 

Pointer address variable used to read IDs 

V 


tempaddr = (byte far*) MFGRADDR ; 

*tempaddr= IDRDCOMM ; /* Write intelligent identifier command to an */ 

/* address within the 28F001BX memory map */ 

/* (in this case, 00H) */ 

*mfgrid = *tempaddr; /* Read mfgr ID, tempaddr still points at address "0" */ 

tempaddr = (byte far*) DEVI CADD ;/* Point to address "1" for the device specific ID */ 

*deviceid= Hempaddr; /* Read device ID */ 

if ( (*mfgrid != INTELID) || (*deviceid != DVCIDBT) ) 

return (1) ; /* ID read error; device powered up? */ 

return (0) ; 
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/* Function: Statrd */ 

/* Description: Returns contents of the target 28F001BX Status Register */ 

/* Inputs: None */ 

/* Outputs: statdata: Returned Status Register data */ 

/* Returns: Nothing */ 

/* Device Read Mode on Return: Status Register */ 

y********^*s!e* J !t5it**Ji e3 S: 3 }c*5}:**«*5!c***5!t5)c*sSc>!c5!e*s!c5!£5!c****=!t***sSc>!c*****5!c«*!5c*5{t******5>:5ic**>!t*********/ 

#define STATREAD 0X70 /* Read Status Register command */ 

#define SYSADDR 0 /* This constant can be initialized */ 

/* to any address within the */ 

/* memory map of the target 28F001BX */ 

/* and is alterable depending on */ 

/* the system architecture */ 

int statrd (statdata) 

byte *statdata; /* Allows Status Register data to */ 

/* be passed back to the calling program */ 

/* for further analysis */ 


byte far *stataddr; /* Pointer variable used to write */ 

/* commands to device */. 

stataddr = (byte far*) SYSADDR ; 

*stataddr = STATREAD; /* Write Read Status Register , */ 

/* command to 28F001BX */ 

*statdata = *stataddr; 
return ; 


4-390 



int©l 


AP-341 


/* Function: Statclr */ 

/* Description: Clears the 28F001BX Status Register */ 

/* Inputs: None */ 

/* Outputs: None */ 

/* Returns: Nothing */ 

/* Device Read Mode on Return: Status Register */ 

y********************************************************************* sjc************^ 

#define STATCLER 0X50 /* Clear Status Register command */ 

#define SYSADDR 0 /* This constant can be initialized to any */ 

/* address within the memory map of the target*/ 

/* 28F001BX and is alterable depending on */ 

/* the system architecture */ 

int statclr () 


byte far *stataddr; 


/* Pointer variable used to write commands to 
/* device 


stataddr = (byte far*) SYSADDR ; 

*stataddr = STATCLER ; /* Write Clear Status Register command to 

/* 28F001BX 

return ; 


/* Function: Rdmode */ 
/* Description: Puts the target 28F001BX in Read Array Mode. This function */ 
/* might be used, for example, to prepare the system for return to code */ 
/* execution out of the flash memory after program or erase algorithms */ 
/* have been executed off-chip */ 
/* Inputs: None */ 
/* Outputs: None */ 
/* Returns: Nothing */ 
/* Device Read Mode on Return: Array */ 

y^Ht**^*****^^*****^*#****^#^*****^**********^*^ 5 !'******^***************!!'*#*********^ 


#def ine RD ARRAY 
#define SYSADDR 


OXFF /* Read Array command */ 

0 /* This constant can be initialized to any */ 

/* address within the memory map of the target */ 

/* 28F001BX and is alterable depending on */ 

/* the system architecture */ 


int rdmode ( ) 


byte far *tempaddr ; /* Pointer variable used to write commands to 

/* device 

tempaddr = (byte far*) SYSADDR ; 

*tempaddr = RDARRAY ; /* Write Read Array command to 28F001BX 

return ; 
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/**********************************************************************************/ 

/* Function: Rdbyte */ 

/* Description: Reads a byte of data from a specified address and */ 

/* returns it to the calling program */ 

/* Inputs: raddr: Target address To be read from */ 

/* Outputs: rdata: Data at the specified address */ 

/* Returns: Nothing */ 

/* Device Read Mode on Return: Array */ 

#define RDARRAY OXFF /* Read array command */ 

int rdbyte (rdata, raddr) 

byte *rdata; /* Returns data read from the device at */ 

/* specified address */ 

byte far *raddr ; /* Raddr is the target address to be read from */ 

[ 

*raddr = RDARRAY ; /* Write read array command to an address within */ 

/* the 28F001BX memory map (in this case the */ 

/* target address) */ 

*rdata = *raddr ; /* Read from the specified address and store */■ 

return; 

) 
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/* Function: Vppup */ 
/* Description: Ramps the Vpp supply to the target 28F001BX to enable */ 
/* programming or erase. This routine can be tailored to the individual */ 
/* system architecture. For purposes of this example, I assumed that a */ 
/* system Control Register existed at system address 20000 hex. */ 
/* with the following definitions: */ 
/* */ 
/* Bit 7: Vpph Control: 1 = Enabled */ 
/* 0 = Disabled */ 
/* Bit 6: PWD Control: 1 = PowerDown Enabled */ 
/* 0 = PowerDown Disabled */ 
/* Bits 5-0: Undefined */ 
/* Inputs: None */ 
/* Outputs: None */ 
/* Returns: Nothing */ 
/* Device Read Mode on Return: As existed before entering the function. */ 
/* Part is now ready for program or erase command sequence */ 

#define VPPHIGH 0X80 /* Bit 7 = 1, Vpp elevated to Vpph */ 


#define SYSCADDR 0X20000 /* Assumed system Control Register Address */ 

int vppup () 

{ 

byte far *contaddr; /* Pointer variable used to write data */ 

/* to the System Control Register */ 

contaddr = (byte far*) SYSCADDR ; 

*contaddr = *contaddr | VPPHIGH; /* Read current Control Register data, */ 

/* "OR" with constant to ramp Vpp */ 

return ; 

} 
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/***********************************************************************************/ 
/* Function: Vppdown */ 

/* Description: Ramps down the Vpp supply to the target 28F001BX to */ 

/* disable programming/erase. See above for a description of the */ 

/* assumed system Control Register. */ 

/* Inputs: None */ 

/.* Outputs: None */ 

/* Returns: Nothing */ 

/* Device Read Mode on Return: As existed before entering the function. Part */ 

/* now has high Vpp disabled. If program or erase was in progress when */ 

/* this function was called, it will complete unsuccessfully with Vpp low error */ 
/* in the Status Register, */ 

******* 

#define VPPDWN 0X7F /* Bit 7 = 0, Vpp lowered to Vppl */ 

#define SYSCADDR 0X20000 /* Assumed system Control Register Address */ 


int vppdown () 

I 

byte far *contaddr; /* Pointer variable used to write data to the */ 

/* system Control Register */ 

contaddr = (byte far*) SYSCADDR ; 

*contaddr = * contaddr & VPPDWN ; 

/* Read current Control Register data, "AND" with */ 

/* constant to lower Vpp */ 

return ; 
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/* Function: Pwdon */ 

/* Description: Toggles the 28F001BX RP# pin low to put the device in Deep */ 

/* PowerDown mode. See above for a description of the assumed */ 

/* system Control Register. */ 

/* Inputs: None */ 

/* Outputs: None */ 

/* Returns: Nothing */ 

/* Device Read Mode on Return: The part is powered down. If program or erase */ 

/* was in progress when this function was called, it will abort with */ 

/* resulting partially programmed or erased data. Recovery in the form of */ 

/* repeat of program or erase will be required once the part */ 

/* transitions out of powerdown, to initialize data to a known state. */ 

#define PWD 0X40 /* Bit 6 = 1, RP# enable */ 

#define SYSCADDR 0X20000 /* Assumed system Control Register Address */ 

int pwdon () 

{ 

byte far *contaddr; /* Pointer variable used to write data to the */ 

/* system Control Register */ 

contaddr = (byte far*) SYSCADDR ; 

♦contaddr = *contaddr | PWD;/* Read current Control Register data, n 0R n with */ 

/* constant to enable Deep PowerDown */ 

return ; 

} 
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ft***********************************************************************************/ 

/* Function: Pwdoff */ 

/* Description: Toggles the 28F001BX RP# pin high to transition the part */ 

/* out of Deep PowerDown. See above for a description of the assumed system */ 

/* Control Register. */ 

/* Inputs: None */ 

/* Outputs: None */ 

/* Returns : Nothing */ 

/* Device Read Mode on Return: Read Array mode. Low voltage is removed */ 

/* from RP#. 28F001BX output pins will output valid data time tPHQV */ 

/* after the RP# pin transitions high (reference the datasheet AC */ 

/* Read Characteristics) assuming valid states on all other control */ 

/* and power supply pins. */ 

#def ine PWDOFF OXBF /* Bit 6 = 0, RP# disabled */ 

#define SYSCADDR 0X20000 /* Assumed system Control Register Address */ 


int pwdoff () 

[ 

byte far *contaddr; /* Pointer variable used to write data to the */ 

/* system Control Register */ 

contaddr = (byte far*) SYSCADDR ; 

♦contaddr = *contaddr & PWDOFF; /* Read current Control Register data, "AND" with */ 

/* constant to disable Deep PowerDown */ 

return ; 
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APPENDIX B 

MS-DOS ROM VERSION OVERVIEW 


Technical Highlights 

(Taken from Microsoft Product Overview) 

RAM Economy 


is also positioned independent, in that it can reside any- 
where in the “reserved’’ space (the area between 
640 KB and 1 MB). This provides an additional Ver- 
sion to the specific requirements of the OEM’s hard- 
ware platform. 


Because MS-DOS ROM Version executes from ROM, 
only 15 KB of system RAM space is required for MS- 
DOS. For a typical user, this will result in a savings of 
about 40 KB of RAM over disk-based MS-DOS. As a 
result of this savings, the user is able to run more pro- 
grams and work with larger data files with the ROM 
Version than with disk-based MS-DOS. Instant-On 
MS-DOS ROM Version provides a significant reduc- 
tion in “boot time”, or the amount of time it takes from 
the completion of the power-on self test until a DOS 
prompt appears. With the ROM Version, this typically 
takes one second. 

No End-User Installation 

MS-DOS ROM Version is pre-installed by the OEM 
(original equipment manufacturer) in the system, thus 
freeing end users from the task of installing MS-DOS. 

Adaptable to OEM Hardware Platforms 

MS-DOS ROM Version is structured such that it al- 
lows the OEM to include a specific routine to deter- 
mine which drive to boot from and any specific param- 
eters if booting from the ROM drive. This makes it 
possible to easily port the ROM Version to a wide vari- 
ety of hardware environments. MS-DOS ROM Version 


ROM Economy 

MS-DOS ROM Version occupies only 62 KB of ROM 
space, thus minimizing the amount of ROM that an 
OEM must include in the system. Three modules reside 
in the reserved space: COMMAND.COM, IO.SYS and 
the DOS Kernel. All three are position independent, so 
an OEM can decide where to place these modules in the 
reserved area. 


National Language Support 

Microsoft offers a full compliment of localized version 
of MS-DOS ROM Version, including Kanji and Chi- 
nese translations. 



Ease of Development 

As PCs become the engines for many embedded appli- 
cations, manufacturers would like to develop new ap- 
plications utilizing existing PC software tools. MS-DOS 
ROM allows manufacturers to take full advantage of 
these tools. For instance, a programmer can develop 
and debug an application onto a PC subsystem which 
may be embedded into a larger system. This benefit 
translates into a cost savings when developing a solu- 
tion for vertical markets. 
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APPENDIX C 
BIOS VENDOR 


American Megatrends Inc. (AMI) 
1346 Oakbrook Drive, Suite 120 
Norcross, GA 30093 
(404) 263-8181 

Award Software Inc. 

130 Knowles Drive 
Los Gatos, CA 95030 
(408) 370-7979 

Phoenix Technologies, LTD. 

40 Airport Parkway 
San Jose, CA 95110 
(408) 452-6500 

SystemSoft Corporation 
313 Speen Street 
Natick, MA 01760 
(508) 651-0088 


INFORMATION 


This list is intended for example only, and in no way 
represents all companies that support BIOS software. 
Since this industry developes many new solutions each 
year, Intel recommends that the designer contact the 
vendors for their latest products. Intel will continue to 
work with BIOS vendors to develop optimum solutions. 
Intel Corporation assumes no responsibility for circuit- 
ry or software other than circuitry embodied in Intel 
products. No software patent licenses are implied. 
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APPENDIX D 

MICROPROCESSOR/MICROCONTROLLER 
COMPATIBILITY CHART 


28F001BX-T 

28F001BX-B 

x86 Family 

i960 KA/KB Microprocessor 

i860TM Family 

i960 SA/SB Microprocessor 

i960 CA Microprocessor 

MCS®-51 Family 


MCS®-96 Family 


REVISION HISTORY 


Number 

Description 

-005 

Changed PWD# to RP# to match JEDEC naming conventions. 
Updated RP# control circuitry of Figure 7. 
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1.0 INTRODUCTION 

PC BIOS has been migrating to flash-based designs 
with the introduction of highly optimized flash memory 
architectures. The first phase of this shift in paradigm 
was from ROM/EPROM-based BIOS to Bulk Erase 
Flash memory-based BIOS to provide for in-system up- 
datable BIOS and hence an easy update capability 
when BIOS changes are required. 

The second phase improved the basic flash design to 
migrate towards boot block flash memory architecture 
with the Intel 28F001BX Flash Memory. This im- 
provement enabled the implementation of additional 
features and provided a true design capability for porta- 
ble PC BIOS. 

The third phase of this paradigm shift now starting to 
evolve, deals with the need to grow beyond the tradi- 
tional BIOS space limit of 128 Kbytes imposed by the 
original PC architecture to accommodate the advanced 
features of today’s portable and desktop systems. 

This application note describes in detail this third phase 
in BIOS hardware and software implementation. Spe- 
cifically it will investigate why BIOS needs to grow be- 
yond the 128 Kbyte code size. Then, a design example 
using the Intel 28F200BX Boot Block Flash Memory 
will be explained in terms of both hardware and soft- 
ware. Finally, low voltage PC BIOS designs incorporat- 
ing 3.3V components are described. 


2.0 PC BIOS TODAY AT THE 

128 KBYTE CODE SIZE LIMIT 

The Basic Input/Output System (BIOS) code is the 
lowest system level software which manages the inter- 
action between all hardware components (CPU, Chip- 
Sets and I/O) with all software modules (Operating 
Systems and Applications Code). BIOS manages many 
functions in a PC, such as Power-On Self Test (POST), 
input vector creation, I/O services and system initiali- 
zation. Therefore BIOS is the essential interface layer 
for full system functionality and compatibility. 

The original PC architecture, developed in 1981, put 
restrictions on the size and mapping of the BIOS code 
which was then a very simple piece of software (on the 
order of 32 Kbytes for the original BIOS code). It was 
located at the top of the PC’s (8088) memory map 
which at the time was a maximum of 1 Mbyte. 


inlel. 

Then in 1984, the PC AT (80286) BIOS was expanded 
another 32 Kbytes for a total of 64 Kbytes. Subsequent- 
ly, towards the late 1980s, more elaborate BIOS set-up 
utilities started to be an integral part of the BIOS code. 
In addition, personal computer manufacturers designed 
custom features into their BIOS code to offer more sys- 
tem flexibility. This increase in code complexity ex- 
panded the AT BIOS code another 64 Kbytes (for a 
total of 128 Kbytes) To occupy the total BIOS reserved 
space in the 1 Mbyte memory map. 

In the DOS memory map, BIOS is mapped down from 
the top of the 1 -Mbyte address space (F0000H to 
FFFFFH). Additional BIOS code space is available for 
future enhancements from E0000H to EFFFFH. The 
next 256 Kbytes in the DOS memory map are reserved 
for adapter space to accommodate add-in boards (for 
enhanced graphics cards for instance). Finally the re- 
maining 640 Kbytes are reserved for the user to load 
his/her applications for execution. See Figure 1 for a 
graphical description. 


3.0 WHY BIOS CODE WILL GROW 
BEYOND 128 KBYTES 

As advances in computer design affect both desktop 
systems (with the addition of EISA, PCI and on-board 
SCSI capabilities) and portable systems (with the addi- 
tion of advanced power management capability and 1/ 
O cards), the need for larger amounts of non-volatile 
memory space becomes evident. 

A Notebook or a Palmtop computer design, for in- 
stance, may put the operating system, the system man- 
agement code, set-up or utility programs into the non- 
volatile memory area to conserve precious RAM space 
for applications. 

Additionally, Video BIOS can also be mapped into the 
Flash BIOS area. 

Therefore, to implement advanced capabilities and pro- 
vide new features (as described above) into powerful 
mobile computers, the 128 Kbyte BIOS code size limit 
had to be removed as it shall be explored in the next 
section. 

The BIOS of today and the future must adapt to the 
new requirements of portable PC designs and take ad- 
vantage of the new capabilities of low power PC chip- 
sets and I/O devices to achieve the highest performance 
and longest battery life at the lowest system cost. 
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(1024K) FFFFFHi 


1 MBYTE DOS MAP 


(960K) EFFFFH 


EOOOOH 
(896K) DFFFFH 


ADDITIONAL BIOS SPACE 


ADAPTER SPACE 
AND GRAPHIC SPACE 


INTEL 28F001BX-T 
BOOT BLOCK FLASH 
’ v ^ MEMORY MAP 

8K BOOT RECOVERY CODE 

4K PARAMETER BLOCK 


(640K) AOOOOH 


4K PARAMETER BLOCK 


MAIN BIOS CODE 


Figure 1. 128 Kbyte BIOS Code Segmentation in 1 -Mbyte DOS Memory Map 
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3.1 Advanced Power Management 

High integration CPUs and chip-sets allow for the de- 
sign of light, small form factor portable computers with 
long battery life. 

BIOS is the ideal place for implementing the power 
management techniques pioneered with the Intel386SL 
Microprocessor Superset. BIOS software vendors have 
implemented APM code for the latest generation of 
Notebook PCs. 

This added level of functionality imposed on the BIOS 
code increases the need for larger code space beyond 
the traditional 128 Kbyte BIOS implementations seen 
in today’s portable systems. 

APM code typically requires an additional 32 Kbyte of 
code space beyond the basic 64 Kbyte standard BIOS. 
Therefore, with the addition of APM, BIOS code grows 
to 96 Kbytes. 


3.2 Optimizing New Portable 
Applications 

With the implementation of PCMCIA cards for non- 
volatile file storage (with flash memory cards) and the 
ability to communicate over a telephone line (with mo- 
dem cards), mobile computers have truly become pow- 
erful tools on the road. 

The establishment of a common PC card standard for 
full system compatibility is described in the PCMCIA 
Standard release 2.0 (Personal Computer Memory 
Card International Association). Intel has developed a 
similar set of specifications fully compatible with the 
PCMCIA release 2.0 standard called the Exchangeable 
Card Architecture (ExCA). In order to implement card 
capability in a portable computer, additional BIOS 
code called Socket Services is minimally required to 
manage the system card functionality. To implement 
the specifications, socket services needs an additional 
16 Kbyte of code space. 

Furthermore, in the pen-based PC applications, there 
are even greater BIOS requirements to design-in unique 
features such as: pen extensions, touchscreen capability 


and character recognition interface code. These new 
features require the implementation of additional BIOS 
code (may be 16 Kbytes to 32 Kbytes). 

To take full advantage of Desktop system capabilities 
and performance while still having a portable computer 
to take on the road, docking station designs were con- 
ceived. This added level of complexity for the portable 
computer increases the code required in a basic system 
BIOS. 


3.3 Putting Microsoft MS-DOS 5.0 
Operating System ROM Version 
into the BIOS Chip 

Additionally, MS-DOS 5, ROM version is now becom- 
ing a standard in virtually all diskless sub-notebook, 
notebook and pen PC implementations. Many factors 
contribute to this approach. Chief among them is the 
reduced disk access and the resulting longer battery 
life. Another factor is the instant boot capability which 
is essential in certain applications. 

Today’s MS-DOS 5, ROM version occupies 64 Kbytes 
of code space as specified from the Microsoft Product 
Description. 

3.4 Relocated Resident VGA Code: 
VIDEO BIOS 

As described above in section 3.0, video BIOS can also 
be mapped into the system Flash BIOS memory allow-, 
ing the entire system non-volatile storage requirements 
to be satisfied with one Flash device. Resident VGA 
BIOS code takes approximately another 32 Kbytes of 
memory space. 

In summary, adding all the above code size require- 
ments, the resulting BIOS storage area increases from 
the initial 128 Kbyte requirement to somewhere be- 
tween 208 Kbytes (without pen extensions) to 240 
Kbytes (including a pen input capability). 

There are already portable designs today which have 
filled a 256 Kbyte code space to accommodate some of 
the above mentioned needs. 
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4.0 HARDWARE DESIGN FOR A 
256 KBYTE BIOS 


4.1 Intel 28F200BX/002BX Boot Block 
Flash Memory Family 

Building upon the wide acceptance of the 
Intel28F001BX 1 Mbit flash memory for BIOS designs, 
a new family of higher density flash components is now 
available to solve the PC designer’s need of implement- 
ing extended BIOS code beyond 128 Kbytes. 

These new flash memories at the 2 Megabit density lev- 
els, are structured around the same boot block architec- 
ture as the Intel 28F001BX and are therefore compati- 
ble. They provide block erasure capability, boot code 
hardware protection and very low power consumption 
as in the case of the 28F001BX. 

In addition, they incorporate new features to simplify 
the device interface and allow the system designer to 
optimize platform designs. 

These new features are summarized as follows: 

• User selectable 8-bit or 16-bit read/write operation 
(28F200BX) 

• 60ns access time performance 

• 16 Kbytes Boot Block space which is hardware pro- 
tected 


• Two, 8 KBytes Parameter Blocks 

• One, 96 KByte Main Block 
One, 128 KByte Main Block 

• o-bit only operation and packaging for space sensi- 
tive applications (28F002BX) 

In this section, we will describe these new features in 
more detail and discuss their system applicability. 

The blocking scheme, while still of the boot block type, 
is expanded by defining additional blocks (2 main 
blocks) to allow for software modularization and a self- 
contained design. 

As the size of the BIOS code stored in any one device 
grows due to the complexity and high integration of 
chip-sets, so does the “kernel” code stored in the boot 
section. The boot and parameter blocks were accord- 
ingly doubled in size in comparison to the 28F001BX 
device. The two parameter blocks of 8 KBytes each 
allow the PC designer to store BIOS extensions or Bat- 
tery-Backed SRAM configuration data (CMOS RAM, 
EISA configuration parameters). The two main blocks 
are used to store the main BIOS code in modular fash- 
ion if so desired for future easy updates. These main 
blocks can also be used to store ROM-executable Oper- 
ating System software such as MS-DOS 5, ROM ver- 
sion or drivers and utilities. Refer to" Figure 2 for the 
block locations for both the 28F200BX-T and 
28F002BX-T. 


(Word Addresses) 


(Word Addresses) 

1FFFFH 



3FFFFH 







1E000H 

16-Kbyte BOOT BLOCK 



3C000H 

16-Kbyte BOOT BLOCK 


1DFFFH 

1D000H 

8-Kbyte PARAMETER BLOCK 



3BFFFH 

3A000H 

8-Kbyte PARAMETER BLOCK 


1CFFFH 

1C000H 

8-KByte PARAMETER BLOCK 



39FFFH 

38000H 

37FFFH 

8-Kbyte PARAMETER BLOCK 


1BFFFH 

96-Kbyte MAIN BLOCK 



96-Kbyte MAIN BLOCK 



10000H 




20000H 



OFFFFH 

128-Kbyte MAIN BLOCK 



1FFFFH 

128-Kbyte MAIN BLOCK 


00000H 




00000H 



Valid Addresses in X16 Mode (BYTE# = 1): A0-A16 
Valid Addresses in X8 Mode (BYTE# = 0): 

A-1 (lowest order address) and A0-A16 





28F200BX-T Top Boot Map 28F002BX-T Top Boot Map 


Figure 2. 28F200BX-T/002BX-T Memory Maps 





AP-363 


In addition, the 28F200BX/002BX devices incorporate 
new capabilities desired by today’s sophisticated PC de- 
signers. 

The byte-wide or word-wide feature available as a de- 
signer-selectable option gives the ability to interface to 
an 8-bit or 1 6-bit wide bus. The performance and hard- 
ware goals of some systems may require 16-bit BIOS 
data bus. A system with a small amount of RAM and a 
large amount of flash memory-based operating system 
code for example, may require a 16-bit BIOS data bus 
to maintain a high performance level of operation. 

The high access speed of these new devices, which for 
the first time break the 60 ns barrier at the 2M and 4M 
densities, is another big advantage the PC designer can 
fully exploit to increase system performance and ac- 
ceptance in the marketplace. For example, a PC design- 
er may choose to execute BIOS directly out of flash 
memory instead of shadowing to system RAM as well 
as execute MS-DOS 5, ROM version out of flash for 
instant-on capability and to achieve better overall sys- 
tem performance. 

Block erasure allows independent modification of code 
and data and maximum flexibilty in production as well 
as after the system is shipped. The boot block, which is 
hardware protected, insures that minimal BIOS code is 
present to always boot up the system successfully. The 
16 Kbyte boot block is protected from alteration during 
system power excursions by a high voltage pin. This 
write protection pin called RP# has to transition to 
12V with the normal Vpp voltage pin to allow for boot 
block write and erase operations. 

If systems are designed with the ability to jumper or 
switch RP# to high voltage (12V), guaranteed full non- 
volatility of the boot code is achieved. This feature al- 
ways guarantees system recovery from power failure 
and provides the security needed for the end user when 
performing BIOS code updates. 

To meet the crucial needs of lower power consumption, 
the 28F200BX/002BX devices incorporate a deep-pow- 
er down current mode activated through the RP# pin 
under the TTL/CMOS level control. When this pin 
transitions to ground the device typically consumes 
1 microwatt through the Vcc supply pin. 

In addition, the 28F200BX/002BX devices include an 
Automatic Power Savings feature during active mode 
of operation. This feature allows the memory chip to 
put itself in a very low current state when it is enabled 
but not accessing a new memory location. 


intel. 

The 28F200BX/002BX devices incorporate an internal 
Write State Machine, Command User Interface and a 
Status Register to fully control the program and erase 
operations and greatly simplify the user write and erase 
algorithms and hence the update code procedure. They 
also include an erase suspend feature which allow the 
system to service interrupts and access the device dur- 
ing BIOS code updates (refer to Appendix B). 

Finally, the 28F200BX/002BX, 2-Megabit devices 
have an equivalent 4-Megabit boot block flash memory 
family of devices called the 28F400BX/004BX, allow- 
ing for easy density upgrade and total compatibility be- 
tween systems using both types of memories. Refer to 
the documentation mentioned in the reference section 
of this application note. 

Figure 3 is a block diagram description of the 
28F200BX/002BX products. 


4.2 Extended Flash BIOS Design 
Example 

This design example focuses primarily on how to inter- 
face the Intel 28F200BX-T or 28F002BX-T Boot Block 
flash memories to the Intel386SL Microprocessor Su- 
perset in a 16-bit wide or an 8-bit wide configuration 
respectively. This is an extended BIOS design example 
which demonstrates how the barrier of the 128-Kbyte 
BIOS size memory is eliminated. The design principles 
in this example apply to designs incorporating chip sets 
interfaced to SL Enhanced CPUs. Figure 4 shows an 
interface diagram of the Intel 28F200BX-T Boot Block 
Flash memory (128 K x 16) to the Intel386SL Micro- 
processor superset. Figure 5 shows an equivalent inter- 
face diagram of the Intel 28F002BX-T Boot Block flash 
memory (256 K x 8) to the Intel386SL Microprocessor 
Superset. 

The Intel386SL Microprocessor Superset Flash BIOS 
interface supports up to 256 Kbytes of flash memory 
BIOS (a 2 Megabit flash memory device) to enable the 
system designer to meet specific design goals as de- 
scribed in section 3 above. 

The Intel386SL Microprocessor Superset supports the 
following features: 

• Up to 256 Kbytes flash memory BIOS 

• VGA BIOS mapping into system BIOS 

• 8-bit or 16-bit BIOS interface 

• Programmable number of flash memory wait states 
for read access (from zero to fifteen Wait-States to 
optimize the system performance) 

• BIOS shadowing mechanism 
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Figure 3. Block Diagram of the 28F200BX/28F002BX 
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Flash BIOS size configurations in the Intel386SL Mi- 
croprocessor Superset system are controlled by pro- 
gramming certain registers located in the normal I/O 
address space. 

When a 256 Kbyte Flash BIOS configuration is pro- 
grammed into the Intel386SL Microprocessor Superset, 
128 Kbytes are directly accessible in the E0000H- 
FFFFFH address range. The other 128 Kbytes are de- 
coded at the top of the 16th or 32nd Megabyte of the 
Intel386SL superset address space, i.e., either: 

FCOOOOH - FDFFFFH or 1FC0000H-1FDFFFFH. 
This extra ROM space is accessed by programming the 
ISA sliding control register to point to one of these two 
areas and then accessing the ISA sliding window in the 
D0000H - DFFFFH address range (64 Kbytes). This 
mechanism allows complete access of the 256 Kbytes of 
BIOS code without having to enter the Intel386SL pro- 
tected mode. 

The BIOS code size is used to internally decode the 
ROM address space and generate two chip select sig- 
nals: ROMCSO# and ROMCS1 #, to control the Flash 


inlel. 

BIOS device. In the case of a single Flash BIOS device, 

only ROMCSO# is needed to drive the CE# chip se- 
lect signal of the flash memory. 

In the diagram of Figure 4 note the following: 

• BYTE# signal is set high to enable 16-bit operation 
of the flash device. 

• The highest order system address line SAjg is in- 
verted when FLIP# signal becomes active at boot- 
up time to relocate the boot kernel code at the top of 
the 1 Mbyte memory map for the system to boot 
from it. (See section 4.5). 

• ROM 16/8# is set high to enable 16-bit bus opera- 
tions. 

• RP# signal is gated by the PWRGOOD signal (for 
reset when power fails) and by system RESET sig- 
nal. 

• Vpp supply voltage is switched to the flash device 
only when BIOS updates are required. 

In addition to the above considerations, note the fol- 
lowing in Figure 5: 

• The highest order system address line SA 17 is also 
inverted when FLIP# signal becomes active at sys- 
tem boot-up time. 

• ROM 16/8# is set low to enable 8 -bit only bus oper- 
ations. 
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LEGEND: 

XDEN# = X-BUS DATA ENABLE 
XDIR = X-BUS DATA DIRECTION 

SMOUT1.2 = SYSTEM MANAGEMENT OUTPUT CONTROLS 

ROMCSO# = ROM CHIP SELECT FOR SYSTEM FLASH BIOS 

MEMR# = MEMORY READ 

MEMW# = MEMORY WRITE 

FLIP# = BOOT BLOCK MEMORY MAPPING SIGNAL 

ROM 16/8# = ROM 16 BITS OR 8 BITS 

SD[6:0], SD[1 5:8] = SYSTEM DATA BUS 

SAO-16 = SYSTEM ADDRESS BUS 

XD7 = X-BUS DATA BIT 7 

PWRGOOD = POWER SUPPLY POWER GOOD SIGNAL 


Figure 4. Key Attributes of this Optimized BIOS Interface 
should be Incorporated in BIOS Designs >128 Kbytes. 
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LEGEND: 

XDEN# = X-BUS DATA ENABLE 
XDIR = X-BUS DATA DIRECTION 

SMOUT1.2 = SYSTEM MANAGEMENT OUTPUT CONTROLS 

ROMCSO# = ROM CHIP SELECT FOR SYSTEM FLASH BIOS 

MEMR# = MEMORY READ 

MEMW# = MEMORY WRITE 

FLIP# = BOOT BLOCK MEMORY MAPPING SIGNAL 

ROM 16/8# = ROM 16 BITS OR 8 BITS 

SD[6:0] = SYSTEM DATA BUS 

SAO-17 = SYSTEM ADDRESS BUS 

XD7 = X-BUS DATA BIT 7 

PWRGOOD = POWER SUPPLY POWER GOOD SIGNAL 


Figure 5. Key Attributes of this Optimized BIOS Interface 
should be Incorporated in BIOS Designs >128 Kbytes. 
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4.3 ISA Sliding Window 

An ISA sliding window mechanism is similar to the 
Expanded Memory System or EMS mechanism. It al- 
lows the access of extended memory on the ISA bus in 
real mode. Hence, there is no conflict in memory allo- 
cation when the BIOS chip is accessed during system 
power-up. This is a straightforward method of imple- 
menting a 256 Kbyte extended Flash BIOS. Figure 6 
shows how extended memory is accessed with the ISA 
sliding window. This capability is designed into Intel’s 
386SL CPU and should be defined into chip sets sup- 
porting SL enhanced CPUs. 

Therefore to use a 256 Kbyte Flash device the follow- 
ing steps are specified as an example: 

Example: 

Enable support of 256 Kbyte Flash BIOS 
Enable Flash BIOS write access 
One BIOS Flash Bank used 

Program zero Flash wait states (for 16 MHz 
Intel386SL with a 60 ns Intel 28F200BX-T or 
28F002BX-T). 

Program the ISA Sliding Window to access memory 
between FCOOOOH and FDFFFFH. 

if ROM Chip-select decode register is not enabled 
enable ROM chip-select decode register 

enable ISA WINDOW control register 


4.4 The 28F200BX-T /28F002BX-T in 
the 1 Mbyte DOS Memory Map 

In addition, due to the above mapping considerations 
when interfacing a 256 Kbyte flash BIOS chip to any 
chip set or the Intel386SL Microprocessor Superset, it 
is necessary to flip the 256 Kbyte flash memory device 
in half at boot time to relocate the Boot Block in the 
correct physical address at FFFFFH for the 
Intel386SL CPU to boot from it. This is due to the fact 
that the Intel386SL Microprocessor Superset uses the 
bottom 128 Kbytes of the 256 Kbyte Flash chip to map 
down to the real mode 128 Kbyte allocated BIOS 
space. 

Figure 7 shows how the Intel 28F200BX-T flash mem- 
ory device fits in the DOS 1 MByte memory map. The 
same memory map applies to the 28F002BX-T device 
when designing an 8-bit only system. 


5.0 SOFTWARE DESIGN 
CONSIDERATIONS 

The subject of BIOS code update is already discussed 
extensively in references [1] and [3]. Appendix A of 
this application note is an example of a flash BIOS up- 
date routine. In this section, we mainly discuss consid- 
erations of code segmentation and describe how the sys- 
tem handles the different pieces of code under various 
conditions. 




ISA-BUS 
ADDRESS SPACE 
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Figure 6. ISA Sliding Window and Extended Memory Maps 
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Figure 7. 28F200BX-T/28F002BX-T in the 1 Mbyte DOS Memory Map 
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As explained in section 3, advanced notebook designs 
require a large ROM space to conserve valuable RAM 
space for applications. In addition to the boot kernel 
code and standard BIOS code, one may put the follow- 
ing code modules: 

• APM code 

• VGA BIOS 

• ExCA socket services 

• Operating Systems such as Microsoft MS-DOS 5.0 
ROM version 

When designing a 256 Kbyte BIOS system as described 
in this application note using Intel’s 28F200BX/ 
002BX, proper code segmentation is essential to 
achieve optimum system performance. 

We can divide the system’s operating environment into 
either: 

BOOT-TIME CONDITIONS (when system powers- 
up or is rebooted) 

or RUN-TIME CONDITIONS (after boot-up is com- 
plete) 

The code modules described above are used at different 
times during normal system operation. Hence, a segre- 
gation of the code stored in the flash memory is neces- 
sary for proper system operation. 


BOOT-TIME EXECUTION 

The system requires the boot kernel to be present at the 
FFFFFH segment during this portion of the cycle. 

When using the 28F200BX/002BX flash memory, the 
first page present will be the top 128 Kbyte. The rest of 
the first page is used to store APM code, VGA BIOS 
code or ExCA socket services. These code modules are 
then copied from their location below the boot block to 
system RAM for later initialization after the standard 
BIOS has started. 

Once all code modules are copied into RAM, this first 
128 Kbyte page of flash can be swapped out or ex- 
changed with the 2nd 128 Kbyte page which is required 
for run-time execution. 


RUN-TIME EXECUTION 

Standard BIOS code is required to be present from 
E0000H to FFFFFH segment during this time period 
to handle any BIOS calls and maintain proper system 
operation. 

Microsoft MS-DOS 5.0 ROM version code is also re- 
quired to be present so the BIOS can “SCAN” it in as 
an adapter. 

i 


5.1 16 Kbyte Recovery Code 

The 16 Kbyte recovery code is critical when a BIOS 
update does not successfully complete. The reasons for 
this failure can be divided into two categories: 

1. System power failure during BIOS update 

2. System reset (soft boot) during BIOS update 

The processor will execute recovery code out of the 16 
Kbyte boot block when either power is restored or 
when the system boots up after the reset function. 

The 16 Kbyte size recovery code allows the software 
designer to incorporate as many BIOS system checks as 
possible to implement basic system functionality. 

For instance, these checks may include: 

Cursor Positioning 
Keyboard services 
Time of day service 
Basic System services 


5.2 28F200BX Reprogramming 

Three basic algorithms allow the system designer to 
reprogram the Flash BIOS chip and perform the neces- 
sary tasks for a BIOS update. These algorithms are: 



Automated Byte/Word-wide programming 
Automated Block erase 
Erase Suspend and Resume 

For a description of these algorithms, the reader is en- 
couraged to study reference [5]. Appendix B in this 
application note includes the four flowcharts associated 
with the algorithms. 


To obtain the software drivers necessary to control the 
device reprogramming operations, consult your local 
Intel sales office. 


5.3 Power Management 

Power management is an essential part of any true por- 
table PC design. The design of sophisticated power 
management techniques is becoming a key differentia- 
tor between different machines, and hence is a competi- 
tive advantage for the system integrator. 

To help the system designer with this often difficult 
task of optimizing system performance and battery life, 
the 28F200BX family of products includes three dis- 
tinct low power modes of operation. These are: 

• Standby Current Mode, where the device typically 
consumes 50 jllA 
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• Automatic Power Savings Feature, where the device 
typically consumes 1 mA 

. • Deep powerdown Mode, where the device typically 
consumes 0.2 jllA 

For a detailed description of these modes of operation, 
consult reference [8]. 


6.0 DESIGNING A 3.3V SYSTEM 

The ability to design 3.3V systems used to be a future 
consideration. Longer battery life and lighter weight 
portable computers are some of the key objectives for 
any portable design. Now, thanks to the increasing 
availability of low voltage components, true low power 
machines are possible to realize in practice. 

6.1 Low Voltage Chips 

The list of 3.3V components available to build the es- 
sential parts of a portable computer is becoming longer 
every day. Semiconductor manufacturers have recog- 
nized the urgent need to supply low voltage chips to the 
portable marketplace. 

The Intel 28F200BX/002BX Boot Block Flash Memo- 
ries are available in 3.3V versions. These low voltage 
versions of the 28F200BX/002BX are functionally 
equivalent to their 5V counterparts and are 100% pin- 
out compatible. So a system converting to 3.3V opera- 
tion can substitute low voltage 2 Mbit chips 
(28F200BX-L/002BX-L) when desired without any 
circuit board modification. 


6.2 Power Savings and Improved 
Battery Life 

The 28F200BX/002BX 3.3V chips reduce the total 
power drawn during normal read operation to less than 
25% of the total power in 5V mode. This is a substan- 
tial savings in current which translates to 25% less bat- 
tery drain and hence longer battery life. 

Similarly, low voltage version of the most popular mi- 
croprocessors reduce the total power dissipated by a 
substantial amount. 

The combination of these current savings plus the other 
system components current reductions improve battery 
life dramatically and allow the mobile PC user to bene- 
fit from weight reduction, longer operating time, lower 
system cost and higher performance. 


Intel 

7.0 CONCLUSIONS 


7.1 Benefits of Extended Flash BIOS 

This application note deals with the concepts of extend- 
ed BIOS implementations in portable PC designs, but it 
can also be easily adapted to desktop PC systems for 
which BIOS code requirements can easily exceed 
128 Kbytes. 

We have attempted to explain the requirements and the 
needs of today’s advanced portable BIOS designs which 
have to meet many difficult and often conflicting re- 
quirements. 

Boot Block flash memory is the ideal storage solution 
to implement the above mentioned features. Further- 
more, as the cost of solid state non-volatile flash memo- 
ry keeps decreasing, the need to switch to these types of 
media for storing extended BIOS, operating system 
software, utilities, and in the future application code, 
becomes more evident and perhaps the only way a PC 
manufacturer can effectively compete by producing the 
best engineered, most optimally designed notebooks, 
palmtop PCs and pen-based computers. 
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APPENDIX A 


Example of a Flash Update Utility 
Pseudo-Code 

This example is for a standard BIOS code and APM 
code update using the 28F200BX/002BX flash device. 
Modify this utility, if required, to suit your particular 
system needs. 

Initialize system (set-up user screen, check battery pow- 
er, check device ID) 

Get BIOS/ APM file Options (from floppy or through 
modem) 

If no file present 

Send error message to insert BIOS update floppy, or 
press ESC to exit 

Display BIOS/APM update files, prompt user for 
choice and load to memory 

If file is invalid 

Prompt for correct file or exit 


Inform user of upcoming event, provide option to con- 
tinue or exit 

If user continues, inform user not to turn off the 
power or soft-reboot system (CNTL-ALT-DEL) 

Erase 28F200BX/002BX device 96-Kbyte main block 

If system interrupt occurs 

Suspend erase operation if flash memory access is 
required 

Resume erase operation of 96-Kbyte main block 

Write new file(s) into flash memory 96-Kbyte main 
block 

Indicate to user that flash reprogramming is complete 

Prompt user to reboot the system to continue normal 
operation 
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APPENDIX B 

28F200BX-T/28F002BX-T Programming Flowcharts 
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Full Status Check Procedure 



Bus 

Operation 

Command 

Comments 

Write 

Setup 

Program 

Data = 40H 
Address = Byte to be 
programmed 

Write 

Program 

Data to be programmed 
Address = Byte to be 
programmed 

Read 


Status Register Data. 

Toggle OE# or CE# to update 
Status Register 

Standby 


Check SR.7 
1 = Ready, 0 = Busy 

Repeat for subsequent bytes. 

Full status check can be done after each byte or after a 
sequence of bytes. 

Write FFH after the last byte programming operation to 
reset the device to Read Array Mode. 


Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 



1 = Vpp Low Detect 

Standby 


Check SR.4 



1 = Byte Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 

SR. 4 is only cleared by the Clear Status Register 
Command, in cases where multiple bytes are programmed 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Automated Byte Programming Flowchart 
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Full Status Check Procedure 



Bus 

Operation 

Command 

Comments 

Write 

Setup 

Program 

Data = 40H 
Address = Word to be 
programmed 

Write 

Program 

Data to be programmed 
Address = Word to be 
programmed 

Read 


Status Register Data. 

Toggle OE# or CE# to update 
Status Register 

Standby 


Check SR.7 
1 = Ready, 0 = Busy 

Repeat for subsequent words. 

Full status check can be done after each word or after a 
sequence of words. 

Write FFH after the last word programming operation to 
reset the device to Read Array Mode. 


Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR.4 

1 = Word Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 

SR.4 is only cleared by the Clear Status Register 
Command, in cases where multiple words are programmed 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Automated Word Programming Flowchart 
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Full Status Check Procedure 



Bus 

Operation 

Command 

Comments 

Write 

Setup 

Erase 

Data = 20H 

Address = Within block to be 
erased 

Write 

Erase 

Data = DOH 

Address = Within block to be 
erased 

Read 


Status Register Data. 

Toggle OE# or CE# to update 
Status Register 

Standby 


Check SR.7 
1 = Ready, 0 = Busy 

Repeat for subsequent blocks. 

Full status check can be done after each block or after a 
sequence of blocks. 

Write FFH after the last block erase operation to reset the 
device to Read Array Mode. 


Bus 

Operation 

Command 

Comments 

Standby 


Check SR.3 
1 = Vpp Low Detect 

Standby 


Check SR. 4, 5 

Both 1 = Command Sequence 
Error 

Standby 


Check SR.5 
1 = Block Erase Error 

SR.3 MUST be cleared, if set during an erase attempt, 
before further attempts are allowed by the Write State 
Machine. 

SR.5 is only cleared by the Clear Status Register 
Command, in cases where multiple blocks are erased 
before full status is checked. 

If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Automated Block Erase Flowchart 
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Bus 

Operation 

Command 

Comments 

Write 

Erase 

Suspend 

Data = BOH 

Read 


Status Register Data. 
Toggle OE# orCE# to 
update Status Register 

Standby 


Check SR.7 
1 = Ready 

Standby 


Check SR.6 
1 = Suspended 

Write 

Read Array 

Data = FFH 

Read 


Read array data from block 
other than that being 
erased. 

Write 

Erase Resume 

Data = DOH 
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Erase Suspend/Resume Flowchart 
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APPENDIX C 


List of BIOS software vendors already supporting or announcing their future support for the 28F200BX/002BX 
flash BIOS chips: 


SystemSoft Corporation 
Contact: Cliff Sharin 
508-651-0088 
313 Speen Street 
Natick, MA 01760 

Phoenix Technologies Ltd. 
Contact: Howard Cohen 
408-452-6529 
40 Airport Parkway 
San Jose, CA 95110 

Award Software, Inc. 
Contact: Jeffry Flink 
408-370-7979 (ext. 214) 

130 Knowles Drive 
Los Gatos, CA 95030-1832 


American Megatrends, Incorporated 
Contact: Tom Rau 
404-246-8612 

1346 Oakbrook Drive, Suite 120 
Norcross, GA 30093 

Quadtel 

Contact: Dale Buscaino 
714-754-4422 (ext. 250) 

3190-J Airport Loop 
Costa Mesa, CA 92626 
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INTRODUCTION 

Intel’s 28F001BX ETOX (EPROM tunnel oxide) flash 
memories add selective block erasure, an integrated 
Write State Machine and powerdown capability to In- 
tel’s standard flash memory product line. Flash memo- 
ry enhances EPROM non-volatility and ease of use 
through electrical erasure and reprogramming. Ad- 
vances in tunnel oxides and photolithography have 
made it possible to develop a double-polysilicon single- 
transistor read/write random access nonvolatile memo- 
ry, capable of greater than 100,000 reprogramming cy- 
cles. The 28F001BX flash memories electrically erase 
all bits in a block matrix via electron tunneling. The 
EPROM programming mechanism of hot electron in- 
jection is employed for electrical byte programming. 

A Command Register/Status Register interface to a 
Write State Machine, internal margin voltage genera- 
tion, power up/down protection and address/data 
latches augment standard EPROM circuitry to opti- 
mize Intel’s 28F001BX family for microprocessor-con- 
trolled reprogramming. 

Read timing parameters are equivalent to those of 
CMOS EPROMs, EEPROMs and SRAMs. The 120 ns 
access time results from a memory cell current of ap- 
proximately 50 juA, low resistance poly-silicide word- 
lines, advanced scaled periphery transistors and an op- 
timized data-out buffer. 

The dense one-transistor cell structure, coupled with 
high array efficiency, yields a one megabit die measur- 
ing 235 by 268 mils. 

TECHNOLOGY OVERVIEW 

Intel’s ETOX flash memory technology is derived from 
its standard CMOS EPROM process base. Using 


intel. 

advanced 1.0 jam double-polysilicon n-well CMOS 
technology, the 131,072 x 8 bit flash memories employ 
a 3.8 jam x 4.0 jam single transistor cell, affording 
equivalent array density as comparable EPROM tech- 
nology. The flash memory cell structure is identical to 
the EPROM structure, except for the thinner gate (tun- 
nel) oxide. Figure 1 compares the flash memory cell to 
the EPROM cell. 


EPROM Cell 
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Flash Memory Cell 
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Figure 1. EPROM Cell vs. Flash Memory Cell 
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High quality tunnel oxide under the single floating 
polysilicon gate promotes electrical erasure. All cells of 
a given block are simultaneously erased via Fowler- 
Nordheim tunneling. Applying 12V on the block 
source junctions and grounding the select gates erases a 
given block. The internal Write State Machine (WSM) 
controls the erase algorithm, including block pre-pro- 
gramming before erasure. WSM-controlled erasure, in- 
cluding internal pre-programming, takes 2.1 seconds 
typical for each parameter block and the boot block, 
and 3.8 sec. typical for the main block. 

Programming is accomplished with the standard 
EPROM mechanism of hot electron injection from the 
cell drain junction to the floating gate. Programming is 
initiated by bringing both the select gate and the cell 
drain to high voltage. The internal WSM regulates the 


internal program algorithm after the correct command 
sequence is written to the 28F001BX. Typical program 
time is 18 fxs per byte. 

DEVICE ARCHITECTURE 

Write State Machine and Command/ 
Status Registers 

Intel’s 28F001BX flash memories contain an on-chip 
Write State Machine that automatically controls erase 
and program algorithms, dramatically simplifying user 
interface. Figure 2 shows the 28F001BX block dia- 
gram. 


dq 0 -dq 7 
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Figure 2. 28F001BX Block Diagram 
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The WSM simpifles microprocessor control of the 
erase, program, Status Register read/clear, ID read and 
array read operations, without the need for additional 
control pins or the multiplexing of high voltage with 
control functions. The WSM, with its integrated oscil- 
lator, performs a majority of the standard flash memo- 
ry program and erase algorithms automatically. This 
makes system timers no longer necessary and frees the 
system to service interrupts or perform other functions 
during device erase or program. On-chip address and 
data latches minimize system interface logic and free 
the system bus. The Write State Machine accepts array 
read, ID read and Status Register read and clear com- 
mands whenever power is applied to the 28F001BX. 
High voltage (12V) on Vpp additionally enables suc- 
cessful program and erase. 

The WSM consists of a Command Register, Status 
Register, State Machine, oscillator, command decoder, 
data latch and address latch. The command decoder 
output feeds the State Machine, enabling the high volt- 
age flash-erase switch, program voltage generator and 
erase/program verify voltage generator. 

Functions are selected via the Command Register in a 
microprocessor write cycle controlled by the Chip En- 
able (CE#) and Write Enable (WE#) pins. The rising 
edge of WE# latches the address and data-in registers, 
and initiates an operation. Status Register contents are 
driven to the outputs on the falling edge of CE# or 
Output Enable (OE#), whichever occurs last in the 
read cycle. 


Internal Oscillator 

The Write State Machine is designed using clocked log- 
ic circuits. An on chip ring oscillator generates the 
clock signals. The frequency of a standard ring oscilla- 
tor varies with processing, temperature and supply volt- 
age. The improved design used on the 28F001BX mini- 
mizes these variations. 

The switching current of each stage in the ring oscilla- 
tor is set by a current reference. This reference current 
varies linearly with Vcc- The trip point of each ring 
oscillator inverter also varies linearly with Vcc- These 
two effects essentially cancel each other out and the 
resulting oscillator period is proportional to RC, with 
only a small dependence on Vcc- 

The value of R is set by an on chip resistor. The value 
of C is set by the gate capacitance of the inverters in the 
ring oscillator. Process variations in the values are re- 
duced by trimming the period of each oscillator during 
manufacturing^ The resistor is the only source of tem- 
perature variation. 


intel. 

Figure 3 shows how the oscillator period varies with 
temperature and supply voltage. The circuit works for 
supply voltages outside the normal operating condi- 
tions and for military temperatures. 



v cc (Volts) 
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Figure 3. Internal Oscillator Frequency 
vs Supply Voltage and Temperature 


Supply Voltage Sensing 

The circuit that generates LOWVcc and LOWVpp is 
shown in Figure 4. Power supply voltages Vcc and 
Vpp are divided down and compared to a reference 
voltage. If the reference voltage is greater than the di- 
vided power supply voltage, the LOWVcc or 
LOWVpp signal will be pulled high. The Vrff level 
generated by the voltage reference is independent of the 
supply voltage to the first order. 
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The positive power supply to the circuit is provided by 
Ml and M2. The source of Ml and M2 will be pulled 
up to the maximum of (Vpp-VjN) and (Vcc _ Vtw)- 
Vjn is the threshold of an implanted N channel device, 
about 0.9V. Vtw is the threshold of a native N channel 
device, about 0V. This scheme ensures that the circuit 
will work regardless of the applied supply voltages. 

The LOWVcc signal not only goes to the erase circuits, 
but also to the programming circuits and to the control 
logic to prevent any accidental writes to the array. The 
LOWVpp signal goes to the Write State Machine. If 
Vpp is detected as being low during a write, the low 
Vpp bit will be set in the Status Register. 


block. The address is latched and decoded internally by 
the 28F001BX, and erase of the desired block is subse- 
quently enabled. The rising edge of this second WE# 
pulse initiates the erase operation. The boot block will 
not erase unless the RP# or OE# signal is brought to 
high voltage Vhh- 

The State Machine triggers the high voltage flash-erase 
switch, connecting the 12V supply to the source of all 
bits in the specified block, while all wordlines are 
grounded. The organization of the block source 
switches is shown in Figure 5. Fowler-Nordheim tun- 
neling results in the simultaneous erasure of all bits in 
the addressed block. 


Erasure 

Erasure is achieved through a two-step write sequence. 
The erase setup code is written to the Command Regis- 
ter in the first cycle. The erase confirm code is written 
in the second cycle. The block to be erased is specified 
by writing both commands to any address within the 


The block source switch controls the source voltage of 
the bits in a particular block. This circuit is shown in 
Figure 6. During erase, M2 is off and Ml pulls the 
source to Vpp. When not in erase, Ml is off and M2 
pulls the source to ground. The high voltage latch 
formed by M4-M7 converts the low voltage ERASE 
signal to a high voltage signal that turns Ml off or on. 
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The tunneling that occurs during erase requires only a 
small amount of current. However, the grounded gate 
initial erase current that occurs on the source of every 
bit in the array is large. Ml is made large enough to 
supply this current and still keep the voltage on the 
source high enough for fast erase time. 

The LOWVcc signal protects the array from being 
erased when Vpp is at a high voltage but Vcc is a low 
voltage. When this occurs, M3 will pull the block 
source to ground. The high voltage latch will be forced 
into the state that turns Ml off by M8. 

After receiving the erase command sequence, the WSM 
automatically controls block precondition (program- 
ming of all bytes to 00H within the chosen block), erase 
pulses and pulse repetition, timeout delays and byte-by- 
byte verification of all block addresses using the inter- 
nally-generated erase margin voltage. The internal 
erase and verify operations continue until the entire 
block is erased. System software need only poll the 
Status Register to determine when the WSM has suc- 
cessfully completed the erase algorithm. 


Programming 

Programming follows a similar flow. The program set- 
up command is written to the Command Register on 
the first cycle. The second cycle loads the address and 
data latches. The rising edge of the second WE# pulse 
initiates programming by applying high voltage to the 
gates and drains of the bits to be programmed. 

As with erasure, the WSM controls program pulses and 
pulse repetition, timeout delays and byte verification. 
Program and program verify (at the internally-generat- 
ed verify voltage) continue until the byte is pro- 
grammed. System software, polling the Status Register, 
is informed of programming state thru specific status 
bits. 


Reset-Power Down 

The 28F001BX has a deep power down mode that re- 
duces Ice and Ipp to typically 0.05 /ixA and 0.8 juA, 
respectively. When RP# is low, the part is in deep 
power down mode. When RP# is high, the part can be 
placed in an active or standby mode by state of the 
CE# pin. 

The deep power down mode is similar to the standby 
mode except that more circuits are turned off. This 
means that much less power is consumed; it also means 
that it takes longer for the part to transition into the 
active mode. 

A diagram of the power down circuit is shown in Fig- 
ure 7. The TTL buffer formed by Ml -M3 enables the 
low power detect circuits, the redundancy address flash 
bits and the CE# TTL buffer formed by M4-M6. In 
previous Intel flash chips these circuits were always en- 
abled. The time for these circuits to turn on determines 
the RP# access time and write specifications. 

RP# will function properly with TTL level inputs. 
However, to get the lowest possible power consump- 
tion, full CMOS levels should be used. If voltage on the 
gate of M3 raises above its threshold voltage of 0.9V, it 
will turn on and draw current. Input voltages in the 
0.7-0.9 range could cause enough subthreshold con- 
duction in M3 to exceed the deep power down current 
specification. This is why the input voltage for RP# is 
specified as GND ± 0.2V. 

The use of RP# during system reset is important with 
automated write/erase devices. When the system comes 
out of reset it expects to read from the flash memory. 
Automated flash memories provide status information 
when accessed during write/erase modes. If a CPU re- 
set occurs with no flash memory reset, proper CPU 
initialization would not occur because the flash memo- 
ry would be providing the status information instead of 
array data. Intel’s Flash Memories allow proper CPU 
initialization following a system reset through the use 
of the RP# input. In this application RP# is con- 
trolled by the same RESET # signal that resets the sys- 
tem CPU. 
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DEVICE RELIABILITY 


Cell Margining 

Erase and program verification ensure the data reten- 
tion of the newly altered memory bits. The cell margin- 
ing performed by the WSM during the verify phase of 
the automated algorithms is more reliable than histori- 
cal EEPROM schemes, as margining tests the amount 
of charge stored on the floating gate. 

Intel’s 28F001BX flash memories employ a unique cir- 
cuit to internally generate the erase and program verify 
voltages. Figure 8 shows a simplified version of the cir- 
cuit. The circuit consists of a high voltage switch and 
the verify voltage generator. Transistors Ml through 
M4 constitute the high voltage switch which discon- 
nects Vpp from the resistor when the device is not in 
the verify mode. The verify voltage generator includes a 
resistor divider and a buffer. Internal margin voltage 
generation maintains microprocessor compatibility by 
eliminating the need for external reference voltages. 




Figure 8. Erase/Program Verify Generator 


I 
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Erase/Program Cycling 

One of the most significant aspects of 28F001BX flash 
memories is their capability for 100,000 erase/program 
cycles per block. Destructive oxide breakdown has been 
a limiting factor in extended cycling of thin oxide 
EEPROMs. Intel’s ETOX flash memory technology 
extends cycling performance through: 

• Improved tunnel oxide processing that increases 
charge carrying capability tenfold; 

• Reduced oxide area under stress minimizing proba- 
bility of oxide defects in the region; and 

• Reduced oxide stress due to a lower peak electric 
field (lower erase voltage than EEPROM). 

A typical cell erase/program margin (V t ) is shown as a 
function of reprogramming cycles in Figure 9. After 
100,000 reprograming cycles, a 2.5V program read 
margin exists, ensuring reliable data retention. 


Reliable erase/program cycling also requires proper se- 
lection of the erase V t maximum and maintenance of a 
tight V t distribution. The maximum erased V t is set to 
3.2V via the internal erase algorithm and erase verify 
circuits. Superior oxide quality gives an erased V t dis- 
tribution width that improves slightly with cycling 
(Figure 10). The tight erase V t distribution gives an 
order of magnitude of erase time margin to the fastest 
erasing cell. 


SUMMARY 

Intel’s ETOX flash memory technology is a break- 
through in adding electrical chip-erasure to high-densi- 
ty EPROM technology. Intel’s 28F001BX family en- 
hances Intel’s standard flash memory line by adding 
block erase capability, Write State Machine-controlled 
program and erase and deep powerdown mode. Micro- 
processor-compatible specifications, straightforward in- 
terfacing and in-circuit selective alterability using sim- 
ple software command sequences allow designers to 
easily augment memory flexibility and satisfy the need 
for nonvolatile storage in today’s designs. 
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Figure 9. Block Vt vs Cycles 
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Figure 13. 28F001BX Pinout Configurations 
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Figure 14. 28F001BX Pinout Configurations 
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Columns are number 0 through 511 beginning with the column nearest the X-decoder. Outputs are grouped as 
follows: 

Array Organization 
(Main Block): 

Left Half Array 
IOo IO t I0 2 10 3 
BL511 BL 6 4 

Right Half Array 
I0 4 I0 5 10 6 10 7 
BL 64 BL511 

Address 

! Bitlines 


IO0&IO7 | IOi & I 0 6 | IO2&IO5 | IO3&IO4 


Array Organization 
(Parameter Block 1): 


Ai6 a 15 a 14 


1 

1 

1 


Right Half Array 
IO0-IO7 
BLo ► BL3I 
Bitlines 


I0 3 I0 4 


bl 4 bl 8 bl 

BL 5 BLg BL 

BL 2 I BL 6 BL 10 BL 

BL 7 BLu BL 


20 Bl 24 

21 BL 2 5 

22 BL 26 


Address 


1 1 1 0 10 0 BL32 BL36 BL40 BL44 BL48 BL52 BL 50 BLeo | 

1 1 1 0 10 1 BL33 BL37 BL41 BL45 BL49 BL53 BL57 BLg-j 

1 1 1 0 110 BL34 BL38 BL42 BL46 BL50 BL54 BL58 BLg2 

1 1 1 0 111 BL35 BL39 BL43 BL47 BL51 BL55 BL59 BL03 

Figure 17. Bitline Decoding (Parameter Block 2, 28F001BX-T) 

NOTES: 

1. Bitline decoding listed is for 28F001BX-T. To convert to 28F001BX-B, invert polarity of addresses A 16 ~A-j 2 (i.e. 0000000 
becomes 11111 00). 
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Array Organization 
(Boot Block): 

Left Half Array 
IO 7 -IO 0 
BLo — > BLe 3 

Address 

Bitlines 

A 16 

AlS 

A-14 

Al3 

Al 2 

Ai 

A 0 

io 7 

io 6 

10 5 

104 

I 0 3 

I0 2 

ioi 

IO 0 


1 

1 

1 

0 

0 

0 

BL 0 

bl 8 

BL 16 

bl 24 

BL32 

BL40 

BL 48 

BL 56 


1 

1 

1 

0 

0 

1 

BLi 

BLg 

bl 17 

bl 25 

BL33 

BUi 

BL49 

BL57 


1 

1 

1 

0 

1 

0 

bl 2 

BL 10 

bl 18 

BL 2 6 

bl 34 

bl 42 

BL50 

BL 58 


1 

1 

1 

0 

1 

1 

bl 3 

BLn 

bl 19 

bl 27 

bl 35 

bl 43 

BL51 

BL59 


1 

1 

1 

1 

0 

0 

bl 4 

bl 12 

BL20 

bl 28 

BL36 

BL44 

BL 52 

bl 6 o 


1 

1 

1 

1 

0 

1 

bl 5 

bl 13 

BL21 

BL29 

BL37 

bl 45 

BL53 

BL 6 i 

1 

1 

1 

1 

1 

1 

0 

BLe 

bl 14 

BL22 

BL30 

BL 38 

bl 46 

BL54 

BL 6 2 

1 

1 

1 

1 

1 

1 

1 

bl 7 

bl 15 

BL 2 3 

BL31 

BL39 

bl 47 

BL55 

BL 6 3 


Figure 18. Bitline Decoding (Boot Block, 28F001BX-T) 


NOTE: 

1. Bitline decoding listed is for 28F001BX-T. To convert to 28F001BX-B, invert polarity of addresses A 16 -A 12 (i.e. 0000000 
becomes 1111100). 


X Address 

Row 

All 

A 10 

Ag 

a 8 

a 7 

a 6 

As 

a 4 

A 3 

A 2 

WL 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

XLo 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

XL! 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

xl 2 

0 

0 

0 

0 

0 

0 

0 

0 

1 

1 

xl 3 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

xl 4 

0 

0 

0 

0 

0 

0 

0 

1 

0 

1 

xl 5 

0 

0 

0 

0 

0 

0 

0 

1 

1 

0 

xl 6 

0 

0 

0 

0 

0 

0 

0, 

1 

1 

1 

xl 7 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

xl 8 

0 

0 

0 

0 

0 

0 

1 

0 

0 

1 

XLg 

0 

0 

0 

0 

0 

0 

1 

0 

1 

0 

XL 10 

0 

0 

0 

0 

0 

0 

1 

0 

1 

1 

XL11 

0 

0 

0 

0 

0 

0 

1 

1 

0 

0 

XL! 2 

0 

0 

0 

0 

0 

0 

1 

1 

0 

1 

XLi 3 

0 

0 

0 

0 

0 

0 

1 

1 

1 

0 

XLi 4 

0 

0 

0 

0 

0 

0 

1 

1 

1 

1 

XLis 

0 

0 

0 

0 

0 

1 

1 

1 

1 

1 

XLie 

0 

0 

0 

0 

0 

1 

1 

1 

1 

0 

XLi 7 

0 

0 
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0 

0 

1 

1 

1 

0 

1 

XLis 

0 

0 

0 

0 

0 

1 

1 

1 

0 

0 

XL19 

0 

0 

0 

0 

0 

1 

1 

0 

1 

1 

XL 2 o 

0 

0 

0 

0 

0 

1 

1 

0 

1 

0 

XL 2 i 
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0 

0 

0 

0 

1 

1 

0 

0 

1 

xl 22 

0 

0 

0 

0 

0 

1 

1 

0 

0 

0 

xl 23 

0 

0 

0 

0 

0 

1 

0 

1 

1 

1 
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0 

0 

0 

0 

0 

1 

0 

1 

1 

0 

XL 2 5 

0 

0 

0 

0 

0 

1 

0 

1 

0 

1 
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0 

0 

0 

0 

0 

1 

0 

1 

0 

0 
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0 
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1 
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0 

1 

1 
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1 
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0 

1 

0 
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0 

1 

0 

0 

0 

1 

XL 3 o 
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0 

0 

XL 3 i 


Figure 19. Wordline Decoding (28F001BX-T and 28F001BX-B) 
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X Address 

Row 

An 




mm 

mm 

As 

A 4 

a 3 

A 2 

WL 

0 




i 

0 

0 

0 

0 

0 

xl 32 

■ 
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* 

* 

* 

* 

*** 

1 




■■ 

0 

1 

1 

1 

1 

XL 47 

mm 

0 

0 

0 

HI 

1 

1 

1 

1 

1 

XU 8 


* 
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* 

* 

* 

* 

* 

* * * 


0 

0 
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1 
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0 

0 

0 
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0 
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0 

0 
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0 
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1 

WM 

1 

XL 79 
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0 
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1 

1 

1 

1 

0 

1 

1 

1 

1 
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1 

1 

1 

1 
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1 

1 

1 

1 

1 

xl 1008 
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* 

* 
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Figure 19. Wordiine Decoding (28F001BX-T and 28F001BX-B) (Continued) 
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Figure 20. Array Organization 
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for JEDEC standard compatibility. 
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INTRODUCTION 

The ETOX III (EPROM tunnel oxide) 2/4-Mbit fami- 
ly of Intel boot block Flash Memories are a continua- 
tion of boot-top and boot-bottom architectures first in- 
troduced in the 1-Mbit 28F001BX-T and 28F001BX-B 
devices. Top (-T) and bottom (-B) boot block offerings 
provide compatibility for microprocessors that boot 
from high or low memory addresses. 

All versions of this new family provide a 16-Kbyte 
hardware-protected boot block, two 8 -Kbyte parameter 
blocks and a 96-Kbyte main block. The 2-Mbit prod- 
ucts have an additional 128-Kbyte main block, while 
4-Mbit offerings contain three additional 128-Kbyte 
main blocks. 

Flash memories combine inherent non-volatility with 
in-system alterability of device contents. Selective block 
erasure allows manipulation of data contents within 
one of the seven (or five) mini-array segments without 
affecting data stored in the other six (or four). Ad- 
vances in process control have allowed development of 
a double-polysilicon single-transistor flash memory ca- 
pable of 100,000 write/erase cycles per block. The 
2/4-Mbit boot block family electrically erases all bits in 
a block via electron tunneling. The EPROM program- 
ming mechanism of hot-electron injection is employed 
for high-performance electrical word/byte write as re- 
quired for computing and embedded applications. 

An integrated Command User Interface (CUI) simpli- 
fies microprocessor control of device operations (word/ 
byte write, block erase, erase suspend/resume, Status 
Register read/clear, array read and device identifier 
read). The internal Write State Machine (WSM) con- 
trols all functions and circuits associated with word/ 
byte-write and block-erase operations, including pulse 
widths and repetition, timeout delays, erase precondi- 
tioning and margined verifications. The WSM continu- 
ally updates the internal Status Register during these 
functions. The Status Register is read via outputs 
DQ 0 -DQ 7 providing feedback of WSM activities. 

The CUI and Status Register interface to power-up/ 
down-protection circuitry, address/data latches and the 
WSM. This interface augments first-generation flash 
memory circuitry to optimize Intel’s 2/4-Mbit boot 
block family for microprocessor-controlled word/byte 
write and block erase. 

A deep-power-down mode enables extremely low pow- 
er consumption to augment reduced-power standby op- 
eration. An automatic power savings feature reduces 
Ice during read mode. 
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A 60 ns access time Oacc) results from a memory cell 
current of approximately 70 jaA, low-resistance polysil- 
icide wordlines strapped with metal, advanced scaled 
periphery transistors and improved circuit techniques. 

The dense one-transistor cell structure, coupled with 
high array efficiency, yields a 4-Mbit die measuring 295 
by 331 mils and a 2-Mbit die measuring 295 by 221 
mils. 


Word/Byte-Wide Versions 

Intel’s 28F400BX is a 4,194,304-bit non-volatile memo- 
ry organized as either 262,144 words (256K x 16) or 
524,288 bytes (512K x 8 ). A dedicated BYTE# control 
input provides selection of the desired input/output 
(I/O) configuration (either xl 6 or x 8 ) for read opera- 
tions and data writes. 

Intel’s 28F200BX is a 2,097,152-bit non-volatile memo- 
ry organized as either 131,072 words (128K x 16) or 
262,144 bytes (256K x 8 ). This device also provides 
BYTE# control of I/O configuration. 

The 28F400BX and 28F200BX are available in the 44- 
lead Plastic Small Outline Package (PSOP) and the 56- 
lead Thin Small Outline Package (TSOP). 


Byte-Wide Versions 

Intel’s 28F004BX is a 4,194,304-bit non-volatile memo- 
ry arranged as 524,288 bytes (512K x 8 ). Intel’s 
28F002BX is a 2,097,152-bit non-volatile memory ar- 
ranged as 262,144 bytes (256K x 8 ). 

With lower pin counts compared to their x 8 /xl 6 equiv- 
alents, the 28F004BX and 28F002BX allow housing in 
the smaller 40-lead TSOP. 


TECHNOLOGY OVERVIEW 

Intel’s ETOX III Flash Memory technology incorpo- 
rates advances from ETOX I and ETOX II processes, 
and leverages over two decades of EPROM manufac- 
turing experience. Using advanced 0.8 jum double-poly - 
silicon N-well/P-well CMOS technology, the 2/4-Mbit 
boot block flash memories employ a 2.5 jam x 2.9 jam 
single-transistor cell affording array density equivalent 
to comparable EPROM technology, and twice that of 
Intel’s ETOX II process. The ETOX III flash memory 
cell is identical to 0.8 jam EPROM, except for an addi- 
tional source implant which optimizes erase perform- 
ance. Figure 1 shows a cross-section of the flash memo- 
ry cell. 
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Figure 1. Flash Memory Ceil 


High-quality tunnel oxide under the single floating 
polysilicon gate promotes electrical erasure. All cells 
within the selected block are simultaneously erased via 
Fowler-Nordheim tunneling. Applying 12V to block 
source junctions and grounding the select gates erases 
all cells within that block. The internal WSM controls 
the automated block-erase algorithm, including pre- 
erase conditioning (i.e. pre-programming all block bits) 
and margin verification, in response to user requests 
relayed by the CUI. WSM-controlled block erasure, in- 
cluding pre-programming, typically ranges from 1.0 to 
2.4 seconds depending on the size of the block selected. 

Word/byte write is accomplished with the standard 
EPROM mechanism of channel hot-electron injection 
from the cell drain junction to the floating gate. Bring- 
ing both the select gate and the cell drain to high volt- 
age initiates programming. The WSM regulates the in- 
ternal word/byte-write algorithm, including margin 
verification, after the correct command sequence is 
written and decoded. Word/byte write typically re- 
quires 9 juts. 

DEVICE ARCHITECTURE 
Array Organization 

Layout of the 2/4-Mbit boot block family is segmented 
as two array planes (see Figure 2). This organization 
allows improved access times via minimal internal bus- 
ing, thus balancing the need for high speed with the 
requirement of small die size for cost-effective solu- 
tions. In the 4-Mbit family, each array plane is 1024 
rows by 2048 columns. For the 2-Mbit family, each 
array plane is 1024 rows by 1024 columns. Access time 


is reduced by limiting column length to 1024 cells. The 
polysilicon row is strapped in metal every 512 columns 
to reduce wordline delay. Two row decoders run verti- 
cally along the array plane sides, and column decoders 
run horizontally between array planes. Figure 36 shows 
a die photo of the 4-Mbit family. 

Each array plane is divided into eight I/Os for the 
28F400BX/200BX. The upper plane consists of the 
high-byte I/Os (DQ3-DQ15), while the lower plane 
consists of the low-byte I/Os (DQ0-DQ7). During 
byte-wide operation (BYTE# = “0”) the high-byte 
I/Os are multiplexed through the low-byte I/Os via 
A - 1 decoding. Data for I/Oq is stored in the left-most 
256 columns (or 128 columns for the 28F200BX) of the 
lower plane, with the next 256 columns (or 128) storing 
data for I/Oj, etc. Data for I/Og is stored in the left- 
most 256 (or 128) columns of the upper plane, with the 
next 256 (or 128) columns storing data for I/O9, etc. 

For the dedicated byte-wide products (28F004BX/ 
002BX), data for a given I/O is divided between the 
upper and lower array planes as decoded by Ajo- Data 
for I/Oq is stored in the left-most 256 columns (or 128 
columns for the 28F002BX) of both the upper and low- 
er planes, with the next 256 columns (or 128) in each 
plane storing data for \/ 0 \ , etc. 

Since each I/O is a grouping of adjacent columns (256 
or 128), the independently-erasable blocks (seven or 
five) are segmented within each I/O. Each I/O in the 
4-Mbit family is divided into seven blocks; including a 
16- Kbyte boot block, two 8-Kbyte parameter blocks, 
one 96-Kbyte main block and three 128-Kbyte main 
blocks. Each I/O in the 2-Mbit family is divided into 
five blocks; including a 16-Kbyte boot block, two 
8 -Kbyte parameter blocks, one 96-Kbyte main block 
and one 128-Kbyte main block. Each block source is 
electrically isolated from the sources of the other six (or 
four) blocks. This allows individual block erase without 
altering data in the other blocks. 

Addresses A9-A0 select one of 1024 rows. Row ad- 
dress lines are decoded sequentially for selection. Table 
3 lists row address bitmaps. 

Columns are decoded by Ajs-Ajo for the 28F004BX, 
A17-A10 for the 28F400BX and 28F002BX, and A16- 
A10 for the 28F200BX. 4-Mbit family columns are 
numbered 0-255 for each I/O, and 2-Mbit columns are 
numbered 0-127 for each I/O. Table 4 and 5 lists col- 
umn address bitmaps. 
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Figure 2. 2/4-Mbit Boot Block Family Array Organization ((I/O#)* Denotes 28F004BX/002BX I/Os) 


Block Memory Mdp complexity of word/byte-write block-erase, erase-sus- 

pend/resume, Status Register-read/clear, ID-read and 
Top (-T) and bottom (-B) boot block offerings have array-read operations. Figures 7 and 8 show 

block address maps which are inverted from one anoth- 28F400BX/200BX and 28F004BX/002BX block dia- 

er to provide compatibility for microprocessors that grams, 
boot from high or low memory addresses. Figures 3, 4, 

5 and 6 show 28F400BX-T/B, 28F200BX-T/B, 

28F004BX-T/B and 28F002BX-T/B memory maps. Command User Interface (CUI) 

The addresses shown in Figures 3 and 4 for the 

28F400BX-T/B and 28F200BX-T/B, decode two bytes The CUI consists of a command decoder and command 

of data. A— i decodes between the two bytes when register. User requests are decoded and latched in a 

BYTE# is low. microprocessor write cycle controlled by Chip Enable 

(CE#) and Write Enable (WE#). Status Register- 
read/clear, ID-read and array-read commands are di- 
Write/Erase Automation rectly handled by the CUI. The CUI also accepts 

word/byte-write, block-erase and erase-suspend/re- 
Intel’s 2/4-Mbit boot block Flash Memories contain an sume commands. WE#’s rising edge latches address, 

on-chip Command User Interface. Write State Ma- command and data-in registers, and requests WSM ini- 

chine, Status Register and address/data latches to dra- tiation of the selected operation. These on-chip address, 

matically simplify user interface. This combination of command and data latches, controlled by the CUI, 

functional units reduces microprocessor control minimize system interface logic and free the system 

bus. 
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3FFFFH 

28F400BX-T 

3FFFFH 

28F400BX-B 





3E000H 

16-Kbyte BOOT BLOCK 


128-Kbyte MAIN BLOCK 


3DFFFH 

3D000H 

8-Kbyte PARAMETER BLOCK 

30000H 



2FFFFH 



3CFFFH 

3C000H 

8-Kbyte PARAMETER BLOCK 



3BFFFH 

96-Kbyte MAIN BLOCK 

20000H 

128-Kbyte MAIN BLOCK 


30000H 


1FFFFH 



2FFFFH 

128-Kbyte MAIN BLOCK 

10000H 

128-Kbyte MAIN BLOCK 


20000H 


OFFFFH 



1FFFFH 

128-Kbyte MAIN BLOCK 

04000H 

96-Kbyte MAIN BLOCK 


10000H 

03FFFH 

03000H 

8-Kbyte PARAMETER BLOCK 





OFFFFH 


02FFFH 

02000H 

01FFFH 

8-Kbyte PARAMETER BLOCK 



128-Kbyte MAIN BLOCK 

16-Kbyte BOOT BLOCK 


OOOOOH 

00000H 








Figure 3. 28F400BX-T/B Memory Maps 

1FFFFH 

28F200BX-T 

1FFFFH 

28F200BX-B 





1E000H 

16-Kbyte BOOT BLOCK 


128-Kbyte MAIN BLOCK 


1DFFFH 

1D000H 

8-Kbyte PARAMETER BLOCK 

■ 

10000H 


1CFFFH 

1C000H 




8-Kbyte PARAMETER BLOCK 

OFFFFH 



1BFFFH 

96-Kbyte MAIN BLOCK 

04000H 

96-Kbyte MAIN BLOCK 


10000H 


03FFFH 

03000H 

8-Kbyte PARAMETER BLOCK 


OFFFFH 




128-Kbyte MAIN BLOCK 

02FFFH 

02000H 

8-Kbyte PARAMETER BLOCK 


OOOOOH 

01FFFH 

OOOOOH 

16-Kbyte BOOT BLOCK 



Figure 4. 28F200BX-T/B Memory Maps 
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7FFFFH 

28F004BX-T 

7FFFFH 

28F004BX-B 


16-Kbyte BOOT BLOCK 





7C000H 



128-Kbyte MAIN BLOCK 


7BFFFH 

7AOOOH 

8-Kbyte PARAMETER BLOCK 

60000H 


79FFFH 

78000H 




8-Kbyte PARAMETER BLOCK 

5FFFFH 



77FFFH 

60000H 

96-Kbyte MAIN BLOCK 

40000 H 

128-Kbyte MAIN BLOCK 



3FFFFH 



5FFFFH 

40000H 

128-Kbyte MAIN BLOCK 

128-Kbyte MAIN BLOCK 



20000H 


1FFFFH 



3FFFFH 

, 

128-Kbyte MAIN BLOCK 

96-Kbyte MAIN BLOCK 



08000H 

20000H 


07FFFH 

8-Kbyte PARAMETER BLOCK 


1FFFFH 


06000H 



128-Kbyte MAIN BLOCK 

8-Kbyte PARAMETER BLOCK 



05FFFH 

04000H 

03FFFH 


16-Kbyte BOOT BLOCK 


00000H 


00000H 







Figure 5. 28F004BX-T/B Memory Maps 

3FFFFH 

28F002BX-T 

3FFFFH 

28F002BX-B 


16-Kbyte BOOT BLOCK 





3C000H 



128-Kbyte MAIN BLOCK 


3BFFFH 

3AOOOH 

8-Kbyte PARAMETER BLOCK 

20000H 


39FFFH 

38000H 




8-Kbyte PARAMETER BLOCK 

1FFFFH 



37FFFH 

96-Kbyte MAIN BLOCK 

08000H 

96-Kbyte MAIN BLOCK 


20000H 


07FFFH 

06000H 

8-Kbyte PARAMETER BLOCK 


1FFFFH 




128-Kbyte MAIN BLOCK 

05FFFH 

04000H 

8-Kbyte PARAMETER BLOCK 

■ 


03FFFH 

16-Kbyte BOOT BLOCK 

■ 


00000H 


00000H 








Figure 6. 28F002BX-T/B Memory Maps 
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Write State Machine (WSM) 

The WSM processes word/byte-write, block-erase and 
erase-suspend/resume requests received from the CUI. 
The WSM rejects word/byte- write and block-erase re- 
quests if the WSM is currently busy, if Vpp is not at 
high voltage (12V) or if the Low Vpp Status Register 
flag is set (i.e. not cleared from a previous low-voltage 
condition). 

The WSM consists of an integrated oscillator and con- 
trol circuitry. It generates signals which control the 
word/byte-write, block-erase, erase-suspend/resume 
and verify circuits. It also receives feedback from these 
circuits, allowing Status Register updates. The WSM 
and associated circuits perform the equivalent of first- 
generation flash memory program and bulk-erase algo- 
rithms automatically. 


This eliminates the need for system timers, and frees 
the microprocessor to service interrupts or perform 
other functions during device word/byte-write or 
block-erase operations. 

The WSM provides feedback to the CUI to determine 
when a given command is valid. Although nearly all 
commands are available when the WSM is inactive, 
only status read is valid while the WSM performs a 
word/byte-write operation. During block erase, only 
the read-status and erase-suspend commands are avail- 
able. Read-array, read-status, and erase-resume com- 
mands are valid with the WSM in an erase-suspended 
state. Invalid operations are interpreted as the read-ar- 
ray command when the WSM is inactive or erase sus- 
pended, and as the read-status command when the 
WSM is active in word/byte write or block erase. 


Aq - A ]7 (28F400BX) 
Ao - A, 6 (28F200BX) 



BYTE# 


CE# 

WE# 

OE# 

RP# 


Vpp 

V CC 

GND 


294013-3 


Figure 7. 28F400BX/200BX Block Diagram 
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Status Register 

The internal Status Register contains a full complement 
of activity status bits. These bits and their meaning, 
“1/0” are: 

SR.7: WSM status (READY/BUSY#) 

SR.6: Erase-suspend status (ERASE SUSPENDED/ 
ERASE IN PROGRESS# or 
COMPLETED#) 

SR. 5: Block-erase status (ERROR/SUCCESS#) 

SR.4: Word/byte-write status (ERROR/SUCCESS#) 
SR.3: V PP status (LOW/OK#) 

All bits are set by the WSM, and read via the CUI. The 
WSM can only set SR.3, SR.4 and SR.5; it cannot clear 
them. They remain set until the CUI processes a clear 
Status Register command. There are two reasons for 
operating in this fashion. First is synchronization; the 
WSM does not know when the host CPU has read the 
Status Register, therefore does not know when to clear 
it. 


Secondly, allowing system software to control reset 
adds flexibility to the way this device may be used. The 
CPU may write several words/bytes, or erase several 
blocks back-to-back, while polling SR.7 to determine 
when the next word/byte-write or block-erase com- 
mand can be given. When all words/bytes are written, 
or all blocks erased, the system polls the other status 
flags to determine if all operations were successful, or if 
an error occurred. While other approaches require the 
controlling microprocessor to watch for non-comple- 
tion of write or erase within a specified time to indicate 
an error, this implementation requires no external sys- 
tem timers or software timing loops. As such, the sys- 
tem can reduce its polling overhead while still identify- 
ing any potential error conditions. 

Status Register contents are driven to device outputs on 
the falling edge of CE# or Output Enable (OE#), 
whichever occurs last in the read cycle. CE# or OE# 
must be toggled to update Status Register contents. 


A 0 - A 18 (28F004BX) 
A 0 - A, 7 (28F002BX) 


DQo-DQy 



CE# 

WE# 

OE# 

RP# 


V p p 


GND 
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Figure 8. 28F004BX/002BX Block Diagram 
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Internal Oscillator 

The WSM is designed using clocked logic circuits. An 
on-chip ring oscillator generates the clock signals. The 
frequency of a standard ring oscillator varies with pro- 
cessing, temperature and supply voltage. A proven de- 
sign used on the 28F001BX-T/B, 28F008SA and 
2/4-Mbit boot block family minimizes these variations. 

The switching current of each stage in the ring oscilla- 
tor is controlled by a current reference which varies 
linearly with Vcc- The trip point of each ring oscillator 
inverter also varies linearly with Vcc- These two effects 
offset each other, and the resulting oscillator period is 
proportional to RC with only a small dependence on 
Vcc- 

An on-chip resistor sets the value of R. The gate capac- 
itance of the inverters in the ring oscillator sets the 
value of C. Process variations in these values are re- 
duced by trimming the period of each oscillator during 
manufacturing. The resistor is the only source of tem- 
perature variation. 


Supply Voltage Sensing 

Figure 9 shows the LOWVcc and LOWVpp genera- 
tion circuits. Power supply voltages (Vcc and Vpp) are 
divided down and compared to a reference voltage. If 
Vref is greater than the divided power supply voltage, 
the LOWVcc or LOWVpp signal is driven high. The 
generated Vref level is supply-voltage independent to 
the first order. 

Positive power to the circuit is supplied by Ml and M2. 
Ml and M2 sources are pulled up to the higher of 
(Vpp — V tn ) or (Vcc — V t w). V tn is the threshold of 
an implanted N-channel device, about 0.9V. V tw is the 
threshold of a native N-channel device, about 0V. This 
scheme ensures that the circuit works regardless of the 
applied supply voltages. 


The LOWVcc signal is used by the word/byte-write 
and block-erase circuits, as well as the CUI and WSM. 



Figure 9. Low-Power Detector Circuit 


intel. 

If LOWVcc is active, the CUI will not accept user 
writes and resets to an array-read condition. The WSM 
is similarly reset by LOWVcc- The LOWVpp signal is 
used by the WSM; if Vpp drops below the high-voltage 
detector trip point during word/byte write or block 
erase, the Status Register’s low Vpp bit is set and WSM 
operation halts. The system must clear the Status Reg- 
ister before any subsequent word/byte-write or block- 
erase operations can succeed. 

Deep Power-Down and Device Reset 

The 2/4-Mbit boot block family incorporates a deep- 
power-down mode that reduces Ice an d Ipp to typical- 
ly 0.20 /xA and 0.07 jtxA respectively. RP# low selects 
deep power-down. When RP# is high, the device can 
be placed in an active or standby mode depending on 
CE# state. 

Deep power-down is similar to standby except that all 
circuits excluding the RP# buffer are turned off. This 
mode greatly reduces power consumption, but requires 
more time to transition the device into an active mode. 
A read wake-up time (tpHQv) is required from RP# 
switching high until output and sense circuitry become 
fully functional and data can be read from the part. 
Similarly, a write wake-up time (tpnwL) is needed be- 
fore the CUI recognizes writes. After this interval nor- 
mal operation is restored; the CUI is reset to read-array 
mode and the Status Register is cleared to 80H. 

Figure 10 shows a diagram of the power-down circuit. 
The TTL buffer formed by Ml -M3 disables the low- 
power detect circuits, the redundancy-address flash bits 
and the CE# TTL buffer formed by M4-M6. These 
circuits were always enabled in first-generation Intel 
flash architectures. Tum-on delays of these circuits de- 
termine RP# access time and write specifications. 



Figure 10. Power-Down and Reset Functions 


4-446 




ER-29 


iny. 

RP# functions properly with TTL-level inputs. How- 
ever, to attain lowest possible power consumption, full 
CMOS levels must be used. If the voltage on the gate of 
M3 rises above its 0.9V threshold, M3 will turn on and 
draw current. Input voltages in the 0.7V-0.9V range 
could cause enough current conduction in M3 to ex- 
ceed the Iqc deep-power-down current (Iccd) specifi- 
cation. This is why RP#’s input voltage is specified as 
GND ±0.2V. 

RP# also functions as a hardware reset to the WSM 
and CUI. If RP# is driven low (“0”) during word/byte 
write, block erase, or erase suspend, that operation is 
aborted leaving the addressed memory locations in an 
unknown state. The Status Register is cleared, and CUI 
is set to array read. The aborted operation (word/byte 
write or block erase) must be repeated with RP# inac- 
tive to obtain a valid condition in the memory array. 

RP# reset should be restricted to system reset only (as 
in the case of power supply failure), and should not be 
used as a standard means to terminate word/byte-write 
or block-erase operations. NOTE: Use the erase-sus- 
pend command to read another block (see the “Erase 
Suspend/Resume” section). 

This use of RP# during system reset is important with 
automated write/erase devices. When the system comes 
out of reset it expects to read from the flash memory. 
Automated flash memories provide status information 
when accessed during write/erase modes. If a CPU re- 
set occurs with no flash memory reset, proper CPU 
initialization would not occur because the flash memo- 
ry would be providing the status information instead of 
array data. Intel’s Flash Memories allow proper CPU 
initialization following a system reset through the use 
of the RP# input. 


Automatic Power Savings 

The 2/4-Mbit boot block flash memories include an 
automatic power-savings feature that reduces Ice dur- 
ing read mode. Within one access time Oacc or tCE) 
after an address or CE# switches, Ice automatically 
powers down from the 60 mA Ice CMOS specification 
(or 65 mA TTL specification) to less than 1 mA. Ice 
remains below 1 mA until either CE# or an address is 
switched, or until the device is taken out of read mode. 
This feature provides significant power savings for ap- 
plications that access the device slower than their speci- 
fied read access times. 


Block Erase 


Block erasure is achieved by a two-step write sequence. 
The erase-setup code is written to the CUI in the first 
cycle. Erase confirm is written in the second cycle. The 
address supplied with the erase-confirm command is 
latched and decoded internally by the device; erase is 
subsequently enabled in that block. The second WE# 
rising edge initiates the operation (WE# -controlled 
write). 


The WSM triggers the high-voltage flash-erase switch 
connecting the 12V supply to the source of all bits in 
the specified block, while all wordlines are grounded. 
Figure 12 shows organization of the block source 
switches. Fowler-Nordheim tunneling results in simul- 
taneous erasure of all bits in the selected block. 



The block source switch (shown in Figure 11) controls 
the source voltage of all bits in a particular block. Dur- 
ing block erase, M2 is off and Ml pulls the source to 
Vpp. When not in erase, Ml is off and M2 pulls the 
source to ground. The high-voltage latch formed by 
M4-M7 converts the low- voltage ERASE signal to a 
high-voltage signal that controls Ml. 



294013-7 
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Figure 11. Block Source Switch 
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Figure 12. Array Erase Blocking 


The tunneling that occurs during block erase requires 
only a small amount of current. However, the initial 
current required to charge the block’s cumulative 
source capacitance to the erase voltage is large. Supply 
decoupling design practices minimize the system im- 
pact of the source charging. 

The LOWVcc signal protects the array from erasure 
when Vpp is at a high voltage, but Vcc is below the 
write/erase lockout voltage (Vlko)- When this occurs, 
M3 pulls the block source to ground. The high-voltage 
latch is forced by M8 into the state that turns Ml off. 

Vpp is continually monitored during all phases of the 
block-erase operation. If Vpp falls below the trip point 
of its high-voltage detect circuitry, erasure will not oc- 
cur (or halts) and Status Register Vpp status (SR. 3), 
block-erase status (SR. 5) and WSM status (SR.7) bits 
are set to “1”. 

If SR.3 is set (Low Vpp), WSM operation is inhibited. 
The WSM will not execute further word/byte-write or 
block-erasure sequences until the Status Register has 
been reset by system software. Word/by te- write or 
block-erase requests with error flags SR.4 or SR. 5 set 
are not inhibited, but the system loses the ability to 
determine success. The clear Status-Register command 
resets these bits. 


After receiving the block-erase command sequence, the 
WSM automatically controls block pre-condition (pro- 
gramming all words to 0000H within the chosen block), 
erase pulses and pulse repetition, timeout delays, and 
word-by-word verification of all block addresses (se- 
quentially checked via the address counter) using an 
alternative sensing reference to verify margin. The in- 
ternal erase and verify operations continue until the en- 
tire block is erased. A read cycle applied to the part 
following the block-erase command sequence outputs 
Status Register contents; system software can poll the 
Status Register to determine when block erase has suc- 
cessfully completed. Following block erasure, the de- 
vice remains in Status Register read block erasure, the 
device remains in Status Register read mode; a read-ar- 
ray command must be written to the device to access 
array data. 

If the erase-setup command is followed with a com- 
mand other than erase confirm, the device will not 
erase. The WSM sets both word/byte-write status and 
block-erase status bits in the Status Register to indicate 
an invalid sequence. 
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Erase Suspend/Resume 

Erase suspend allows the system to interrupt block 
erase to read data from another array block. The ability 
to suspend erase and read data from another block of- 
fers the flexibility required for embedded applications. 
Upon receiving the erase-suspend command, the CUI 
requests that the WSM pause at one of several predeter- 
mined points in the algorithm. Upon reaching a sus- 
pend point, the WSM sets SR. 6 (erase-suspend status) 
and SR.7 to “1”. The system must poll the Status Reg- 
ister to determine if the suspend has been processed or 
the block erase has actually completed. Block-erase 
completion is indicated by SR. 6 cleared to “0” and 
SR.7 set to “1”. Read bus cycles default to Status Reg- 
ister read after issuing the erase-suspend command. 

Once suspended, the WSM asserts a signal to the CUI 
which allows response to the read-array, read-status, 
and erase-resume commands. The system can write the 
read-array command allowing read access to blocks 
other than that which is suspended. The WSM contin- 
ues to run, idling in a suspended state, regardless of all 
control inputs except RP#. RP# driven low immedi- 
ately shuts down the WSM, aborting the suspended 
erase operation. 

The erase-resume command must be issued upon com- 
pletion of reads from other array blocks to continue 
block-erase operation. The WSM then clears SR. 6 and 
SR.7, and resumes erase operation from the suspension 
point. Read cycles following the erase-resume com- 
mand output Status Register data. 

Word/Byte Write 

Word/byte write follows a flow similar to block erase. 
The word/byte-write-setup command is first written to 
the CUI. A second write cycle loads address and data 
latches. The rising edge of the second WE# pulse re- 
quests that the WSM initiate activity, applying high 
voltage to the gates and drains of all bits to be written. 
Unlike block erase, word/byte write will proceed re- 
gardless of what data is applied on the second CUI 
write cycle; however writing data FFFFH (or FFH) 
does not modify memory contents. 

Like block erase, the WSM controls program pulses 
and pulse repetition, timeout delays and word/byte ver- 
ification. Word/byte write and verify (with alternate 
sensing reference and internally-generated verify volt- 
age) continue until the word/byte is written. Internal 
word/byte-write verify checks that all bits written to 
zero have been correctly modified; it does not check 


bits specified as one. Word/byte write cannot change 
existing zeros to ones; this can only be accomplished by 
erase. 

Read bus cycles following word/byte-write operations 
output Status Register data. System software, polling 
the Status Register, is informed of status through bits 
SR.3, SR.4, and SR.7. The read-array command must 
be written to the CUI following word/byte write to 
access array data. 

In a scenario similar to that described under block era- 
sure, word/byte write does not occur (or halts) if Vpp is 
detected low. In such a case SR.3, SR.4, and SR.7 are 
set high, and no further writes can take place until the 
Status Register is cleared by the Clear Status Register 
command. 

DEVICE CHARACTERIZATION 
AC and DC Parameters 

Figures 14 through 35 show graphs of several device 
parameters as a function of temperature and supply 
voltage. 

In particular, note Figure 14 which shows typical read 
performance tAVQV OaCc) °f the 28F400BX, which is 
representative of the 2/4-MBit boot block flash memo- 
ry family, as a function of V G c and ambient tempera- 
ture. tpLQv (tcE> in Figure 15 and t GL q V (toE> in 
Figure 16 are also of particular interest. Access times 
tAVQV> tELQV> and t G LQV are specified and tested with 
an output load of 100 pF; decreased output load capaci- 
tance improves device operation. 

Table 1 shows typical supply currents for several oper- 
ating modes. 


Table 1. RMS Current Values 


Mode 

(V CC = C 5.0V, 
CMOS Inputs) 

ipp 

(Vpp = 12V) 

x8 

x16 

Read (6 MHz) 

23 mA 

25 mA 

100 nA 

Write 

20 mA 

22 mA 

10 mA 

Block Erase 

15 mA 

15 mA 

12 mA 

Standby 

50 fi A 

50 jllA 

100 ju,A 

Deep Power-Down 

< 

o 

CM 

o 

0.20 fj,A 

0.07 juA 


I 
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DEVICE RELIABILITY 


Word/Byte-Write and Block-Erase 
Cycling 

One of the most important reliability aspects of the 
2/4-Mbit boot block family is its capability of 100,000 
write/erase cycles per block. Destructive oxide break- 
down has been a limiting factor in extended cycling of 
thin-oxide EEPROMs. Intel's ETOX Flash Memory 
technology extends cycling performance through: 

• Improved tunnel-oxide processing that increases 
charge-carrying capability tenfold. 

• Significantly reduced oxide area under stress that 
minimizes probability of oxide defects in the region. 

• Reduced oxide stress due to a lower peak electric 
field (lower erase voltage than EEPROM). 


Table 2. Word/Byte-Write and Block-Erase 
Performance vs Previous Devices 


Device 

Word/Byte- 

Block-Erase 

Erase Time 

Write Time 

Time/# Bytes 

per Kbyte 

SECOND-GENERATION FLASH MEMORY DEVICES^) 

28F400BX 

9 jus 

2.4S/128KB 

19 ms 

28F004BX 

9 jas 

2.2S/96KB 

23 ms 

28F200BX 

9 jas 

1.0S/16KB 

63 ms 

28F002BX 

9 jas 

1.0S/8KB 

125 ms 

28F008SA 

9 JULS 

1.5S/64KB 

23 ms 

28F001BX 

18 jas 

3.8S/112KB 

34 ms 



2.1S/8KB 

256 ms 



2.1S/4KB 

513 ms 

FIRST-GENERATION FLASH MEMORY DEVICES^) 

28F020 

16.5 jas 

6.8S/256KB 

27 ms 

28F010 

16.5 jas 

3.9S/128KB 

30 ms 

28F512 

16.5 jas 

2.4S/64KB 

37 ms 

28F256A 

16.5 jas 

1.6S/32KB 

51 ms 


NOTES: 

1. Typical measured time. 

2. Times calculated based on typical erase and precondition pulse requirements, 
with minimum write timings. Calculations are described in Figure 13. 


Energy/Power Consumption 

The system designer may be concerned with power con- 
sumption during block erase and word/byte write. Fig- 
ure 32 shows Ice and Ipp during block erase. Figure 33 
shows Ice an d Ipp during word/byte write. 


Word/Byte-Write and Block-Erase 
Times 

The 2/4-Mbit boot block family and 28F008SA ad- 
vance word/byte-write and block-erase performance 
compared to previous flash memories. The on-chip al- 
gorithm is improved over the 28F001BX to take advan- 
tage of process enhancements. This improvement is 
most apparent when compared to first-generation flash 
memory parts with externally controlled algorithms. 
First-generation device times shown in Table 2 assume 
optimal system overhead, and as such are absolute best 
case. 
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Reliable word/byte-write and block-erase cycling re- 
quires proper selection of the maximum erase threshold 
voltage (V t ), and maintenance of a tight distribution. 
Maximum erase V t is set to 3.4V via the internal block- 
erase algorithm and verify circuits. Tight erase V t dis- 
tribution gives an order of magnitude of erase-time 
margin to the fastest erasing cell, with virtually identi- 
cal erase V t distributions at 1 and 10,000 cycles (Figure 
34). Program V t distribution is similarly consistent over 
cycling (Figure 35). 


Data Protection 

The 2/4-Mbit boot block family offers protection 
against accidental block erasure or word/byte write 
during power transitions. Internal circuitry creates a 
device insensitive to Vpp/Vcc supply power-up/down 
sequencing. 

Vpp ^ VpPLMAX locks out word/by te-write and 
block-erase circuits. Vcc ^ Vlko disables CUI com- 
mand writes, resets the CUI to array-read mode, and 
holds the WSM inactive. The system designer must still 
guard against spurious command writes for Vcc > 
v LKO when V PP < V PPLM AX- 

Several strategies are available to prevent data modifi- 
cation in the 2/4-Mbit family. The CUI provides a de- 
gree of software write protection since memory altera- 
tion occurs only after successful completion of a two- 
step write sequence. WE# and CE# must both go ac- 
tive to perform this sequence; driving either high inhib- 
its command/data writes. Secondly, the system can 
place the device in deep-power-down mode (RP# = 
Vil) to disable command writes, reset the CUI to ar- 
ray-read mode, and hold the WSM inactive, effectively 
protecting array data and providing a way to reset the 
flash memory during system reset conditions. Finally, 
the system designer may switch Vpp to Vppn when 
memory updates are required. 


SUMMARY 

Intel’s 2/4-Mbit boot block Flash Memory family con- 
tains features that optimize this product group for com- 
puting and embedded applications. These features in- 
clude hardware-implemented write/erase protection of 
the boot block, specialized array blocking, dedicated 
x8 and x8/16 user-configurable versions, automation 
of word/byte write and block erase, erase suspend for 
data read, deep-power-down/automatic-power-savings 
modes, reset capability, and a write/erase Status Regis- 
ter. With simple microprocessor interfacing and soft- 
ware command sequences, this family is the non-vola- 
tile computing and embedded solution of choice for to- 
day’s designs. 

OTHER REFERENCES 

Related documents of interest to readers of this engi- 
neering report: 

28F400BX-T/B, 28F004BX-T/B; “4-Mbit Flash Mem- 
ory Family” Data Sheet (Order #290450) 

28F400BX-TL/BL, 28F004BX-TL/BL; “4-Mbit Flash 
Memory Family” Data Sheet (Order #290451) 

28F200BX-T/B, 28F002BX-T/B; “2-Mbit Flash Mem- 
ory Family” Data Sheet (Order #290448) 

28F200BX-TL/BL, 28F002BX-TL/BL; “2-Mbit Flash 
Memory Family” Data Sheet (Order #290449) 

ER-28 “ETOX III Flash Memory Technology” Engi- 
neering Report (Order #294012) 

AP-341 “Designing an Updatable BIOS Using Flash 
Memory” (Order #292077) 

AP-363 “Extended Flash BIOS for Portable Comput- 
ers” (Order #292098) 
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SUPPLEMENTARY INFORMATION 


FORMULA: 

b = # bytes in j* block (256K, 128K, 64K, 32K) 

n = # of erase pulses required (90 pulses) 

w = Time for a write cycle (150 ns, t^VAv) 
v = Time to verify (6055 ns, twHGL + tGLQV) 

p = Program pulse width (10 /as, twHWHl) 
one pulse programming assumed 

e = Erase pulse width (10 ms, t\vHWH2) 

Precondition and precondition verify time is: 
b (2w + p + v) 

Erase/verify, each loop where some byte 
does not pass verify: 

(n — 1) (2w + e + v) 

Last erase pulse: 

(1)(2w + e) 

Passing erase-verify, all bytes: 
b (w + v) 

Total time can be summarized as: 

b (3w + p + 2v) + n (2w + e 4- v) - (v) 

or substituting in times for write, verify, 
program and erase pulse widths: 

b (22.56 X 10-6) + n (10.006355 X 10"3) - 
(6.055 x 10-6) Seconds 

Figure 13. Erase Time Calculations for 
First-Generation Flash Memories 



v cc (V) 

294013-9 


Figure 14. tAvov (Ucc) 
vs Vcc and Temperature 
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Figure 17. tcvwH (*DS WE#) 
vs Vcc and Temperature 
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Figure 19. t AV WH (tAS WE#) 
vs Vqc and Temperature 
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Figure 18. twHDX (*dh WE#) 
vs Vcc and Temperature 
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Figure 20. t W HAX (*AH WE#) 
vs Vcc and Temperature 
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Figure 21. t DVE H (»ds CE#) Fi 9 ure 22 - *ehdx (*dh CE#) 

vs V C c and Temperature vsV cc andTemperature 
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Figure 31. Access Time vs Output Loading 
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Pin Names 


Ao-A-17 

Address Inputs 

DQ0-DQ15 

Data Inputs/Outputs 

BYTE# 

Byte Enable 

CE# 

Chip Enable 

RP# 

Power-Down/Reset 

OE# 

Output Enable 

WE# 

Write Enable 

Vpp 

Write/Erase Power Supply 

v C c 

Device Power Supply 

GND 

Ground 

DU 

Don’t Use 

NC 

No Internal Connection 


1 

44 

□ RP# 

2 

43 

□ WE# 

3 

42 

□ A a 

4 

41 

□ Ag 

5 

40 

3 A io 

6 

39 

□ A n 

7 

38 

□ A, 2 

8 

37 

3 a 13 

9 

36 

□ a 14 

10 

35 

^ A 15 

1 1 
12 

34 

28F400BX 

33 

□ a 16 
□ BYTE# 

13 

32 

□ GND 

14 

31 

□ DO, 5 /A 

15 

30 

□ DO? 

16 

29 

□ DQ,4 

17 

28 

□ dq 6 

18 

27 

□ dq 13 

19 

26 

□ dq 5 

20 

25 

□ dq 12 

21 

24 

□ dq 4 

22 

23 

^ v cc 


28F200BX 

RP# 

WE# 

As 

Ag 

A-io 

An 

A12 

A 13 

a 4 

As 

A 6 

BYTE# 

GND 

DQ15/A-1 

DQ 7 

dq 14 

dq 6 

DQ-J 3 

DQ 5 

dq 12 

dq 4 

V CC 


Figure 37. PSOP Lead Configuration 
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Addresses A 9 -A 0 sequentially decode wordlines. Wordlines 0-1023 serve the upper and lower array planes. 


Table 3. Row Address Bitmap 


a 9 

A 8 

a 7 

A 6 

As 

A 4 

A 3 

A 2 

Ai 

Ao 

Wordline 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

1 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

2 

0 

0 

0 

0 

0 

0 

0 

0 

1 

1 

3 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

4 

0 

0 

0 

0 

0 

0 

0 

1 

0 

1 

5 

0 

0 

0 

0 

0 

0 

0 

1 

1 

0 

6 

0 

0 

0 

0 

0 

0 

0 

1 

1 

1 

7 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

8 

0 

0 

0 

0 

0 

0 

1 

0 

0 

1 

9 

0 

0 

0 

0 

0 

0 

1 

0 

1 

0 

10 

0 

0 

0 

0 

0 

0 

1 

0 

1 

1 

11 

0 

0 

0 

0 

0 

0 

1 

1 

0 

0 

12 

0 

0 

0 

0 

0 

0 

1 

1 

0 

1 

13 

0 

0 

0 

0 

0 

0 

1 

1 

1 

0 

14 

0 

0 

0 

0 

0 

0 

1 

1 

1 -j 

1 

15 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

16 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

1 

1 

1 

1 

31 

• 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

1 

1 

1 

1 

1 

0 

0 

0 

0 


1 

1 

1 

1 

1 

1 

0 

0 

0 

0 

0 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 
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Columns for each block are distributed throughout the array in each I/O. For the 28F400BX/200BX, each I/O 
contains 8 columns for the boot block, 4 columns each for parameter block 0 and parameter block 1, 48 columns for 
main block 0 and 64 columns for each of the remaining main blocks (main block 1 for the 28F200BX and main block 
1-3 for the 28F400BX) for a total of 256 columns (28F400BX) or 128 columns (28F200BX) per output. 


Table 4. 28F400BX/200BX Column Decoding 


Al7 

a 16 

A«f 

At4 

At3 

*12 

All 

Aio 

Block 

Column 

0 

0 


0 

0 

0 


0 

Boot 


0 

0 

0 

0 

0 

♦ 

• 

• 

■Boot 

♦ 

0 

0 

0 

0 

0 

1 

1 

1 

: Boot 

7 

0 

0 

0 

0 

1 

0 

11 

0 

Parameter 0 

8 

0 


0 

0 

111 1 

0 

III * III 

ifSM 1 

Parameter 0 

♦ 

0 

ini 

0 

0 

■ : : 1 : ; 

0 

1 

i 

Parameter 0 

llll Wliim 

0 

0 

lllllll 

0 

1 


0 

0 

Parameter 1 

12 

0 

0 

1 Wg§ 

0 

1 

1 

♦ 

* 

Parameter 1 

• 

0 

0 

1 Wllm 

0 

1 

1 

III 1 1ll 

WIMM 

Parameter 1 

' 15 

0 

0 

0 

1 

0 


0 

llllllllllll 

MalnO 

16 

0 

0 

• 

.. • . . 

• . ; 

• 

• 

• 

Main 0 

• 

0 

0 


1 


i 

1 


MainO 

63 

0 

1 


0 

0 


1111 

ill llll 

Mainl 

64 

0 

1 

« 

• 

• 

• 

• 

• . 

Main 1 

♦ 

0 

1113111 

lllllll 

■1 

1 

i 


i 

Mainl 

MMHMBB 

1 

0 

0 

0 

0 

0 

0 

0 

Main 2 


1 

0 

• 

• 

• 

• 

• 

• 


• 

1 

0 

1 

1 

1 

1 

1 

1 

Main 2 

191 

1 

1 

0 

0 

0 

0 

0 

0 

Main 3 


1 

1 

• 

• 

• 

• 

• 

• 

Main 3 

• 

1 

1 

1 

1 

1 

1 

1 

1 

Main 3 

255 


NOTE: 28F400BX = Complete Table, 28F200BX = Shaded Area Only 
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Columns for each block are distributed throughout the array in each I/O. For the 28F004BX/002BX, each I/O 
contains 16 columns for the boot block, 8 columns each for parameter block 0 and parameter block 1, 96 columns for 
main block 0 and 128 columns for each of the remaining main blocks (main block 1 for the 28F002BX) and main 
block 1-3 for the 28F004BX for a total of 512 columns (28F004BX) or 256 columns (28F002BX) per output. 


Table 5. 28F004BX/002BX Column Decoding 


Ais 

Sill?® 

I Aie 

Ais 

Ai4 

Al3 

Ai2 

Ait 

*10 

Block 

Column 
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0 

1 0 

o 

0 

0 

0 

0 

0 

Boot 

0 

0 

0 

0 

0 

0 


d 

... 


• 

Boot 

• 

0 

0 

0 

0 

0 

1 

1 


1 

Boot 

15 

0 

mmm 

0 

0 

1 

0 

0 

0 

0 

Parameter 0 

16 

0 

0 

0 


1 

0 

• 

0 

* 

Parameter 0 


0 

lll'p. 

0 

0 

1 


111 

1 

1 

Parameters 

23 

0 


0 

0 

llllll 

111 

0 

0 

0 

Parameter 1 

24 

0 

: 

0 

0 


1! Ill 

.Ill 1 

■n •• 


9 


Parameter 1 

/: © ;; 

0 

3 WSS. 

1 WXi 

V 0; . 

11 111 

1 

1 


llllill 

1 

Parameter 1 

31 

0 

0 

0 

; ; 1 

0 

0 


0 

0 

Main 0 

®. 32 

0 

11111 

'mgmm 


- «» : 

& 

BBE8 


; ; O : ' 

■— mm 


0 

0 

i 

iSS 

1 

1 

1 

pi 

1 



0 

iIIt/I 


0 

iiiiiiii 

0 

0 

pH 


li! 

128 

0 

1 

a 

© 

© 

0 

0 ; 


§ 


. ; :;0 

0 

■ill 


1 


IlSlIl : 

1| III 


mm 

BSSM 

255 

1 

0 

0 

0 

0 

0 

0 

0 

0 


256 

1 

0 

© 

& 

o 

o 

o 

o 

o 


Q 

1 

0 

1 

1 

1 

1 

1 

1 

1 


383 

1 

1 

0 

0 

0 

0 

0 

0 

0 

Main 3 

384 

1 

1 

o 

o 

o 
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0 

© 

o 

Main 3 

o 

1 

1 

1 

1 

1 

1 

1 

1 

1 

Main 3 

511 


NOTE: 28F004BX = Complete Table, 28F002BX = Shaded Area Only 

























































BOOT BLOCK FLASH: 
THE NEXT GENERATION 


INTRODUCTION 

Flash memory offers a whole new dimension to nonvol- 
atile memory applications because of its high density 
and cost-effectiveness. Embedded systems, such as PC 
BIOS, hard disk drive controllers and laser printers, 
were among the first applications to utilize the easy 
update capability of Flash, allowing system differentia- 
tion and upgradeability. In 1992, Intel introduced a se- 
ries of high-density Flash Memory Cards based on its 
8-Mbit FlashFile™ component, products that are en- 
abling truly portable computing capability with disk- 
less, solid-state mass storage. Intel also added two flash 
memory products designed specifically to serve more 
traditional embedded and portable applications, offer- 
ing both high performance and low power consumption 
options in an architecture specifically designed for these 
applications storage requirements. 


MARKET GROWTH DATA 

In the four years since Intel first introduced its 
256-Kbit flash devices, the worldwide demand has 
quadrupled annually, with 1992 market demand fore- 
casted to exceed $270 million. Flash is expected to con- 
tinue double-digit growth through the upcoming years 
while other memory technologies are relatively flat or 
increasing only slightly. By 1994, the flash market is 
expected to exceed $1 billion (Figure 1). The primary 
reasons for this growth are well acknowledged by cus- 
tomers: flexibility, nonvolatility, low power and cost-ef- 
fectiveness. As a result of this seemingly insatiable de- 
mand for flash, the memory density treadmill that al- 
lowed DRAMs and EPROMs to double every 18 
months, has accelerated faster than ever before. Intel’s 
introduction of an 8 -Mbit component two years after its 
2-Mbit product is evidence of the flash memory’s rapid 
advancement. 

Intel’s first generation of flash devices, ranging in densi- 
ty from 256-Kbit through 2-Mbit densities, were rapid- 
ly adopted into code storage applications which former- 
ly used EPROM or EEPROM. In 1991, Intel intro- 
duced the first 1-Mbit Boot Block flash memory in re- 
sponse to direct customer requests. As a result of con- 
tinuing to improve and develop an innovative and 
broad product line, Intel held an 85% share of the $130 
million 1991 market. 



Source Dataquest: January 1992 

Figure 1 


INTEL SERVING TWO PRIMARY 
APPLICATIONS 

Today, Intel flash is serving two major application seg- 
ments: updatable code storage and solid-state mass 
storage (Figure 2). Code and data storage comprise the 
updatable non-volatile memory applications that re- 
quire high performance, high density and easy update 
capability. These applications are infrequently updated 
when compared to solid-state mass storage applica- 
tions. In this case, erase/write performance is not as 
critical as integration and performance requirements. 
This application segment is served effectively with full 
chip-erase or boot block products. 

The second major application segment is solid-state 
mass storage that requires very high density, automated 
programming and high performance erase/write capa- 
bility at a very low cost per bit. Erasing and writing 
portions of the code or data is much more frequent in 
solid-state mass storage than in updatable firmware ap- 
plications. In April of 1992, Intel introduced the 
8-Mbit FlashFile component whose architecture is opti- 
mized for data file storage. Its symmetrically blocked 
architecture and automated write/erase features gave 
programming flexibility for a high-performance, solid- 
state memory system. The compactness of an 8-Mbit 
device in a TSOP package allows for high-density flash 
arrays to be included on a system motherboard as well 
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Figure 2 


as in memory cards. Intel also offers a second genera- 
tion of flash memory cards designed to serve the porta- 
ble mass storage market that are based on the new 
8-Mbit FlashFile component. Memory cards add the 
feature of removability and system upgradability in an 
industry-standard PCMCIA/ExCA™ format. While 
flash cards and FlashFile components serve solid-state 
mass storage applications directly, both can be used in 
updatable code storage applications as well. 

By developing products to fit both of these application 
segments, Intel strives to serve the needs of a broader 
base of customer applications with the best nonvolatile 
memory solutions. 


BOOT BLOCK UPDATE 


upgrade for the price of the call. The blocked architec- 
ture allows the OEM customer to store critical system 
code securely in the boot block of the device that can 
minimally bring up the system and download to other 
locations of the device to initialize the system. The 
hardware boot locking feature guarantees that even if 
the power is disrupted during a BIOS update, the sys- 
tem will be able to recover immediately. 



The success of the 1-Mbit Boot Block device has result- 
ed in over 1 50 designs with annual shipments to exceed 
1.5 million units worldwide in 1992. 


EXTENDING THE BOOT BLOCK 
PRODUCT LINE: 2- AND 4-MEGABIT 
FLASH DEVICES 


The 28F001BX 1-Mbit Boot Block flash component in- 
troduced in June 1991 featured a sectored architecture 
that has been widely accepted in embedded code stor- 
age applications, particularly PC BIOS and cellular 
communications. Over 20 PC manufacturers use this 
device in their products, including Compaq, Dell and 
Zenith Data Systems. The Boot Block architecture gave 
the manufacturer added flexibility and the ability to 
differentiate. End users also benefit from the ability to 
upgrade BIOS software quickly and securely. It is pos- 
sible for the manufacturer to upload BIOS updates to 
an electronic bulletin board where the end-user gets the 


Once the Boot Block architecture became established in 
the marketplace, customers quickly began to ask for 
more features and enhancements: speed, density, low 
power, surface-mount options and an industry-standard 
upgrade path. These requests were based on the need to 
expand features in portable computing and communi- 
cation products. 

The 2-Mbit 28F200BX and 4-Mbit 28F400BX are In- 
tel’s newest additions to the flash Boot Block product 
line. These products offer 60 ns performance, two sur- 
face-mount packages, and a Boot Block architecture 
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similar to the 1-Mbit Boot Block device: one lockable 
Boot Block, two parameter blocks, and the balance of 
the device is divided into main blocks. The Boot Block 
securely stores the basic boot code required to initialize 
the system that can be protected by the hardware-lock- 
ing feature, ensuring basic system operating code pro- 
tection. The two parameter blocks can be used for a 
variety of purposes: manufacturing product code, setup 
parameters and storing frequently updated data such as 
system diagnostics. The 28F200BX contains one 
16 Kbyte Boot Block, two 8 Kbyte parameter blocks, 
one 96 Kbyte and one 128 Kbyte main block (Figure 
3a). The 28F400BX contains all of the blocks of the 
28F200BX plus two additional 128 Kbyte main blocks 
(Figure 3b). Top and bottom Boot Block versions are 
available for both densities. Both devices are in the 
xl6/x8 user-selectable organization of the industry- 
standard, ROM-compatible pin-out in 44-lead PSOP 
surface mount package. This pinout and package allow 
an easy upgrade from 2-Mbit to 4-Mbit since only one 
address is added at the top of the device package. For- 
ty-lead TSOP x8-only versions are also available for 
both of these devices, providing high density in the 
smallest form factor. A 56-lead TSOP xl6/x8 version 
will be available for applications requiring xl6 organi- 
zation in a TSOP package. 


APPLICATION REQUIREMENTS— PCs 

Notebook computer manufacturers today are compet- 
ing to produce the lightest weight, slimmest and longest 
battery life products possible. Minimizing board size 
via reduced chip count is the first improvement the new 
flash devices provide. BIOS in portable systems has 
grown beyond the 1-Mbit density to accommodate 
more sophisticated power management and additional 
system features, such as PCMCIA card slots. For ex- 
ample, the i386™ SL architecture allows the expansion 
of BIOS beyond 128 Kbytes (1-Mbit) with internal reg- 
isters for hardware paging. A new generation of BIOS 
support for low-power portable computers has been de- 
veloped by SystemSoft and other vendors which sup- 
ports the 28F200BX and the 28F400BX. In PC BIOS 
applications, the main blocks of the Boot Block devices 
are used for power management code, video drivers, 
and ROM-executable code, such as MS-DOS*. The ar- 
rangement of the blocks for PC BIOS applications 
based on Intel i386 and i486™ microprocessors is with 
the Boot Block on top. Other microprocessors and mi- 
crocontrollers, such as the Intel 80960KX/SX and the 
Motorola 68000 series, use the bottom Boot Block ver- 
sion of the memory map. Many PC manufacturers have 
also moved to a xl6 organization of their BIOS for 
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Figure 3a. 28F200BX-Top Boot 
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Figure 3b. 28F400BX-Top Boot 
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higher performance and are using 2-Mbit flash compo- 
nents in parallel to accomplish xl6 performance. Other 
manufacturers have decided to forego xl6 and use the 
1-Mbit Boot Block and a 1-Mbit bulk-erase 28F010 
flash memory to contain their power management code. 
The 28F200BX solves both of these problems in a com- 
pact, single-chip solution. The 28F400BX provides a 
higher density solution for high performance systems 
today, as well as a future upgrade for systems currently 
requiring only 2 megabits. 


APPLICATION REQUIREMENTS— 
TELECOMMUNICATIONS/EMBEDDED 

Similar to personal computers, cellular telephone appli- 
cations use the hardware-lockable block to store basic 
initialization code to wake up the system and establish 
basic communication with the host base station. The 
small parameter blocks are ideal for frequently updated 
code such as the user’s phone directory, re-dial and the 
activation code necessary to enable user-desired fea- 
tures. The main block contains the code for dynamical- 
ly managing the cellular communications and executing 
the voice algorithms. The density requirement for the 
main code storage has increased significantly in recent 
years with the conversion to digital cellular transmis- 
sion, particularly in Europe and Japan. Most cellular 
designs execute code directly from ROM rather than 
downloading to RAM. Typical microcontrollers used 
are: Intel 80C186, Zilog Z8080 and Siemens 80166, all 
operating in the 8 MHz- 13 MHz range. The Motorola 
68000 series 16-bit microcontrollers used in some digi- 
tal cellular designs utilize the xl6 and high speed capa- 
bilities of these new Boot Block devices. Flash access 
times ranging from 75 ns to 120 ns produce 0 to 1 wait- 
state performance. The high-performance 60 ns access 
time of the 2-Mbit and 4-Mbit Boot Block flash allows 
zero wait state performance in cellular telephones and 
other embedded control applications. 

Low power has always been a strength of flash due to 
its inherent nonvolatility, a characteristic that elimi- 
nates battery drain required to maintain information 
stored in volatile RAM when the power is off. When 
flash is in use, its active power requirement is very low: 
typical Ice "35 mA, and standby current is 0.1 mA. 
The hallmark of this newest generation of flash is low 
power and high performance. Formerly these features 
were mutually exclusive, but through advanced circuit 
development, an automated power saving feature in the 
device reduces Icc to a low DC level within one access 
time; 5 mA typical. This significant reduction of the 
active current time relates directly to the extension of 


battery life in systems which continuously execute code 
directly from flash, such as cellular telephones and por- 
table instrumentation. 

For optimum system power conservation, future sys- 
tems are being designed today to operate at 3.3V rather 
than 5V. Intel will also offer 3.3V versions of the 
2-Mbit and 4-Mbit Boot Block devices with Icc active 
= 10 mA, and t^cc performance =150 ns. 

An alternative design approach of a “5V-only” (pro- 
gramming voltage = operating voltage = 5V) flash 
memory has been proposed to eliminate the need for a 
12V programming supply. While this proposal would 
eliminate the need for a 12V supply component in a 5V- 
only environment, it would not provide a low power 
solution as every flash component would carry the die 
size cost and power overhead of on-chip voltage pump- 
ing. Intel’s approach is to first bring the operating volt- 
age to 3.3V, in line with what system designers request- 
ed as their first priority for the next generation of porta- 
ble computers and cellular phones. The focus of lower- 
ing the read voltage is also congruent with the usage 
model for embedded applications of “read often, write 
few’’ operation. The 12V programming voltage require- 
ment is more efficiently met with a voltage pump from 
a vendor such as Maxim. (Inexpensive voltage pumps 
for 3.3V to 12V are currently available.) The use of a 
separate voltage pump is significantly more cost-effi- 
cient in systems where more than one flash device is 
used, as cost and space is amortized over multiple de- 
vices. 

CONCLUSION 

Intel continues to serve both updatable non-volatile 
memory applications as well as the rapidly emerging 
solid-state mass storage market with solutions tailored 
to meet their particular needs. The new 2-Mbit and 
4-Mbit Boot Block devices offer high performance and 
low power options for updatable code applications. The 
Boot Block architecture is compatible with all major 
microprocessors and microcontrollers. As with all Intel 
flash products, their low power consumption and small 
surface mount packaging make the 2-Mbit and 4-Mbit 
Boot Block flash memories ideal for a wide variety of 
handheld portable applications. 

NOTE: 

FlashFile, ExCA, i386 and i486 SL are trademarks of 
Intel Corporation. 

* MS-DOS is a registered trademark of Microsoft Corpora- 
tion. 
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28F020 

2048K (256K x 8) CMOS FLASH MEMORY 


■ Command Register Architecture for 
Microprocessor/Microcontroller 
Compatible Write Interface 

■ Noise Immunity Features 

— ± 10% Vqc Tolerance 
— Maximum Latch-Up Immunity 

through EPI Processing 

H ETOX Nonvolatile Flash Technology 
— EPROM-Compatible Process Base 
— High-Volume Manufacturing 
Experience 

n JEDEC-Standard Pinouts 

— 32-Pin Plastic Dip 

— 32-Lead PLCC 

— 32-Lead TSOP 

(See Packaging Spec., Order #231369) 

■I Extended Temperature Options 

Intel’s 28F020 CMOS flash memory offers the most cost-effective and reliable alternative for read/write 
random access nonvolatile memory. The 28F020 adds electrical chip-erasure and reprogramming to familiar 
EPROM technology. Memory contents can be rewritten: in a test socket; in a PROM-programmer socket; on- 
board during subassembly test; in-system during final test; and in-system after-sale. The 28F020 increases 
memory flexibility, while contributing to time-and cost-savings. 

The 28F020 is a 2048-kilobit nonvolatile memory organized as 262,144 bytes of 8 bits. Intel’s 28F020 is 
offered in 32-pin plastic DIP, 32-lead PLCC, and 32-lead TSOP packages. Pin assignments conform to JEDEC 
standards for byte-wide EPROMs. 

Extended erase and program cycling capability is designed into Intel’s ETOX (EPROM Tunnel Oxide) process 
technology. Advanced oxide processing, an optimized tunneling structure, and lower electric field combine to 
extend reliable cycling beyond that of traditional EEPROMs. With the 12.0V Vpp supply, the 28F020 performs 
100,000 erase and program cycles well within the time limits of the Quick-Pulse Programming and Quick-Erase 
algorithms. 

Intel’s 28F020 employs advanced CMOS circuitry for systems requiring high-performance access speeds, low 
power consumption, and immunity to noise. Its 70 nanosecond access time provides no-WAIT-state perform- 
ance for a wide range of microprocessors and microcontrollers. Maximum standby current of 100 jmA trans- 
lates into power savings when the device is deselected. Finally, the highest degree of latch-up protection is 
achieved through Intel’s unique EPI processing. Prevention of latch-up is provided for stresses up to 100 mA 
on address and data pins, from -IV to Vcc + IV. 

With Intel’s ETOX process base, the 28F020 levers years of EPROM experience to yield the highest levels of 
quality, reliability, and cost-effectiveness. 


■ Flash Electrical Chip-Erase 

— 2 Second Typical Chip-Erase 

■ Quick-Pulse Programming Algorithm 
— 10 jlls Typical Byte-Program 

— 4 Second Chip-Program 

■ 100,000 Erase/Program Cycles 

■ 12.0V ±5% Vpp 

■ High-Performance Read 

— 70 ns Maximum Access Time 

■ CMOS Low Power Consumption 
— 10 mA Typical Active Current 

— 50 julA Typical Standby Current 

— 0 Watts Data Retention Power 

m Integrated Program/Erase Stop Timer 


November 1994 

Order Number: 290245-006 


5-1 


28F020 


Intel 


DQ 0 -DQ7 



Figure 1. 28F020 Block Diagram 
Table 1. Pin Description 



Type 

Name and Function 

Ao“A-|7 

INPUT 

ADDRESS INPUTS for memory addresses. Addresses are internally 
latched during a write cycle. 

DQ 0 -DQ 7 

INPUT/OUTPUT 

DATA INPUT/OUTPUT: Inputs data during memory write cycles; 
outputs data during memory read cycles. The data pins are active high 
and float to tri-state OFF when the chip is deselected or the outputs 
are disabled. Data is internally latched during a write cycle. 

CE# , 

INPUT 

CHIP ENABLE: Activates the device’s control logic, input buffers, 
decoders and sense amplifiers. CE# is active low; CE# high 
deselects the memory device and reduces power consumption to 
standby levels. 

OE# 

INPUT 

OUTPUT ENABLE: Gates the devices output through the data buffers 
during a read cycle. OE# is active low. 

WE# 

INPUT 

WRITE ENABLE: Controls writes to the control register and the array. 
Write enable is active low. Addresses are latched on the falling edge 
and data is latched on the rising edge of the WE# pulse. 

Note: With Vpp ^ 6.5V, memory contents cannot be altered. 

Vpp 

. 

ERASE/PROGRAM POWER SUPPLY for writing the command 
register, erasing the entire array, or programming bytes in the array. 

Vcc 


DEVICE POWER SUPPLY (5V ± 1 0%) 

Vss 


GROUND 
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APPLICATIONS 

The 28F020 flash memory provides nonvolatility 
along with the capability to perform over 100,000 
electrical chip-erasure/reprogram cycles. These fea- 
tures make the 28F020 an innovative alternative to 
disk, EEPROM, and battery-backed static RAM. 
Where periodic updates of code and data-tables are 
required, the 28F020’s reprogrammability and non- 
volatility make it the obvious and ideal replacement 
for EPROM. 

Primary applications and operating systems stored 
in flash eliminate the slow disk-to-DRAM download 
process. This results in dramatic enhancement of 
performance and substantial reduction of power 
consumption — a consideration particularly impor- 
tant in portable equipment. Flash memory increases 
flexibility with electrical chip erasure and in-system 
update capability of operating systems and applica- 
tion code. With updatable code, system manufactur- 
ers can easily accommodate last-minute changes as 
revisions are made. 

In diskless workstations and terminals, network traf- 
fic reduces to a minimum and systems are instant- 
on. Reliability exceeds that of electromechanical 
media. Often in these environments, power interrup- 
tions force extended re-boot periods for all net- 
worked terminals. This mishap is no longer an issue 
if boot code, operating systems, communication pro- 
tocols and primary applications are flash-resident in 
each terminal. 

For embedded systems that rely on dynamic RAM/ 
disk for main system memory or nonvolatile backup 
storage, the 28F020 flash memory offers a solid 
state alternative in a minimal form factor. The 
28F020 provides higher performance, lower power 
consumption, instant-on capability, and allows an 
“execute in place” memory hierarchy for code and 
data table reading. Additionally, the flash memory is 
more rugged and reliable in harsh environments 
where extreme temperatures and shock can cause 
disk-based systems to fail. 

The need for code updates pervades all phases of a 
system’s life — from prototyping to system manufac- 
ture to after-sale service. The electrical chip-erasure 
and reprogramming ability of the 28F020 allows in- 
circuit alterability; this eliminates unnecessary han- 
dling and less-reliable socketed connections, while 
adding greater test, manufacture, and update flexi- 
bility. 


Material and labor costs associated with code 
changes increases at higher levels of system inte- 
gration — the most costly being code updates after 
sale. Code “bugs”, or the desire to augment system 
functionality, prompt after-sale code updates. Field 
revisions to EPROM-based code requires the re- 
moval of EPROM components or entire boards. With 
the 28F020, code updates are implemented locally 
via an edge-connector, or remotely over a commun- 
cations link. 

For systems currently using a high-density static 
RAM/battery configuration for data accumulation, 
flash memory’s inherent nonvolatility eliminates the 
need for battery backup. The concern for battery 
failure no longer exists, an important consideration 
for portable equipment and medical instruments, 
both requiring continuous performance. In addition, 
flash memory offers a considerable cost advantage 
over static RAM. 

Flash memory’s electrical chip erasure, byte pro- 
grammability and complete nonvolatility fit well with 
data accumulation and recording needs. Electrical 
chip-erasure gives the designer a “blank slate” in 
which to log or record data. Data can be periodically 
off-loaded for analysis and the flash memory erased 
producing a new “blank slate”. 

A high degree of on-chip feature integration simpli- 
fies memory-to-processor interfacing. Figure 4 de- 
picts two 28F020S tied to the 80C186 system bus. 
The 28F020’s architecture minimizes interface cir- 
cuitry needed for complete in-circuit updates of 
memory contents. 

The outstanding feature of the TSOP (Thin Small 
Outline Package) is the 1 .2 mm thickness. With stan- 
dard and reverse pin configurations, TSOP reduces 
the number of board layers and overall volume nec- 
essary to layout multiple 28F020s. TSOP is particu- 
larly suited for portable equipment and applications 
requiring large amounts of flash memory. Figure 3 
illustrates the TSOP Serpentine layout. 

With cost-effective in-system reprogramming, ex- 
tended cycling capability, and true nonvolatility, 
the 28F020 offers advantages to the alternatives: 
EPROMs, EEPROMs, battery backed static RAM, 
or disk. EPROM-compatible read specifications, 
straight-forward interfacing, and in-circuit alterability 
offers designers unlimited flexibility to meet the high 
standards of today’s designs. 
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Figure 4. 28F020 in a 80C186 System 


PRINCIPLES OF OPERATION 

Flash-memory augments EPROM functionality with 
in-circuit electrical erasure and reprogramming. The 
28F020 introduces a command register to manage 
this new functionality. The command register allows 
for: 100% TTL-level control inputs; fixed power sup- 
plies during erasure and programming; and maxi- 
mum EPROM compatibility. 

In the absence of high voltage on the Vpp pin, the 
28F020 is a read-only memory. Manipulation of the 
external memory-control pins yields the standard 
EPROM read, standby, output disable, and Intelli- 
gent Identifier operations. 

The same EPROM read, standby, and output disable 
operations are available when high voltage is ap- 
plied to the Vpp pin. In addition, high voltage on Vpp 
enables erasure and programming of the device. All 
functions associated with altering memory con- 
tents — Intelligent Identifier, erase, erase verify, pro- 
gram, and program verify — are accessed via the 
command register. 

Commands are written to the register using standard 
microprocessor write * timings. Register contents 
serve as input to an internal state-machine which 
controls the erase and programming circuitry. Write 
cycles also internally latch addresses and data 
needed for programming or erase operations. With 
the appropriate command written to the register, 


standard microprocessor read timings output array 
data, access the Intelligent Identifier codes, or out- 
put data for erase and program verification. 

Integrated Stop Timer 

Successive command write cycles define the dura- 
tions of program and erase operations; specifically, 
the program or erase time durations are normally 
terminated by associated program or erase verify 
commands. An integrated stop timer provides simpli- 
fied timing control over these operations; thus elimi- 
nating the need for maximum program/erase timing 
specifications. Programming and erase pulse dura- 
tions are minimums only. When the stop timer termi- 
nates a program or erase operation, the device en- 
ters an inactive state and remains inactive until re- 
ceiving the appropriate verify or reset command. 


Write Protection 

The command register is only active when Vpp is at 
high voltage. Depending upon the application, the 
system designer may choose to make the Vpp pow- 
er supply switchable— available only when memory 
updates are desired. When Vpp = Vppi_, the con- 
tents of the register default to the read command, 
making the 28F020 *a read-only memory. In this 
mode, the memory contents cannot be altered. 
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Table 2. 28F020 Bus Operations 


Pins 

VppO) 

Ao 

A 9 

CE# 

OE# 

WE# 

DQ()-DQ7 

Operation 

READ-ONLY 

Read 

VppL 

Ao 

Ag 

V|L 

V| L 

V|H 

Data Out 

Output Disable 

VppL 

X 

X 

V|L 

V|H 

V|H 

Tri-State 

Standby 

VppL 

X 

X 

V|H 

X 

X 

Tri-State 

Intelligent Identifier (Mfr)( 2 ) 

VppL 

V|L 

V 1D (3) 

V|L 

V|L 

V| H 

Data = 89H 

Intelligent Identifier (Device)( 2 ) 

VppL 

V| H 

V| D (3) 

V|L 

V|L 

V| H 

Data = BDH 

READ/WRITE 

Read 

VppH 

Ao 

Ag 

V|L 

V| L 

V| H 

Data Out( 4 ) 

Output Disable 

VppH 

X 

X 

V|L 

V|H 

V| H 

Tri-State 

Standby( 5 ) 

VppH 

X 

X 

V| H 

X 

X 

Tri-State 

Write 

VppH 

Ao 

Ag 

V|L 

V|H 

V|L 

Data ln( 6 ) 


NOTES: 

1 . Refer to DC Characteristics. When Vpp = Vppi_ memory contents can be read but not written or erased. 

2. Manufacturer and device codes may also be accessed via a command register write sequence. Refer to Table 3. All other 
addresses low. 

3. V|d is the Intelligent Identifier high voltage. Refer to DC Characteristics. 

4. Read operations with Vpp = Vppn may access array data or the Intelligent Identifier codes. 

5. With Vpp at high voltage, the standby current equals Ice + Ipp (standby). 

6. Refer to Table 3 for valid Data-In during a write operation. 

7. X can be V||_ or V|h- 


Or, the system designer may choose to “hardwire” 
Vpp, making the high voltage supply constantly 
available. In this case, all Command Register func- 
tions are inhibited whenever Vqq is below the write 
lockout voltage V|_ko- (See Power Up/Down Protec- 
tion.) The 28F020 is designed to accommodate ei- 
ther design practice, and to encourage optimization 
of the processor-memory interface. 

The two step program /erase write sequence to the 
Command Register provides additional software 
write protection. 


BUS OPERATIONS 
Read 

The 28F020 has two control functions, both of which 
must be logically active, to obtain data at the out- 
puts. Chip-Enable (CE#) is the power control and 
should be used for device selection. Output-Enable 
(OE#) is the output control and should be used 
to gate data from the output pins, independent of 
device selection. Refer to AC read timing 
waveforms. 


When Vpp is high (Vppn), the read operation can be 
used to access array data, to output the Intelligent 
Identifier codes, and to access data for program/ 
erase verification. When Vpp is low (VppJ, the read 
operation can only access the array data. 



Output Disable 

With Output-Enable at a logic-high level (Vih), output 
from the device is disabled. Output pins are placed 
in a high-impedance state. 


Standby 

With Chip-Enable at a logic-high level, the standby 
operation disables most of the 28F020’s circuitry 
and substantially reduces device power consump- 
tion. The outputs are placed in a high-impedance 
state, independent of the Output-Enable signal. 
If the 28F020 is deselected during erasure, pro- 
gramming, or program/erase verification, the 
device draws active current until the operation is 
terminated. 


I 
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Intelligent Identifier Operation 

The Intelligent Identifier operation outputs the manu- 
facturer code (89H) and device code (BDH). Pro- 
gramming equipment automatically matches the de- 
vice with its proper erase and programming algo- 
rithms. 

With Chip-Enable and Output-Enable at a logic low 
level, raising A9 to high voltage V|d (see DC Charac- 
teristics) activates the operation. Data read from lo- 
cations 0000H and 0001 H represent the manufac- 
turer’s code and the device code, respectively. 

The manufacturer- and device-codes can also be 
read via the command register, for instances where 
the 28F020 is erased and reprogrammed in the tar- 
get system. Following a write of 90H to the com- 
mand register, a read from address location 0000H 
outputs the manufacturer code (89H). A read from 
address 0001 H outputs the device code (BDH). 


Write 

Device erasure and programming are accomplished 
via the command register, when high voltage is ap- 
plied to the Vpp pin. The contents of the register 
serve as input to the internal state-machine. The 
state-machine outputs dictate the function of the 
device. 


The command register itself does not occupy an ad- 
dressable memory location. The register is a latch 
used to store the command, along with address and 
data information needed to execute the command. 

The command register is written by bringing Write- 
Enable to a logic-low level (V|[_), while Chip-Enable is 
low. Addresses are latched on the falling edge of 
Write-Enable, while data is latched on the rising 
edge of the Write-Enable pulse. Standard microproc- 
essor write timings are used. 

Refer to AC Write Characteristics and the Erase/ 
Programming Waveforms for specific timing 
parameters. 

COMMAND DEFINITIONS 

When low voltage is applied to the Vpp pin, the con- 
tents of the command register default to 00H, en- 
abling read-only operations. 

Placing high voltage on the Vpp pin enables read/ 
write operations. Device operations are selected by 
writing specific data patterns into the command reg- 
ister. Table 3 defines these 28F020 register 
commands. 


Table 3. Command Definitions 



Read Intelligent Identifier Codes( 4 ) 
Set-up Erase/Erase(5) 



Set-up Program /Program ( 6 ) 
Program Verify(6) 




NOTES: 

1. Bus operations are defined in Table 2. 

2. IA = Identifier address: 00H for manufacturer code, 01 H for device code. 

EA = Address of memory location to be read during erase verify. 

PA = Address of memory location to be programmed. 

Addresses are latched on the falling edge of the Write-Enable pulse. 

3. ID = Data read from location IA during device identification (Mfr = 89H, Device = BDH). 

EVD = Data read from location EA during erase verify. 

PD = Data to be programmed at location PA. Data is latched on the rising edge of Write-Enable. 

PVD = Data read from location PA during program verify. PA is latched on the Program command. 

4. Following the Read Intelligent ID command, two read operations access manufacturer and device codes. 

5. Figure 6 illustrates the Quick-Erase Algorithm. 

6. Figure 5 illustrates the Quick-Pulse Programming Algorithm. 

7. The second bus cycle must be followed by the desired command register write. 


5-8 


I 



















28F020 


iny 


Read Command 

While Vpp is high, for erasure and programming, 
memory contents can be accessed via the read 
command. The read operation is initiated by writing 
00H into the command register. Microprocessor 
read cycles retrieve array data. The device remains 
enabled for reads until the command register con- 
tents are altered. 

The default contents of the register upon Vpp pow- 
er-up is 00H. This default value ensures that no spu- 
rious alteration of memory contents occurs during 
the Vpp power transition. Where the Vpp supply is 
hard-wired to the 28F020, the device powers-up and 
remains enabled for reads until the command-regis- 
ter contents are changed. Refer to the AC Read 
Characteristics and Waveforms for specific timing 
parameters. 

Intelligent Identifier Command 

Flash-memories are intended for use in applications 
where the local CPU alters memory contents. As 
such, manufacturer- and device-codes must be ac- 
cessible while the device resides in the target sys- 
tem. PROM programmers typically access signature 
codes by raising A9 to a high voltage. However, mul- 
tiplexing high voltage onto address lines is not a de- 
sired system-design practice. 

The 28F020 contains an Intelligent Identifier opera- 
tion to supplement traditional PROM-programming 
methodology. The operation is initiated by writing 
90H into the command register. Following the com- 
mand write, a read cycle from address 0000H re- 
trieves the manufacturer code of 89H. A read cycle 
from address 0001 H returns the device code of 
BDH. To terminate the operation, it is necessary to 
write another valid command into the register. 

Set-up Erase/Erase Commands 

Set-up Erase is a command-only operation that 
stages the device for electrical erasure of all bytes in 
the array. The set-up erase operation is performed 
by writing 20H to the command register. 

To commence chip-erasure, the erase command 
(20H) must again be written to the register. The 
erase operation begins with the rising edge of the 
Write-Enable pulse and terminates with the rising 
edge of the next Write-Enable pulse (i.e., Erase-Veri- 
fy Command). 

This two-step sequence of set-up followed by execu- 
tion ensures that memory contents are not acciden- 
tally erased. Also, chip-erasure can only occur when 
high voltage is applied to the Vpp pin. In the absence 


of this high voltage, memory contents are protected 
against erasure. Refer to AC Erase Characteristics 
and Waveforms for specific timing parameters. 

Erase-Verify Command 

The erase command erases all bytes of the array in 
parallel. After each erase operation, all bytes must 
be verified. The erase verify operation is initiated by 
writing AOH into the command register. The address 
for the byte to be verified must be supplied as it is 
latched on the falling edge of the Write-Enable 
pulse. The register write terminates the erase opera- 
tion with the rising edge of its Write-Enable pulse. 

The 28F020 applies an internally-generated margin 
voltage to the addressed byte. Reading FFH from 
the addressed byte indicates that all bits in the byte 
are erased. 

The erase-verify command must be written to the 
command register prior to each byte verification to 
latch its address. The process continues for each 
byte in the array until a byte does not return FFH 
data, or the last address is accessed. 

In the case where the data read is not FFH, another 
erase operation is performed. (Refer to Set-up 
Erase/Erase). Verification then resumes from the 
address of the last-verified byte. Once all bytes in 
the array have been verified, the erase step is com- 
plete. The device can be programmed. At this point, 
the verify operation is terminated by writing a valid 
command (e.g. Program Set-up) to the command 
register. Figure 6, the Quick-Erase algorithm, illus- 
trates how commands and bus operations are com- 
bined to perform electrical erasure of the 28F020. 
Refer to AC Erase Characteristics and Waveforms 
for specific timing parameters. 

Set-up Program/Program Commands 

Set-up program is a command-only operation that 
stages the device for byte programming. Writing 40H 
into the command register performs the set-up 
operation. 

Once the program set-up operation is performed, 
the next Write-Enable pulse causes a transition to 
an active programming operation. Addresses are in- 
ternally latched on the falling edge of the Write-En- 
able pulse. Data is internally latched on the rising 
edge of the Write-Enable pulse. The rising edge of 
Write-Enable also begins the programming opera- 
tion. The programming operation terminates with the 
next rising edge of Write-Enable, used to write the 
program-verify command. Refer to AC Programming 
Characteristics and Waveforms for specific timing 
parameters. 
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Program-Verity Command 

The 28F020 is programmed on a byte-by-byte basis. 
Byte programming may occur sequentially or at ran- 
dom. Following each programming operation, the 
byte just programmed must be verified. 

The program-verity operation is initiated by writing 
COH into the command register. The register write 
terminates the programming operation with the ris- 
ing edge of its Write-Enable pulse. The program-ver- 
ity operation stages the device for verification of the 
byte last programmed. No new address information 
is latched. 

The 28F020 applies an internally-generated margin 
voltage to the byte. A microprocessor read cycle 
outputs the data. A successful comparison between 
the programmed byte and true data means that the 
byte is successfully programmed. Programming then 
proceeds to the next desired byte location. Figure 5, 
the 28F020 Quick-Pulse Programming algorithm, il- 
lustrates how commands are combined with bus op- 
erations to perform byte programming. Refer to AC 
Programming Characteristics and Waveforms for 
specific timing parameters. 

Reset Command 

A reset command is provided as a means to safely 
abort the erase- or program-command sequences. 
Following either set-up command (erase or program) 
with two consecutive writes of FFH will safely abort 
the operation. Memory contents will not be altered. 
A valid command must then be written to place the 
device in the desired state. 


EXTENDED ERASE/PROGRAM CYCLING 

EEPROM cycling failures have always concerned 
users. The high electrical field required by thin oxide 
EEPROMs for tunneling can literally tear apart the 
oxide at defect regions. To combat this, some sup- 
pliers have implemented redundancy schemes, re- 
ducing cycling failures to insignificant levels. Howev- 
er, redundancy requires that cell size be doubled — 
an expensive solution. 

Intel has designed extended cycling capability into 
its ETOX flash memory technology. Resulting im- 
provements in cycling reliability come without in- 
creasing memory cell size or complexity. First, an 
advanced tunnel oxide increases the charge carry- 
ing ability ten-fold. Second, the oxide area per cell 
subjected to the tunneling electric field is one-tenth 
that of common EEPROMs, minimizing the probabili- 
ty of oxide defects in the region. Finally, the peak 
electric field during erasure is approximately 
2 MV/cm lower than EEPROM. The lower electric 


intel. 

field greatly reduces oxide stress and the probability 
of failure — increasing time to wearout by a factor of 
100,000,000. 

The 28F020 is capable of 100,000 program/erase 
cycles. The device is programmed and erased using 
Intel’s Quick-Pulse Programming and Quick-Erase 
algorithms. Intel’s algorithmic approach uses a se- 
ries of operations (pulses), along with byte verifica- 
tion, to completely and reliably erase and program 
the device. 

For further information, see Reliability Report RR-60. 

QUICK-PULSE PROGRAMMING ALGORITHM 

The Quick-Pulse Programming algorithm uses pro- 
gramming operations of 10 jus duration. Each opera- 
tion is followed by a byte verification to determine 
when the addressed byte has been successfully pro- 
grammed. The algorithm allows for up to 25 pro- 
gramming operations per byte, although most bytes 
verify on the first or second operation. The entire 
sequence of programming and byte verification is 
performed with Vpp at high voltage. Figure 5 illus- 
trates the Quick-Pulse Programming algorithm. 

QUICK-ERASE ALGORITHM 

Intel’s Quick-Erase algorithm yields fast and reliable 
electrical erasure of memory contents. The algo- 
rithm employs a closed-loop flow, similar to the 
Quick-Pulse Programming algorithm, to simulta- 
neously remove charge from all bits in the array. 

Erasure begins with a read of memory contents. The 
28F020 is erased when shipped from the factory. 
Reading FFH data from the device would immedi- 
ately be followed by device programming. 

For devices being erased and reprogrammed, uni- 
form and reliable erasure is ensured by first pro- 
gramming all bits in the device to their charged state 
(Data = 00H). This is accomplished, using the 
Quick-Pulse Programming algorithm, in approxi- 
mately four seconds. 

Erase execution then continues with an initial erase 
operation. Erase verification (data = FFH) begins at 
address 0000H and continues through the array to 
the last address, or until data other than FFH is en- 
countered. With each erase operation, an increasing 
number of bytes verify to the erased state. Erase 
efficiency may be improved by storing the address of 
the last byte verified in a register. Following the next 
erase operation, verification starts at that stored ad- 
dress location. Erasure typically occurs in two sec- 
onds. Figure 6 illustrates the Quick-Erase algorithm. 
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NOTES: 

1. See DC Characteristics for the value of Vppn and 
VppL- 

2. Program Verify is only performed after byte program- 
ming. A final read/compare may be performed (option- 
al) after the register is written with the Read command. 


Bus 

Operation 

Command 

Comments 

Standby 


Wait for Vpp Ramp to Vppn(1 ) 



Initialize Pulse-Count 

Write 

Set-up 

Program 

Data = 40H 

Write 

Program 

Valid Address/ Data 

Standby 


Duration of Program 
Operation (twHWHi) 

Write 

Program^) 

Verify 

Data = COH; Stops Program 
Operation^) 

Standby 


tWHGL 

Read 


Read Byte to Verify 
Programming 

Standby 


Compare Data Output to Data 
Expected 

Write 

Read 

Data = 00H, Resets the 
Register for Read Operations 

Standby 


Wait for Vpp Ramp to Vpp[_(1) 


3. Refer to principles of operation. 

4. CAUTION: The algorithm MUST BE FOLLOWED 
to ensure proper and reliable operation of the de- 
vice. 


5 


Figure 5. 28F020 Quick-Pulse Programming Algorithm 
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1. See DC Characteristics for the value of Vppn and 
Vppl* 

2. Erase Verify is performed only after chip-erasure. A 
final read/compare may be performed (optional) after 
the register is written with the read command. 


Bus 

Operation 

Command 

Comments 



Entire Memory Must = 00H 
Before Erasure 



Use Quick-Pulse 
Programming Algorithm 
(Figure 5) 

Standby 


Wait for Vpp Ramp to V PP h(1) 



Initialize Addresses and 
Pulse-Count 

Write 

Set-up 

Erase 

Data = 20H 

Write 

Erase 

Data = 20H 

Standby 


Duration of Erase Operation 
(tWHWH2) 

Write 

Erased) 

Addr = Byte to Verify; 


Verify 

Data = AOH; Stops Erase 
Operation* 3 ) 

Standby 


tWHGL 

Read 


Read Byte to Verify Erasure 

Standby 


Compare Output to FFH 
Increment Pulse-Count 

Write 

Read 

Data = 00H, Resets the 
Register for Read Operations 

Standby 


Wait for Vpp Ramp to V PPL (1 ) 


3. Refer to principles of operation. 

4. CAUTION: The algorithm MUST BE FOLLOWED 
to ensure proper and reliable operation of the de- 
vice. 
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Figure 6. 28F020 Quick-Erase Algorithm 
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DESIGN CONSIDERATIONS 


Two-Line Output Control 

Flash-memories are often used in larger memory ar- 
rays. Intel provides two read-control inputs to ac- 
commodate multiple memory connections. Two-line 
control provides for: 

a. the lowest possible memory power dissipation 
and, 

b. complete assurance that output bus contention 
will not occur. 

To efficiently use these two control inputs, an ad- 
dress-decoder output should drive chip-enable, 
while the system’s read signal controls all flash- 
memories and other parallel memories. This assures 
that only enabled memory devices have active out- 
puts, while deselected devices maintain the low 
power standby condition. 


Power Supply Decoupling 

Flash-memory power-switching characteristics re- 
quire careful device decoupling. System designers 
are interested in three supply current (Iqq) issues — 
standby, active, and transient current peaks pro- 
duced by falling and rising edges of chip-enable. The 
capacitive and inductive loads on the device outputs 
determine the magnitudes of these peaks. 

Two-line control and proper decoupling capacitor 
selection will suppress transient voltage peaks. 
Each device should have a 0.1 juF ceramic capacitor 
connected between Vcc and Vss. and between Vpp 
and Vss- 

Place the high-frequency, low-inherent-inductance 
capacitors as close as possible to the devices. Also, 
for every eight devices, a 4.7 ju,F electrolytic capaci- 
tor should be placed at the array’s power supply 
connection, between Vcc and Vss- The bulk capaci- 
tor will overcome voltage slumps caused by printed- 
circuit-board trace inductance, and will supply 
charge to the smaller capacitors as needed. 


Vpp Trace on Printed Circuit Boards 

Programming flash-memories, while they reside in 
the target system, requires that the printed circuit 
board designer pay attention to the Vpp power sup- 
ply trace. The Vpp pin supplies the memory cell cur- 
rent for programming. Use similar trace widths and 
layout considerations given the Vqc power bus. Ad- 
equate Vpp supply traces and decoupling will de- 
crease Vpp voltage spikes and overshoots. 


Power Up/Down Protection 

The 28F020 is designed to offer protection against 
accidental erasure or programming during power 
transitions. Upon power-up, the 28F020 is indifferent 
as to which power supply, Vpp or Vcc. powers up 
first. Power supply sequencing is not required. 
Internal circuitry in the 28F020 ensures that the 
command register is reset to the read mode on pow- 
er up. 

A system designer must guard against active writes 
for Vcc voltages above Vlko when Vpp is active. 
Since both WE# and CE# must be low for a com- 
mand write, driving either to Vm will inhibit writes. 
The control register architecture provides an added 
level of protection since alteration of memory con- 
tents only occurs after successful completion of the 
two-step command sequences. 


28F020 Power Dissipation 

When designing portable systems, designers must 
consider battery power consumption not only during 
device operation, but also for data retention during 
system idle time. Flash nonvolatility increases the 
usable battery life of your system because the 
28F020 does not consume any power to retain code 
or data when the system is off. Table 4 illustrates the 
power dissipated when updating the 28F020. 


Table 4. 28F020 Typical 
Update Power Dissipation( 4 ) 


Operation 

Notes 

Power Dissipation 
(Watt-Seconds) 

Array Program/ Program Verify 

1 

0.34 

Array Erase/ Erase Verify 

2 

0.37 

One Complete Cycle 

3 

1.05 


NOTES: 

1. Formula to calculate typical Program/ Program Verify 
Power = [Vpp x # Bytes x typical # Prog Pulse 
(twHWHi x Ipp 2 typical + t WH GL x Ipp 4 typical)] + [Vcc 
X # Bytes X typical # Prog Pulses (twHWHi x Icc2 typi- 
cal + twHGL x Icc 4 typical)]. 

2. Formula to calculate typical Erase/Erase Verify Power 
= [Vpp (l PP3 typical X t E RASE typical + lpp 5 typical x 
twHGL X # Bytes)] + [Vcc 0CC3 typical x t E RASE typical 
+ Ices typical x t W HGL x # Bytes)]. 

3. One Complete Cycle = Array Preprogram + Array 
Erase + Program. 

4. “Typicals” are not guaranteed but based on a limited 
number of samples from 28F020-1 50 production lots. 
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ABSOLUTE MAXIMUM RATINGS* 

Operating Temperature 

During Read 0°Cto +70°CO | ) 

During Erase/Program 0°Cto + 70°C0) 

Operating Temperature 

During Read -40°C to + 85°C( 2 ) 

During Erase/Program -40°C to + 85°C( 2 ) 

Temperature Under Bias - 1 0°C to + 80°C0) 

Temperature Under Bias - 50°C to + 95°C( 2 ) 

Storage Temperature - 65°C to + 1 25°C 

Voltage on Any Pin with 

Respect to Ground -2.0V to + 7.0V( 2 ) 

Voltage on Pin Ag with 

Respect to Ground -2.0V to + 13.5V( 2 > 3 ) 

Vpp Supply Voltage with 
Respect to Ground 

During Erase/Program — -2.0V to + 14.0V( 2 > 3 ) 
Vcc Supply Voltage with 

Respect to Ground ...... -2.0V to + 7.0V( 2 ) 

Output Short Circuit Current 100 mA(4) 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 

* WARNING: Stressing the device beyond the "Absolute 
Maximum Ratings ” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
"Operating Conditions" is not recommended and ex- 
tended exposure beyond the "Operating Conditions" 
may affect device reliability. 


NOTES: 

1 . Operating temperature is for commercial product defined by this specification. 

2. Operating temperature is for extended temperature product as defined by this specification. 

3. Minimum DC input voltage is -0.5V. During transitions, inputs may undershoot to -2.0V for periods less 
than 20 ns. Maximum DC voltage on output pins is Vcc + 0.5V, which may overshoot to Vcc + 2.0V for 
periods less than 20 ns. 

4. Maximum DC voltage on Ag or Vpp may overshoot to + 14.0 V for periods less than 20 ns. 

5. Output shorted for no more than one second. No more than one output shorted at a time. 

6. See AC Input/Output reference Waveforms and AC Testing Load Circuits for testing characteristics. 

7. See High Speed AC Input/Output reference Waveforms and High Speed AC Testing Load Circuits for 
testing characteristics. 


OPERATING CONDITIONS 


Symbol 

Parameter 

Limits 

Unit 

Min 

Max 

Ta 

Operating Temperature^) 

0 

70 

°c 

Ta 

Operating Temperature( 2 ) 

-40 

+ 85 

°C 

Vcc 

Vcc Supply Voltage (1 0%)( 6 ) 

4.50 

5.50 

V 

Vcc 

Vcc Supply Voltage (5%)(7) 

4.75 

5.25 

V 


DC CHARACTERISTICS— TTL/NMOS COMPATIBLE— Commercial Products 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 



Max 

lu 

Input Leakage Current 

1 

■ 





Ilo 

Output Leakage Current 


■ 

■ 
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DC CHARACTERISTICS— TTL/NMOS COMPATIBLE — Commercial 
Products (Continued) 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 

Min 

Typ<4) 

Max 

•ccs 

Vqc Standby Current 

1 


0.3 

1.0 

mA 

Vcc = Vcc Max 
CE# = V 1H 

Icci 

Vqc Active Read Current 

1 


10 

30 

mA 

V CC = V CC Max, CE# = V||_ 
f = 6 MHz, Iqut = 0 mA 

ICC2 

V CC Programming Current 

1,2 


1.0 

10 

mA 

Programming in Progress 

ICC3 

Vcc Erase Current 

1,.2 


5.0 

15 

mA 

Erasure in Progress 

ICC4 

Vcc Program Verify Current 

1,2 


5.0 

15 

mA 

Vpp = VppH, 

Program Verify in Progress 

ICC5 

Vcc Erase Verify Current 

1,2 


5.0 

15 

mA 

Vpp = Vpp H , 

Erase Verify in Progress 

ipps 

Vpp Leakage Current 

1 



±10 

juA 

o 

o 

> 

VI 

Q. 

Q. 

> 

IPPI 

Vpp Read Current, ID Current 
or Standby Current 

1 


90 

200 

juA 

Vpp > Vcc 


±10 

Vpp ^ Vcc 

lpP2 

Vpp Programming Current 

1,2 


8 

30 

mA 

Vpp = VppH 

Programming in Progress 

IPP3 

Vpp Erase Current 

1,2 


10 

30 

mA 

Vpp = Vpph 

IPP4 

Vpp Program Verify Current 

1,2 


2.0 

5.0 

mA 

Vpp = Vpph, 

Program Verify in Progress 

IPP5 

Vpp Erase Verify Current 

1,2 


2.0 

5.0 

mA 

Vpp = Vpph, 

Erase Verify in Progress 

V| L 

Input Low Voltage 


-0.5 


0.8 

V 


V|H 

Input High Voltage 


2.0 


Vcc + °- 5 

V 


V 0 L 

Output Low Voltage 




0.45 

V 

Iol = 5.8 mA 
Vcc = Vcc Min 

VOHI 

Output High Voltage 


2.4 



V 

Ioh = “2.5 mA 
Vcc = Vcc Min 

V|D 

Ag Intelligent Identifer 
Voltage 


11.50 


13.00 

V 


l|D 

Ag Intelligent Identifier 
Current 

1,2 


90 

200 

juA 

Ag = V,D 

VpPL 

Vpp during Read-Only 
Operations 


0.00 


6.5 

V 

NOTE: Erase/ Program are 
Inhibited when Vpp = Vpp|_ 

VppH 

Vpp during Read/Write 
Operations 


11.40 


12.60 

V 


Vlko 

Vcc Erase/Write Lock Voltage 


2.5 



V 
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DC CH 

ARACTERISTICS — C 

MOS COMPATIBLE — Commercial Products 

Symbol 

Parameter 


Limits 

Unit 

Test Conditions 

Notes 

Min 

TypW 

Max 

Ili 

Input Leakage Current 

1 



±1.0 

/xA 

Vcc = Vcc M ^ x 
V|N = v cc or Vss 

Ilo 

Output Leakage Current 

1 



±10 

jlaA 

v cc = v cc Max 
VoUT = v cc or v ss 

lees 

Vcc Standby Current 

1 


50 

100 

juA 

Vcc = Vcc Max 
CE# = V C c - 0.2V 

icci 

Vcc Active Read Current 

■ 



30 

mA 

Vcc = Vcc Max, CE# = V||_ 
f = 6 MHz, Iout = 0 mA 

lcC2 

Vcc Programming Current 

mm 



10 

m 

Programming in Progress 

1 

Vcc Erase Current 

mm 



15 

mA 

Erasure in Progress 

Q | 






mA 

Vpp = VppH, Program 
Verify in Progress 

>CC5 






mA 

Vpp = Vpp H , 

Erase Verify in Progress 

Ipps 

Vpp Leakage Current 

i 



±10 

jaA 

Vpp ^ Vcc 

•PPI 

Vpp Read Current, 
ID Current or 
Standby Current 

i 



200 

juA 

Vpp > V C c 



Vpp ^ Vcc 

lpP2 

Vpp Programming 
Current 

1,2 


H 


mA 

Vpp = VppH, 
Programming in Progress 

•PP3 

Vpp Erase Current 

1,2 


H 

30 

mA 

Vpp = Vpp H , 
Erasure in Progress 

IPP4 

Vpp Program Verify 
Current 

1,2 


| 

5.0 

mA 

Vpp = Vpp H> 

Program Verify in Progress 

•PP5 

Vpp Erase Verify 
Current 

1,2 


Jj 

5.0 

mA 

Vpp = Vpp H , 

Erase Verify in Progress 

V|L 

Input Low Voltage 


-0.5 


0.8 

V 


V|H 

Input High Voltage 




V CC + 0.5 

V 


VOL 

Output Low Voltage 

■ 


■ 

0.45 

V 

Iql = 5.8 mA 
Vcc = Vcc Min 

VoHI 

Ontnnt Hinh X/nltanp 


0.85 Vcc 

1 


V 

l 0 H = -2.5 mA, 

Vcc = Vcc Min 

V OH2 


Vcc - 0-4 

Iqh = -100 julA, 
Vcc = Vcc Min 

V|D 

A 9 Intelligent Identifer 
Voltage 

■ 

11.50 






Ag Intelligent Identifier 
Current 

1,2 




E 

A 9 = V| D 

VpPL 

Vpp during Read-Only 
Operations 


0.00 



H 


VpPH 

Vpp during Read/Write 
Operations 


11.40 



H 


■ 



2.5 



H 
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DC CHARACTERISTICS— TTL/NMOS COMPATIBLE— Extended Temperature 
Products 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 


Min 

TypM) 

Max 

lu 

Input Leakage Current 

1 



±1.0 

fxA 

V CC = Vcc Max 
V|N = Vcc or Vss 

•lo 

Output Leakage Current 

1 



±10 

jxA 

Vcc = v cc Max 

VoUT = Vcc or V SS 

lees 

Vcc Standby Current 

1 


0.3 

1.0 

mA 

Vcc = Vcc M ax 
CE# = V| H 

! CC1 

Vcc Active Read Current 

1 


10 

30 

mA 

Vcc = Vcc Max, CE# = V||_ 
f = 6 MHz, Iqut = 0 mA 

•CC2 

Vcc Programming Current 

1,2 


1.0 

30 

mA 

Programming in Progress 

ICC3 

Vcc Erase Current 

1,2 


5.0 

30 

mA 

Erasure in Progress 

ICC4 

Vcc Program Verify Current 

1,2 


5.0 

30 

mA 

Vpp = VppH, 

Program Verify in Progress 

ICC5 

Vcc Erase Verify Current 

1,2 


5.0 

30 

mA 

Vpp = VppH, 

Erase Verify in Progress, 

•pps 

Vpp Leakage Current 

1 



±10 

JLtA 

o 

o 

> 

VI 

CL 

Q. 

> 

*PP1 

Vpp Read Current, ID Current 
or Standby Current 

1 


90 

200 

juA 

Vpp > Vcc 


±10 

Vpp ^ Vcc 

lpP2 

Vpp Programming Current 

1,2 


H 

30 

mA 

Vpp = VppH 

Programming in Progress 

IPP3 

Vpp Erase Current 

1,2 



30 

mA 

Vpp = VppH 

lpP4 

Vpp Program Verify Current 

1,2 




mA 

Vpp = VppH, 

Program Verify in Progress 

lpP5 

Vpp Erase Verify Current 

1,2 


2.0 

5.0 ! 

mA 

Vpp = VppH, 

Erase Verify in Progress 

V| L 

Input Low Voltage 




0.8 

V 


V|H 

Input High Voltage 





D 


V 0 L 

Output Low Voltage 




0.45 

V 

Iql = 5.8 mA 
v cc = Vcc Min 

VOHI 

Output High Voltage 


2.4 



V 

Ioh = “2.5 mA 
v cc = v cc Min 

V|D 

Ag Intelligent Identifer 
Voltage 


11.50 


13.00 

V 


l|D 

Ag Intelligent Identifier 
Current 

1,2 


90 

500 

jlxA 

A 9 = V|D 

VppL 

Vpp during Read-Only 
Operations 


0.00 


6.5 

V 

NOTE: Erase/ Program are 
Inhibited when Vpp = Vppi_ 

V PPH 

Vpp during Read/Write 
Operations 


11.40 


12.60 

V 


V LKO 

Vcc Erase/Write Lock Voltage 


2.5 



V 



I 
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DC CHARACTERISTICS— CMOS COMPATIBLE— Extended Temperature 
Products 


Symbol 

Parameter 


Limits 

Unit 

Test Conditions 

Notes 

Min 

TypW 

Max 

Ili 

Input Leakage Current 

1 



±1.0 

/ulA 

Vcc = v cc Max 
V|N = Vcc or Vss 

Ilo 

Output Leakage Current 



■ 






■ 



100 

JU, A 

Vcc = Vcc Max 
CE# = Vcc ±0.2V 

Icci 


■ 

■ 

10 

50 

mA 

Vcc = Vcc Max, CE# = V|L 
f = 6 MHz, Iqut = 0 mA 



IB 



10 

mA 

Programming in Progress 


Vqc Erase Current 

1,2 



30 

mA 

Erasure in Progress 

Q| 

Vcc Program Verify Current 

1,2 


5.0 

30 

mA 

Vpp = VppH, Program 
Verify in Progress 

! CC5 

Vqc Erase Verify 
Current 

1,2 




mA 

Vpp = VppH, 

Erase Verify in Progress 


Vpp Leakage Current 

1 



±10 


Vpp ^ Vqq 


Vpp Read Current, 
ID Current or 
Standby Current 

1 



200 


Vpp > Vqq 

H 

±10 

Vpp ^ Vqq 

•PP2 

Vpp Programming 
Current 

1,2 


n 

30 

mA 

Vpp = VppH, 
Programming in Progress 

!pP3 

Vpp Erase Current 



10 



Vpp = VppH, 
Erasure in Progress 

lpP4 

Vpp Program Verify 
Current 

1,2 


2.0 

5.0 

mA 

Vpp = VppH, 

Program Verify in Progress 

■ 

Vpp Erase Verify 
Current 

1,2 





Vpp = VppH, 

Erase Verify in Progress 

BH 

Input Low Voltage 


-0.5 


0.8 

m 


V|H 

Input High Voltage 





D 


VOL 

Output Low Voltage 

■ 


■ 

0.45 




O'utDut Hiah Voltaae 





V 

Ioh = ~2.5 mA, 
Vcc = Vcc Min 




Ioh = — 100 p,A, 
v cc = Vcc Min 

V|D 

A 9 Intelligent Identifer 
Voltage 

■ 

11.50 

■ 


V 




B 




jxA 

Ag = V|D 

VppL 

Vpp during Read-Only 
Operations 

■ 

0.00 

■ 


V 

NOTE: Erase/ Programs are 
Inhibited when Vpp = Vppi_ 

VppH 

Vpp during Read/Write 
Operations 


11.40 


12.60 

V 


Vlko 

Vqq Erase/Write Lock 
Voltage 


2.5 



V 
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CAPACITANCE T A = 25°C, f = 1.0 MHz 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Conditions 

Min 

Max 

C|N 

Address/Control Capacitance 

3 


8 

pF 

> 

o 

II 

z 

> 

Gout 

Output Capacitance 

3 


12 

PF 

Vout = ov 


NOTES for DC Characteristics and Capacitance: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, Vpp = 12.0V, T = 25°C. These currents 
are valid for all product versions (packages and speeds). 

2. Not 100% tested: Characterization data available. 

3. Sampled, not 100% tested. 

4. “Typicals” are not guaranteed, but based on a limited number of samples from production lots. 


TESTING INPUT/OUTPUT WAVEFORMd) 


X ToTT — ^ — rv?r 

"^>TEST POINTS <T * < 




290245-21 


AC test inputs are driven at Voh (2.4 Vttl) for a Logic 
“1 ” and Vql (0-45 V-mJ for a Logic “0”. Input timing 
begins at Vm (2.0 Vjtl 3 and V IL (0.8 Vttl). Output tim- 
ing ends at Vih and V||_. Input rise and fall times (10% 
to 90%) ^10 ns. 


HIGH SPEED AC TESTING INPUT/OUTPUT 
WAVEFORMS(2) 


3.0 " ■ 

INPUT 
o.o 



TEST POINTS 


-5S- 



.5 OUTPUT 


290245-22 


AC test inputs are driven at 3.0V for a Logic “1” and 
0.0V for a Logic “0”. Input timing begins, and output 
timing ends, at 1.5V. Input rise and fall times (10% to 
90%) ^10 ns. 


AC TESTING LOAD CIRCUITS) 


1.3V 



C L = 100 pF 

Cl includes Jig Capacitance 
Rl = 3.3 kft 


HIGH SPEED AC TESTING LOAD CIRCUITS) 


1.3V 



C L = 30 pF 

Cl includes Jig Capacitance 
R l = 3.3 kn 



AC TEST CONDITIONSO) 


HIGH SPEED AC TEST CONDITIONS^) 


Input Rise and Fall Times (1 0% to 90%) 1 0 ns 

Input Pulse Levels 0.45 and 2.4 

Input Timing Reference Level 0.8 and 2.0 

Output Timing Reference Level 0.8 and 2.0 

Capacitive LoadC| 1 00 pF 

NOTES: 


Input Rise and Fall Times (10% to 90%) 

Input Pulse Levels 

Input Timing Reference Level 

Output Timing Reference Level 

Capacitive Load C| 


1. Testing characteristics for 28F020-70 in standard configuration, and 28F020-90 and 28F020-150. 

2. Testing characteristics for 28F020-70 in high speed configuration. 


10 ns 

0.0 and 3.0 


...1.5 
...1.5 
30 pF 


I 


5-19 






5-20 


AC CHARACTERISTICS — Read Only Operations— Commercial and Extended Temperature Products 


Versions 

V CC +5% 

28F020-70W 




Unit 

Vcc + 10% 


28F020-70<5) 

28F020-90(5) 

28F020- 150( 5 ) 

Symbol 

Characteristics 

Notes 

Min 

Max 



Min 

Max 

Min 

Max 

tAVAv/tRC 

Read Cycle Time 


70 




90 


150 


ns 

tELQv/tCE 

Chip Enable 
Access Time 









120 

ns 

tAVQv/tACC 

Address Access Time 



70 


80 


90 




tGLQv/tOE 

Output Enable 
Access Time 



28 


30 


35 




tELQx/tLZ 

Chip Enable to 
Output in Low Z 

2,3 

0 


0 








Chip Disable to 
Output in High Z 

2 


35 


40 




55 


tGLQx/tOLZ 

Output Enable to 
Output in Low Z 

2,3 

0 


0 



0 



ns 

tGHQZ/tDF 

Output Disable to 
Output in High Z 

2 




30 




30 

ns 

tOH 

Output Hold from 
Address, CE#, or 
OE# Change 

1,2 

0 


0 



0 



■ 

tWHGL 

Write Recovery Time 
before Read 


6 


6 


■ 

6 


6 

jjlS 


NOTES: 

1 . Whichever occurs first. 

2. Sampled, not 100% tested. 

3. Guaranteed by design. 

4. See High Speed AC Input/Output reference Waveforms and High Speed AC Testing Load Circuits for testing characteristics. 

5. See AC Input/Output reference Waveforms and AC Testing Load Circuits for testing characteristics. 
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AC CHARACTERISTICS — Write/Erase/Program Only Operations^) — Commercial and Extended Temperature 
Products 


Versions 

Vcc +5% 

28F020-70(2, 4) 




Unit 

Vcc+10% 


28F020-70<5) 

28F020-90(5) 

28F020-150(5) 

Symbol 

Characteristics 

Notes 

Min 

Max 

Min 

Max 

Min 

Max 

Min 

Max 

tAVAV^WC 

Write Cycle Time 


70 


80 


90 


150 


ns 

tAVWL/fAS 

Address Set-Up Time 


0 


0 


' 0 


0 


ns 

tWLAX/t.AH 

Address Hold Time 


40 


40 


40 


40 


ns 

6 





55 




tDVWH/tDS 

Data Set-Up Time 


40 


40 


40 


40 


ns 

6 





55 




tWHDX/tDH 

Data Hold Time 


10 


10 


10 


10 


ns 

fWHGL 

Write Recovery Time 
before Read 


6 


6 


6 


6 


M*s 

tGHWL 

Read Recovery Time 
before Write 

2 

0 


0 


0 


0 


ns 

tELWL/ 

*CS 

Chip Enable Set-Up 
Time before Write 


15 


15 


15 


15 


ns 

tWHEH/ 

tCH 

Chip Enable Hold Time 


0 


0 


0 


0 


ns 

tWLWH/tWP 

Write Pulse Width 


40 


40 


40 


60 


ns 

6 





55 




tWHWI./ 

tWPH 

Write Pulse Width High 


20 


20 


20 


20 


ns 

twHWHI 

Duration of Programming 
Operation 

3 

10 


10 


10 


10 


/AS 

fWHWH2 

Duration of Erase 
Operation 

3 

9.5 


9.5 


9.5 


9.5 


ms 

tVPEL 

Vpp Set-Up Time to 
Chip Enable Low 

2 

1 


1 


1 


1 


JUS 


NOTES: 

1 . Read timing characteristics during read/write operations are the same as during read-only operations. Refer to AC Characteristics for Read-Only Operations. 

2. Guaranteed by design. 

3. The integrated stop timer terminates the programming/erase operations, thus eliminating the need for a maximum specification. 

4. See High Speed AC Input/Output reference Waveforms and High Speed AC Testing Load Circuits for testing characteristics. 

5. See AC Input/Output reference Waveforms and AC Testing Load Circuits for testing characteristics. 

6. Minimum Specification for Extended Temperature product. 
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ERASE AND PROGRAMMING PERFORMANCE 


Parameter 

Notes 

Limits 

Unit 

Min 

Typ 

Max 

Chip Erase Time 

1,3,4 


2 

30 

Sec 

Chip Program Time 

1,2,4 


4 

25 

Sec 


NOTES: 

1. “Typicals” are not guaranteed, but based on a limited number of samples from production lots. Data taken at 25°C, 12.0V 
Vp P at 0 cycles. 

2. Minimum byte programming time excluding system overhead is 16 ^sec (10 /xsec program + 6 jusec write recovery), 
while maximum is 400 jxsec/byte (16 fisec x 25 loops allowed by algorithm). Max chip programming time is specified lower 
than the worst case allowed by the programming algorithm since most bytes program significantly faster than the worst case 
byte. 

3. Excludes 00H Programming prior to Erasure. 

4. Excludes System-Level Overhead. 

5. Refer to RR-60, 69 “ETOX Flash Memory Reliability Data Summaries” for typical cycling data and failure rate calculations. 



I 
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Figure 12. AC Waveforms for Programming Operations 
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Figure 13. AC Waveforms for Erase Operations 
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AC CHARACTERISTICS — Alternate CE# Controlled Writes — Commercial and Extended Temperature Products 


Versions 

V CC +5% 

28F020-70(2.4) 




Unit 

v cc + io% 


28F020-70<5) 

28F020-90<5) 

28F020-150(5) 

Symbol 

Characteristics 

Notes 

Min 

Max 

Min 

Max 

Min 

Max 

Min 

Max 

tAVAV 

Write Cycle Time 


70 


80 


90 


150 


ns 


Address Set-Up Time 


0 


0 


0 


0 


ns 


Address Hold Time 


50 


50 


50 


55 


ns 

6 





60 





Data Set-Up Time 


40 


40 


40 


45 


H 

6 





50 




E ■ 

Data Hold Time 


10 


10 


10 


10 


ns 

m 

Write Recovery Time 
before Read 


6 


6 


6 


6 


Q 

tGHWL 

Read Recovery Time 
before Write 

2 

0 


0 


0 


0 


I 




0 


0 


0 


0 


ns 

tEHWH 



0 


0 


0 


0 



tELEH 

Write Pulse Width 


50 


50 


50 


70 


ns 

6 





60 




tEHEL 

Write Pulse Width High 


20 


20 


20 


20 

■ 

ns 

tEHEHl 

Duration of Programming 
Operation 

3 

10 


10 


I 10 


10 


JJbS 

*EHEH2 

Duration of Erase Operation 

3 

9.5 


9.5 


9.5 


9.5 


ms 

tVPEL 

Vpp Set-Up Time to 
Chip Enable Low 

2 

1 


1 


1 


i 


JLtS 


NOTES: 

1. Read timing characteristics during read/write operations are the same as during read-only operations. Refer to AC Characteristics for Read-Only Operations. 

2. Guaranteed by design. 

3. The integrated stop timer terminates the programming/erase operations, thus eliminating the need for a maximum specification. 

4. See High Speed AC Input/Output reference Waveforms and High Speed AC Testing Load Circuits for testing characterises. 

5. See AC Input/Output reference Waveforms and AC Testing Load Circuits for testing characteristics. 

6. Minimum specification for Extended Temperature product. 
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Figure 14. Alternate AC Waveforms for Programming Operations 
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ORDERING INFORMATION 


H 

I 

3 

8 

□ 

0 

0 

” 

- 

8 

° 


0 

0 

0 


Tt 


TEMPERATURE RANGE 

T = EXTENDED (-40°C TO +55°C) 
BLANK = COMMERCIAL (0°C TO +70°C) 


PACKAGE 

P = 32-PIN PLASTIC DIP 
N = 32-LEAD PLCC 
E = STANDARD 32-LEAD TSOP 
F = REVERSE 32-LEAD TSOP 


1 PROLIFERATION CODE 

■ ACCESS SPEED (ns) 

80 ns 
90 ns 
150 ns 
200 ns 


290245-19 


VALID COMBINATIONS: 


P28F020-70 

P28F020-90 

P28F020-150 


N28F020-70 

N28F020-90 

N28F020-150 


E28F020-70 
E28F020-90 
E28F020-1 50 


F28F020-70 

F28F020-90 

F28F020-150 


TN28F020-90 


TE28F020-90 

TF28F020-90 


ADDITIONAL INFORMATION 

Order 

Number 

ER-20, 

“ETOX Flash Memory 
Technology” 

294005 

ER-24, 

“Intel Flash Memory” 

294008 

ER-28, 

“ETOX III Flash Memory 
Technology” 

294012 

RR-60, 

“ETOX Flash Memory 
Reliability Data Summary” 

293002 

AP-316, 

“Using Flash Memory for In- 
System Reprogrammable 
Nonvolatile Storage” 

292046 

AP-325 

“Guide to Flash Memory 
Reprogramming” 

292059 


REVISION HISTORY 


Number 

Description 

-004 

Removed Preliminary 

Classification. Clarified AC and DC 
test conditions. Added “dimple” to F 
TSOP package. Corrected 
serpentine layout. 

,-005 

Added -80V05, -90 ns speed grades. 
Added extended temperature 
devices. Corrected AC Waveforms. 

-006 

Added -70 ns speed. 

Deleted -80V05 speed. 

Revised symbols, i.e., CE, OE, etc. 
to CE#, OE#, etc. 


5-32 


I 




intj 

28F010 

1024K (128K x 8) CMOS FLASH MEMORY 


■ Flash Electrical Chip-Erase 

— 1 Second Typical Chip-Erase 

■ Quick Pulse Programming Algorithm 
— 10 juts Typical Byte-Program 

— 2 Second Chip-Program 

■ 100,000 Erase/Program Cycles 
m 12.0V ±5% Vpp 

m High-Performance Read 

— 65 ns Maximum Access Time 

■ CMOS Low Power Consumption 
— 10 mA Typical Active Current 

— 50 jmA Typical Standby Current 

— 0 Watts Data Retention Power 

m Integrated Program/Erase Stop Timer 


■ Command Register Architecture for 
Microprocessor/Microcontroller 
Compatible Write Interface 

■ Noise Immunity Features 

— ± 10% Vqc Tolerance 

— Maximum Latch-Up Immunity 
through EPI Processing 

B ETOX Nonvolatile Flash Technology 
— EPROM-Compatible Process Base 
— High-Volume Manufacturing 
Experience 

m JEDEC-Standard Pinouts 

— 32-Pin Plastic Dip 
-32-Lead PLCC 
-32-Lead TSOP 

(See Packaging Spec., Order #231369) 

H Extended Temperature Options 


Intel’s 28F010 CMOS flash memory offers the most cost-effective and reliable alternative for read/write 
random access nonvolatile memory. The 28F010 adds electrical chip-erasure and reprogramming to familiar 
EPROM technology. Memory contents can be rewritten: in a test socket; in a PROM-programmer socket; on- 
board during subassembly test; in-system during final test; and in-system after-sale. The 28F010 increases 
memory flexibility, while contributing to time and cost savings. 

The 28F010 is a 1024 kilobit nonvolatile memory organized as 131,072 bytes of 8 bits. Intel’s 28F010 is 
offered in 32-pin plastic dip or 32-lead PLCC and TSOP packages. Pin assignments conform to JEDEC 
standards for byte-wide EPROMs. 

Extended erase and program cycling capability is designed into Intel’s ETOX (EPROM Tunnel Oxide) process 
technology. Advanced oxide processing, an optimized tunneling structure, and lower electric field combine to 
extend reliable cycling beyond that of traditional EEPROMs. With the 12.0V Vpp supply, the 28F010 performs 
100,000 erase and program cycles well within the time limits of the Quick Pulse Programming and Quick Erase 
algorithms. 

Intel’s 28F010 employs advanced CMOS circuitry for systems requiring high-performance access speeds, low 
power consumption, and immunity to noise. Its 65 nanosecond access time provides no-WAIT-state perform- 
ance for a wide range of microprocessors and microcontrollers. Maximum standby current of 100 juA trans- 
lates into power savings when the device is deselected. Finally, the highest degree of latch-up protection is 
achieved through Intel’s unique EPI processing. Prevention of latch-up is provided for stresses up to 100 mA 
on address and data pins, from -IV to Vcc + IV. 

With Intel’s ETOX process base, the 28F010 levers years of EPROM experience to yield the highest levels of 
quality, reliability, and cost-effectiveness. 


November 1994 

Order Number: 290207-009 
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Figure 1. 28F010 Block Diagram 


Table 1. Pin Description 


Symbol 

Type 

Name and Function 

Ao-A 16 

INPUT 

ADDRESS INPUTS for memory addresses. Addresses are internally 
latched during a write cycle. 

DQ 0 -DQ 7 

INPUT/OUTPUT 

DATA INPUT/OUTPUT: Inputs data during memory write cycles; 
outputs data during memory read cycles. The data pins are active high 
and float to tri-state OFF when the chip is deselected or the outputs 
are disabled. Data is internally latched during a write cycle. 

CE# 

INPUT 

CHIP ENABLE: Activates the device’s control logic, input buffers, 
decoders and sense amplifiers. CE# is active low; CE# high 
deselects the memory device and reduces power consumption to 
standby levels. 

OE# 

INPUT 

OUTPUT ENABLE: Gates the devices output through the data buffers 
during a read cycle. OE# is active low. 

WE# 

INPUT 

... 

WRITE ENABLE: Controls writes to the control register and the array. 
Write enable is active low. Addresses are latched on the falling edge 
and data is latched on the rising edge of the WE# pulse. 

Note: With Vpp ^ 6.5V, memory contents cannot be altered. 


' 

ERASE/PROGRAM POWER SUPPLY for writing the command 
register, erasing the entire array, or programming bytes in the array. 



DEVICE POWER SUPPLY (5V ± 10%) 



GROUND 

NC 


NO INTERNAL CONNECTION to device. Pin may be driven or left 
floating. 
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Figure 2. 28F010 Pin Configurations 
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APPLICATIONS 

The 28F010 flash memory provides nonvolatility 
along with the capability to perform over 100,000 
electrical chip-erasure/reprogram cycles. These fea- 
tures make the 28F010 an innovative alternative to 
disk, EEPROM, and battery-backed static RAM. 
Where periodic updates of code and data-tables are 
required, the 28F010’s reprogrammability and non- 
volatility make it the obvious and ideal replacement 
for EPROM. 

Primary applications and operating systems stored 
in flash eliminate the slow disk-to-DRAM download 
process. This results in dramatic enhancement of 
performance and substantial reduction of power 
consumption — a consideration particularly impor- 
tant in portable equipment. Flash memory increases 
flexibility with electrical chip erasure and in-system 
update capability of operating systems and applica- 
tion code. With updatable code, system manufactur- 
ers can easily accommodate last-minute changes as 
revisions are made. 

In diskless workstations and terminals, network traf- 
fic reduces to a minimum and systems are instant- 
on. Reliability exceeds that of electromechanical 
media. Often in these environments, power interrup- 
tions force extended re-boot periods for all net- 
worked terminals. This mishap is no longer an issue 
if boot code, operating systems, communication pro- 
tocols and primary applications are flash-resident in 
each terminal. '*• 

For embedded systems that rely on dynamic RAM/ 
disk for main system memory or nonvolatile backup 
storage, the 28F010 flash memory offers a solid 
state alternative in a minimal form factor. The 
28F010 provides higher performance, lower power 
consumption, instant-on capability, and allows an 
“execute in place” memory hierarchy for code and 
data table reading. Additionally, the flash memory is 
more rugged and reliable in harsh environments 
where extreme temperatures and shock can cause 
disk-based systems to fail. 

The need for code updates pervades all phases of a 
system’s life — from prototyping to system manufac- 
ture to after-sale service. The electrical chip-erasure 
and reprogramming ability of the 28F010 allows in- 
circuit alterability; this eliminates unnecessary han- 
dling and less-reliable socketed connections, while 
adding greater test, manufacture, and update flexi- 
bility. 


Material and labor costs associated with code 
changes increases at higher levels of system inte- 
gration — the most costly being code updates after 
sale. Code “bugs”, or the desire to augment system 
functionality, prompt after-sale code updates. Field 
revisions to EPROM-based code requires the re- 
moval of EPROM components or entire boards. With 
the 28F010, code updates are implemented locally 
via an edge-connector, or remotely over a commun- 
cation link. 

For systems currently using a high-density static 
RAM/battery configuration for data accumulation, 
flash memory’s inherent nonvolatility eliminates the 
need for battery backup. The concern for battery 
failure no longer exists, an important consideration 
for portable equipment and medical instruments, 
both requiring continuous performance. In addition, 
flash memory offers a considerable cost advantage 
over static RAM. 

Flash memory’s electrical chip erasure, byte pro- 
grammability and complete nonvolatility fit well with 
data accumulation and recording needs. Electrical 
chip-erasure gives the designer a “blank slate” in 
which to log or record data. Data can be periodically 
off-loaded for analysis and the flash memory erased 
producing a new “blank slate”., 

A high degree of on-chip feature integration simpli- 
fies memory-to-processor interfacing. Figure 4 de- 
picts two 28F010s tied to the 80C186 system bus. 
The 28F010’s architecture minimizes interface cir- 
cuitry needed for complete in-circuit updates of 
memory contents. 

The outstanding feature of the TSOP (Thin Small 
Outline Package) is the 1.2 mm thickness. With stan- 
dard and reverse pin configurations, TSOP reduces 
the number of board layers and overall volume nec- 
essary to layout multiple 28F010s. TSOP is particu- 
larly suited for portable equipment and applications 
requiring large amounts of flash memory. Figure 3 
illustrates the TSOP Serpentine layout. 

With cost-effective in-system reprogramming, ex- 
tended cycling capability, and true nonvolatility, 
the 28F010 offers advantages to the alternatives: 
EPROMs, EEPROMs, battery backed static RAM, 
or disk. EPROM-compatible read specifications, 
straight-forward interfacing, and in-circuit alterability 
offers designers unlimited flexibility to meet the high 
standards of today’s designs. 
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Figure 4. 28F010 in a 80C186 System 


PRINCIPLES OF OPERATION 

Flash-memory augments EPROM functionality with 
in-circuit electrical erasure and reprogramming. The 
28F010 introduces a command register to manage 
this new functionality. The command register allows 
for: 100% TTL-level control inputs; fixed power sup- 
plies during erasure and programming; and maxi- 
mum EPROM compatibility. 

In the absence of high voltage on the Vpp pin, the 
28F010 is a read-only memory. Manipulation of the 
external memory-control pins yields the standard 
EPROM read, standby, output disable, and Intelli- 
gent Identifier operations. 

The same EPROM read, standby, and output disable 
operations are available when high voltage is ap- 
plied to the Vpp pin. In addition, high voltage on Vpp 
enables erasure and programming of the device. All 
functions associated with altering memory con- 
tents — Intelligent Identifier, erase, erase verify, pro- 
gram, and program verify — are accessed via the 
command register. 

Commands are written to the register using standard 
microprocessor write timings. Register contents 
serve as input to an internal state-machine which 
controls the erase and programming circuitry. Write 
cycles also internally latch addresses and data 


needed for programming or erase operations. With 
the appropriate command written to the register, 
standard microprocessor read timings output array 
data, access the Intelligent Identifier codes, or out- 
put data for erase and program verification. 


Integrated Stop Timer 

Successive command write cycles define the dura- 
tions of program and erase operations; specifically, 
the program or erase time durations are normally 
terminated by associated program or erase verify 
commands. An integrated stop timer provides simpli- 
fied timing control over these operations; thus elimi- 
nating the need for maximum program/erase timing 
specifications. Programming and erase pulse dura- 
tions are minimums only. When the stop timer termi- 
nates a program or erase operation, the device en- 
ters an inactive state and remains inactive until re- 
ceiving the appropriate verify or reset command. 


Write Protection 

The command register is only active when Vpp is at 
high voltage. Depending upon the application, the 
system designer may choose to make the Vpp pow- 
er supply switchable — available only when memory 
updates are desired. When Vpp = Vppi_, the con- 
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Table 2. 28F010 Bus Operations 


Pins 

Vpp(f) 

A 0 

Ag 

CE# 

OE# 

WE# 

DQ 0 -DQ 7 

Operation 

READ-ONLY 

Read 

Vppl 

A o 

Ag 

VlL 

V|L 

V| H 

Data Out 

Output Disable 

VppL 

X 

X 

V|L 

V| H 

V|H 

Tri-State 

Standby 

Vppl 

X 

X 

V|H 

X 

X 

Tri-State 

Intelligent Identifier (Mfr)(2) 

VppL 

V| L 

V| D (3> 

V| L 

V|L 

V|H 

Data = 89H 

Intelligent Identifier (Device)( 2 ) 

VpPL 

V| H 

V 1d (3) 

V|L 

V|L 

V|H 

Data = B4H 

READ/WRITE 

Read 

VppH 

Ao 

Ag 

V|L 

V|L 

V|H 

Data Out( 4 ) 

Output Disable 

VppH 

X 

X 

V|L 

V| H 

V|H 

Tri-State 

Standby( 5 ) 

VppH 

X 

X 

V|H 

X 

X 

Tri-State 

Write 

VppH 

Aq 

Ag 

V|L 

V|H 

VlL 

Data ln( 6 ) 


NOTES: 

1 . Refer to DC Characteristics. When Vpp = Vpp|_ memory contents can be read but not written or erased. 

2. Manufacturer and device codes may also be accessed via a command register write sequence. Refer to Table 3. All other 
addresses low. 

3. V|d is the Intelligent Identifier high voltage. Refer to DC Characteristics. 

4. Read operations with Vpp = Vppn may access array data or the Intelligent Identifier codes. 

5. With Vpp at high voltage, the standby current equals Ice + Ipp (standby). 

6. Refer to Table 3 for valid Data-In during a write operation. 

7. X can be Vn_ or Vm- 


tents of the register default to the read command, 
making the 28F010 a read-only memory. In this 
mode, the memory contents cannot be altered. 

Or, the system designer may choose to “hardwire” 
Vpp, making the high voltage supply constantly 
available. In this case, all Command Register func- 
tions are inhibited whenever Vcc is below the write 
lockout voltage V|_ko- (See Power Up/Down Protec- 
tion) The 28F010 is designed to accommodate ei- 
ther design practice, and to encourage optimization 
of the processor-memory interface. 

The two-step program/erase write sequence to the 
Command Register provides additional software 
write protections. 

BUS OPERATIONS 

Read 

The 28F010 has two control functions, both of which 
must be logically active, to obtain data at the out- 
puts. Chip-Enable (CE#) is the power control and 
should be used for device selection. Output-Enable 
(OE#) is the output control and should be used to 
gate data from the output pins, independent of de- 
vice selection. Refer to AC read timing waveforms. 

When Vpp is high (Vppn), the read operation can be 
used to access array data, to output the Intelligent 
Identifier codes, and to access data for program/ 


erase verification. When Vpp is low (Vppi_), the read 
operation can only access the array data. 

Output Disable 

With Output-Enable at a logic-high level (Vm), output 
from the device is disabled. Output pins are placed 
in a high-impedance state. 

Standby 

With Chip-Enable at a logic-high level, the standby 
operation disables most of the 28F010’s circuitry 
and substantially reduces device power consump- 
tion. The outputs are placed in a high-impedance 
state, independent of the Output-Enable signal. 
If the 28F010 is deselected during erasure, pro- 
gramming, or program/erase verification, the 
device draws active current until the operation is 
terminated. 


Intelligent Identifier Operation 

The Intelligent Identifier operation outputs the manu- 
facturer code (89H) and device code (B4H). Pro- 
gramming equipment automatically matches the de- 
vice with its proper erase and programming algo- 
rithms. 
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used to store the command, along with address and 
data information needed to execute the command. 

The command register is written by bringing Write- 
Enable to a logic-low level (V||_), while Chip-Enable is 
low. Addresses are latched on the falling edge of 
Write-Enable, while data is latched on the rising 
edge of the Write-Enable pulse. Standard microproc- 
essor write timings are used. 

Refer to AC Write Characteristics and the Erase/ 
Programming Waveforms for specific timing 
parameters. 

COMMAND DEFINITIONS 

When low voltage is applied to the Vpp pin, the con- 
tents of the command register default to 00H, en- 
abling read-only operations. 

Placing high voltage on the Vpp pin enables read/ 
write operations. Device operations are selected by 
writing specific data patterns into the command reg- 
ister. Table 3 defines these 28F010 register 
commands. 


Table 3. Command Definitions 


Command 

Bus 

Cycles 

Req’d 

First Bus Cycle 

Second Bus Cycle 

OperationO) 

Address( 2 ) 

Data( 3 ) 

OperationO) 

Address( 2 ) 

Data( 3 ) 

Read Memory 

1 

Write 

X 

00H 




Read Intelligent Identifier 
Codes( 4 ) 

3 

Write 

X 

90H 

Read 

(4) 

(4) 

Set-up Erase/ Erased) 

2 

Write 

X 

20H 

Write 

X 

20H 

Erase Verify( 5 ) 

2 

Write 

EA 

AOH 

Read 

X 

EVD 

Set-up Program/Program( 6 ) 

2 

Write 

X 

40H 

Write 

PA 

PD 

Program Verify(6) 

2 

Write 

X 

COH 

Read 

X 

PVD 

Resets) 

2 

Write 

X 

FFH 

Write 

X 

FFH 


NOTES: 

1. Bus operations are defined in Table 2. 

2. IA = Identifier address: 00H for manufacturer code, 01 H for device code. 

EA = Address of memory location to be read during erase verify. 

PA = Address of memory location to be programmed. 

Addresses are latched on the falling edge of the Write-Enable pulse. 

3. ID = Data read from location IA during device identification (Mfr = 89H, Device = B4H). 

EVD = Data read from location EA during erase verify. 

PD = Data to be programmed at location PA. Data is latched on the rising edge of Write Enable. 

PVD = Data read from location PA during program verify. PA is latched on the Program command. 

4. Following the Read int e ligent ID command, two read operations access manufacturer and device codes. 

5. Figure 6 illustrates the Quick Erase Algorithm. 

6. Figure 5 illustrates the Quick Pulse Programming Algorithm. 

7. The second bus cycle must be followed by the desired command register write. 


With Chip-Enable and Output-Enable at a logic low 
level, raising A9 to high voltage V|q (see DC Charac- 
teristics) activates the operation. Data read from lo- 
cations 0000H and 0001 H represent the manufac- 
turer’s code and the device code, respectively. 

The manufacturer- and device-codes can also be 
read via the command register, for instances where 
the 28F010 is erased and reprogrammed in the tar- 
get system. Following a write of 90H to the com- 
mand register, a read from address location 0000H 
outputs the manufacturer code (89H). A read from 
address 0001 H outputs the device code (B4H). 

Write 

Device erasure and programming are accomplished 
via the command register, when high voltage is ap- 
plied to the Vpp pin. The contents of the register 
serve as input to the internal state-machine. The 
state-machine outputs dictate the function of the 
device. 

The command register itself does not occupy an ad- 
dressable memory location. The register is a latch 
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Read Command 

While Vpp is high, for erasure and programming, 
memory contents can be accessed via the read 
command. The read operation is initiated by writing 
00H into the command register. Microprocessor 
read cycles retrieve array data. The device remains 
enabled for reads until the command register con- 
tents are altered. 

The default contents of the register upon Vpp pow- 
er-up is 00H. This default value ensures that no spu- 
rious alteration of memory contents occurs during 
the Vpp power transition. Where the Vpp supply is 
hard-wired to the 28F010, the device powers-up and 
remains enabled for reads until the command-regis- 
ter contents are changed. Refer to the AC Read 
Characteristics and Waveforms for specific timing 
parameters. 

Intelligent Identifier Command 

Flash memories are intended for use in applications 
where the local CPU alters memory contents. As 
such, manufacturer- and device-codes must be ac- 
cessible while the device resides in the target sys- 
tem. PROM programmers typically access signature 
codes by raising A9 to a high voltage. However, mul- 
tiplexing high voltage onto address lines is not a de- 
sired system-design practice. 

The 28F010 contains an Intelligent Identifier opera- 
tion to supplement traditional PROM-programming 
methodology. The operation is initiated by writing 
90H into the command register. Following the com- 
mand write, a read cycle from address 0000H re- 
trieves the manufacturer code of 89H. A read cycle 
from address 0001 H returns the device code of 
B4H. To terminate the operation, it is necessary to 
write another valid command into the register. 

Set-up Erase/Erase Commands 

Set-up Erase is a command-only operation that 
stages the device for electrical erasure of all bytes in 
the array. The set-up erase operation is performed 
by writing 20H to the command register. 

To commence chip-erasure, the erase command 
(20H) must again be written to the register. The 
erase operation begins with the rising edge of the 
Write-Enable pulse and terminates with the rising 
edge of the next Write-Enable pulse (i.e., Erase-Veri- 
fy Command). 

This two-step sequence of set-up followed by execu- 
tion ensures that memory contents are not acciden- 
tally erased. Also, chip-erasure can only occur when 
high voltage is applied to the Vpp pin. In the absence 


of this high voltage, memory contents are protected 
against erasure. Refer to AC Erase Characteristics 
and Waveforms for specific timing parameters. 

Erase-Verify Command 

The erase command erases all bytes of the array in 
parallel. After each erase operation, all bytes must 
be verified. The erase verify operation is initiated by 
writing AOH into the command register. The address 
for the byte to be verified must be supplied as it is 
latched on the falling edge of the Write-Enable 
pulse. The register write terminates the erase opera- 
tion with the rising edge of its Write-Enable pulse. 

The 28F010 applies an internally-generated margin 
voltage to the addressed byte. Reading FFH from 
the addressed byte indicates that all bits in the byte 
are erased. 

The erase-verify command must be written to the 
command register prior to each byte verification to 
latch its address. The process continues for each 
byte in the array until a byte does not return FFH 
data, or the last address is accessed. 

In the case where the data read is not FFH, another 
erase operation is performed. (Refer to Set-up 
Erase/Erase). Verification then resumes from the 
address of the last-verified byte. Once all bytes in 
the array have been verified, the erase step is com- 
plete. The device can be programmed. At this point, 
the verify operation is terminated by writing a valid 
command (e.g. Program Set-up) to the command 
register. Figure 6, the Quick Erase algorithm, illus- 
trates how commands and bus operations are com- 
bined to perform electrical erasure of the 28F010. 
Refer to AC Erase Characteristics and Waveforms 
for specific timing parameters. 

Set-up Program/Program Commands 

Set-up program is a command-only operation that 
stages the device for byte programming. Writing 40H 
into the command register performs the set-up 
operation. 

Once the program set-up operation is performed, 
the next Write-Enable pulse causes a transition to 
an active programming operation. Addresses are in- 
ternally latched on the falling edge of the Write-En- 
able pulse. Data is internally latched on the rising 
edge of the Write-Enable pulse. The rising edge of 
Write-Enable also begins the programming opera- 
tion. The programming operation terminates with the 
next rising edge of Write-Enable, used to write the 
program-verify command. Refer to AC Programming 
Characteristics and Waveforms for specific timing 
parameters. 
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Program-Verity Command 

The 28F010 is programmed on a byte-by-byte basis. 
Byte programming may occur sequentially or at ran- 
dom. Following each programming operation, the 
byte just programmed must be verified. 

The program-verity operation is initiated by writing 
COH into the command register. The register write 
terminates the programming operation with the ris- 
ing edge of its Write-Enable pulse. The program-ver- 
ity operation stages the device for verification of the 
byte last programmed. No new address information 
is latched. 

The 28F010 applies an internally-generated margin 
voltage to the byte. A microprocessor read cycle 
outputs the data. A successful comparison between 
the programmed byte and true data means that the 
byte is successfully programmed. Programming then 
proceeds to the next desired byte location. Figure 5, 
the 28F010 Quick Pulse Programming algorithm, il- 
lustrates how commands are combined with bus op- 
erations to perform byte programming. Refer to AC 
Programming Characteristics and Waveforms for 
specific timing parameters. 

Reset Command 

A reset command is provided as a means to safely 
abort the erase- or program-command sequences. 
Following either set-up command (erase or program) 
with two consecutive writes of FFH will safely abort 
the operation. Memory contents will not be altered. 
A valid command must then be written to place the 
device in the desired state. 


EXTENDED ERASE/PROGRAM CYCLING 

EEPROM cycling failures have always concerned 
users. The high electrical field required by thin oxide 
EEPROMs for tunneling can literally tear apart the 
oxide at defect regions. To combat this, some sup- 
pliers have implemented redundancy schemes, re- 
ducing cycling failures to insignificant levels. Howev- 
er, redundancy requires that cell size be doubled — 
an expensive solution. 

Intel has designed extended cycling capability into 
its ETOX flash memory technology. Resulting im- 
provements in cycling reliability come without in- 
creasing memory cell size or complexity. First, an 
advanced tunnel oxide increases the charge carry- 
ing ability ten-fold. Second, the oxide area per cell 
subjected to the tunneling electric field is one-tenth 
that of common EEPROMs, minimizing the probabili- 
ty of oxide defects in the region. Finally, the peak 
electric field during erasure is approximately 
2 MV/cm lower than EEPROM. The lower electric 


field greatly reduces oxide stress and the probability 
of failure — increasing time to wearout by a factor of 
100,000,000. 

The 28F010 is capable or 100,000 program/erase 
cycles. The device is programmed and erased using 
Intel’s Quick Pulse Programming and Quick Erase 
algorithms. Intel’s algorithmic approach uses a se- 
ries of operations (pulses), along with byte verifica- 
tion, to completely and reliably erase and program 
the device. 

For further information, see Reliability Report RR-60. 

QUICK PULSE PROGRAMMING ALGORITHM 

The Quick Pulse Programming algorithm uses pro- 
gramming operations of 1 0 jus duration. Each opera- 
tion is followed by a byte verification to determine 
when the addressed byte has been successfully pro- 
grammed. The algorithm allows for up to 25 pro- 
gramming operations per byte, although most bytes 
verify on the first or second operation. The entire 
sequence of programming and byte verification is 
performed with Vpp at high voltage. Figure 5 illus- 
trates the Quick Pulse Programming algorithm. 

QUICK ERASE ALGORITHM 

Intel’s Quick Erase algorithm yields fast and reliable 
electrical erasure of memory contents. The algo- 
rithm employs a closed-loop flow, similar to the 
Quick Pulse Programming algorithm, to simulta- 
neously remove charge from all bits in the array. 

Erasure begins with a read of memory contents. The < 
28F010 is erased when shipped from the factory/ 
Reading FFH data from the device would immedi- 
ately be followed by device programming. 

For devices being erased and reprogrammed, uni- 
form and reliable erasure Is ensured by first pro- 
gramming all bits in the device to their charged state 
(Data = 00H). This is accomplished, using the Quick 
Pulse Programming algorithm, in approximately two 
seconds. 

Erase execution then continues with an initial erase 
operation. Erase verification (data = FFH) begins at 
address 0000H and continues through the array to 
the last address, or until data other than FFH is en- 
countered. With each erase operation, an increasing 
number of bytes verify to the erased state. Erase 
efficiency may be improved by storing the address of 
the last byte verified in a register. Following the next 
erase operation, verification starts at that stored ad- 
dress location. Erasure typically occurs in one sec- 
ond. Figure 6 illustrates the Quick Erase algorithm. 
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M (4) Start > 
(^Programming) 


Increment 

Address 


WRITE Set-up 
Program Cmd 


Write Program 
Cmd (A/D) 


Time Out 10 /as 


Write Program 
Verify Cmd 


Time Out 6 /as 


Read Data 
from Device 


Write 

Read Cmd 


Bus 

Operation 

Command 

Comments 

Standby 


Wait for Vpp Ramp to Vppn(1) 



Initialize Pulse-Count 

Write 

Set-up 

Program 

Data = 40H 

Write 

Program 

Valid Address/Data 

Standby 


Duration of Program 
Operation (t W HWHi) 

Write 

Program^) 

Verify 

Data = COH; Stops Program 
Operation^) 

Standby 


tWHGL 

Read 


Read Byte to Verify 
Programming 

Standby 


Compare Data Output to Data 
Expected 

Write 

Read 

Data = 00H, Resets the 
Register for Read Operations 

Standby 


Wait for Vpp Ramp to Vppi_(1) 


/Programming j {"SX" ) 

Completed J ' 

290207-5 

NOTES: 

1. See DC Characteristics for the value of Vppn and 
VppL- 

2. Program Verify is only performed after byte program- 
ming. A final read/compare may be performed (option- 
al) after the register is written with the Read command. 


3. Refer to principles of operation. 

4. CAUTION: The algorithm MUST BE FOLLOWED 
to ensure proper and reliable operation of the de- 
vice. 


Figure 5. 28F010 Quick Pulse Programming Algorithm 


I 


5-43 



28F010 


inte* 



VpPL* 

2. Erase Verify is performed only after chip-erasure. A 
final read/compare may be performed (optional) after 
the register is written with the read command. 


Bus 

Operation 

Command 

Comments 



Entire Memory Must = 00H 
Before Erasure 



Use Quick Pulse 
Programming Algorithm 
(Figure 5) 

Standby 


Wait for Vpp Ramp to Vp P n(1 ) 



Initialize Addresses and 
Pulse-Count 

Write 

Set-up 

Erase 

Data = 20H 

Write 

Erase 

Data = 20H 

Standby 


Duration of Erase Operation 

(tWHWH2) 

Write 

Standby 

Erased) 

Verify 

Addr = Byte to Verify; 
Data = AOH; Stops Erase 
Operation^) 
tWHGL 

Read 


Read Byte to Verify Erasure 

Standby 


Compare Output to FFH 
Increment Pulse-Count 

Write 

Read 

Data = 00H, Resets the 
Register for Read Operations 

Standby 


Wait for Vpp Ramp to Vppi_(1) 


3. Refer to principles of operation. 

4. CAUTION: The algorithm MUST BE FOLLOWED 
to ensure proper and reliable operation of the de- 
vice. 


Figure 6. 28F010 Quick Erase Algorithm 
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DESIGN CONSIDERATIONS 
Two-Line Output Control 

Flash-memories are often used in larger memory ar- 
rays. Intel provides two read-control inputs to ac- 
commodate multiple memory connections. Two-line 
control provides for: 

a. the lowest possible memory power dissipation 
and, 

b. complete assurance that output bus contention 
will not occur. 

To efficiently use these two control inputs, an ad- 
dress-decoder output should drive chip-enable, 
while the system’s read signal controls all flash- 
memories and other parallel memories. This assures 
that only enabled memory devices have active out- 
puts, while deselected devices maintain the low 
power standby condition. 

Power Supply Decoupling 

Flash-memory power-switching characteristics re- 
quire careful device decoupling. System designers 
are interested in three supply current (Ice) issues — 
standby, active, and transient current peaks pro- 
duced by falling and rising edges of chip-enable. The 
capacitive and inductive loads on the device outputs 
determine the magnitudes of these peaks. 

Two-line control and proper decoupling capacitor 
selection will suppress transient voltage peaks. 
Each device should have a 0.1 ju,F ceramic capacitor 
connected between Vqc and Vss> and between Vpp 
and Vss- 

Place the high-frequency, low-inherent-inductance 
capacitors as close as possible to the devices. Also, 
for every eight devices, a 4.7 juF electrolytic capaci- 
tor should be placed at the array’s power supply 
connection, between Vcc and Vss- The bulk capaci- 
tor will overcome voltage slumps caused by printed- 


circuit-board trace inductance, and will supply 
charge to the smaller capacitors as needed. 


Vpp Trace on Printed Circuit Boards 

Programming flash-memories, while they reside in 
the target system, requires that the printed circuit 
board designer pay attention to the Vpp power sup- 
ply trace. The Vpp pin supplies the memory cell cur- 
rent for programming. Use similar trace widths and 
layout considerations given the Vqo power bus. Ad- 
equate Vpp supply traces and decoupling will de- 
crease Vpp voltage spikes and overshoots. 


Power Up/Down Protection 

The 28F010 is designed to offer protection against 
accidental erasure or programming during power 
transitions. Upon power-up, the 28F010 is indifferent 
as to which power supply, Vpp or Vcc. powers up 
first. Power supply sequencing is not required. Inter- 
nal circuitry in the 28F010 ensures that the com- 
mand register is reset to the read mode on power 
up. 


A system designer must guard against active writes 
for Vcc voltages above V|_ko when Vpp is active. 
Since both WE# and CE# must be low for a com- 
mand write, driving either to Vih will inhibit writes. 
The control register architecture provides an added 
level of protection since alteration of memory con- 
tents only occurs after successful completion of the 
two-step command sequences. 

28F010 Power Dissipation 

When designing portable systems, designers must 
consider battery power consumption not only during 
device operation, but also for data retention during 
system idle time. Flash nonvolatility increases the 
usable battery life of your system because the 
28F010 does not consume any power to retain code 
or data when the system is off. Table 4 illustrates the 
power dissipated when updating the 28F010. 



Table 4. 28F010 Typical Update Power Dissipation^) 


Operation 

Notes 

Power Dissipation 
(Watt-Seconds) 

Array Program/Program Verify 

1 

0.171 

Array Erase/ Erase Verify 

2 

0.136 

One Complete Cycle 

3 

0.478 


NOTES: 

1 . Formula to calculate typical Program/Program Verify Power = [Vpp X 
# Bytes x typical # Prog Pulses (twHWHi x Ipp2 typical + twHGL x Ipp4 
typical)] + [Vcc x # Bytes x typical # Prog Pulses (twHWHi x Icc2 typical 
+ twHGL x Icc4 typical]. 

2 . Formula to calculate typical Erase/Erase Verify Power = [Vpp (Vpp3 typical 
x tERASE typical + Ipp5 typical x twHGL x # Bytes)] + [Vcc 0 cc 3 typical x 
tERASE typical + l C C5 typical x t WH Gi_ x * Bytes)]. 

3 . One Complete Cycle = Array Preprogram + Array Erase + Program. 

4 . “Typicals” are not guaranteed, but based on a limited number of samples 
from production lots. 
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ABSOLUTE MAXIMUM RATINGS* 

Operating Temperature 

During Read 0°C to +70°C( 1 ) 

During Erase/Program 0°Cto +70°C( 1 ) 

Operating Temperature 

During Read -40°C to + 85°C( 2 ) 

During Erase/Program -40°Cto + 85°C( 2 ) 

Temperature Under Bias - 10°C to + 80°C( 1 ) 

Temperature Under Bias -50°C to + 95°C( 2 ) 

Storage Temperature -65°C to 4- 1 25°C 

Voltage on Any Pin with 

Respect to Ground . . -2.0V to + 7.0V( 3 ) 

Voltage on Pin Ag with 

Respect to Ground -2.0V to + 13.5V( 3 > 4 ) 

Vpp Supply Voltage with 
Respect to Ground 

During Erase/Program -2.0V to + 14.0V( 3 - 4 ) 

Vqc Supply Voltage with 

Respect to Ground - 2.0V to +■ 7.0V( 3 ) 

Output Short Circuit Current 100 mA( 5 ) 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 

* WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“ Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


NOTES: 

1. Operating Temperature is for commercial product as defined by this specification. 

2. Operating Temperature is for extended temperature products as defined by this specification. 

3. Minimum DC input voltage is -0.5V. During transitions, inputs may undershoot to -2.0V for periods less 
than 20 ns. Maximum DC voltage on output pins is Vqo + 0.5V, which may overshoot to Vcc + 2.0V for 
periods less than 20 ns. 

4. Maximum DC voltage on Ag or Vpp may overshoot to + 14.0V for periods less than 20 ns. 

5. Output shorted for no more than one second. No more than one output shorted at a time. 

6. See High Speed AC Input/Output reference Waveforms and High Speed AC Testing Load Circuits for 
testing characteristics. 

7. See AC Input/Output reference Waveforms and AC Testing Load Circuits for testing characteristics. 


OPERATING CONDITIONS 


Symbol 

Parameter 

Limits 

Unit 

Min 

Max 

t a 

Operating Temperature 

0 

70 

°C 

t a 

Operating Temperature 

-40 

+ 85 

°C 

Vcc 

Vcc Supply Voltage (10%) 

4.50 

5.50 

V 

Vcc 

Vcc Supply Voltage (5%) 

4.75 

5.25 

V 


DC CHARACTERISTICS— TTL/NMOS COMPATIBLE— Commercial Products 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 

Min 

TypicaK 4 ) 

Max 

>LI 

Input Leakage Current 

1 



±1.0 

jllA 

Vcc = Vcc Max 
V|N = Vcc or Vss 

Ilo 

Output Leakage Current 

1 



±10 

jliA 

Vcc = Vcc Max 
VoilT = Vcc or Vss 

•ccs 

Vcc Standby Current 

1 


0.3 

1.0 

mA 

Vcc = Vcc Max 
CE# = V| H 

Icci 

Vcc Active Read Current 

1 


10 

30 

mA 

Vcc = Vcc Max, CE# = V|i_ 
f = 6 MHz, loUT = 0 mA 
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DC CHARACTERISTICS— TTL/NMOS COMPATIBLE— Commercial Products 

(Continued) 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 

Min 

TypicaK 4 ) 

Max 

•CC2 

Vqc Programming Current 

1,2 


1.0 

10 

mA 

Programming in Progress 

>CC3 

Vqc Erase Current 

1,2 


5.0 

15 

mA 

Erasure in Progress 

>CC4 

Vqc Program Verify Current 

1,2 


5.0 

15 

mA 

Vpp = VppH, Program 
Verify in Progress 

ICC5 

Vqc Erase Verify Current 

1,2 


5.0 

15 

mA 

Vpp = Vppn, Erase 
Verify in Progress 

Ipps 

Vpp Leakage Current 

1 



±10 

juA 

o 

o 

> 

VI 

Q. 

Q_ 

> 

Ippi 

VppRead Current 
or Standby Current 

1 


90 

200 

juA 

< 

“O 

“O 

V 

< 

o 

o 


±10.0 

Vpp ^ Vqq 

lpP2 

Vpp Programming Current 

1,2 


8.0 

30 

mA 

Vpp = VppH 

Programming in Progress 

•PP3 

Vpp Erase Current 

1,2 


6.0 

30 

mA 

Vpp = VppH 
Erasure in Progress 

lpP4 

Vpp Program Verify Current 

1,2 


2.0 

5.0 

mA 

Vpp = VppH, Program ' 
Verify in Progress 

lpP5 

Vpp Erase Verify Current 

1,2 


2.0 

5.0 

mA 

Vpp = VppH, Erase 
Verify in Progress 

V| L 

Input Low Voltage 


-0.5 


0.8 

V 


V|H 

Input High Voltage 


2.0 


Vqq + 0.5 

V 


VOL 

Output Low Voltage 




0.45 

V 

Iol = 5.8 mA 
V CC = V CC Min 

VoHI 

Output High Voltage 


2.4 



V 

Ioh = — 2.5 mA 
V CC = V CC Min 

V|D 

Ag Intelligent Identifer Voltage 


11.50 


13.00 

V 


l|D 

Ag Intelligent Identifier Current 

1,2 


90 

200 

jllA 

Ag = V| D 

VpPL 

Vpp during Read-Only 
Operations 


0.00 


6.5 

V 

NOTE: Erase/Program are 
Inhibited when Vpp = Vpp[_ 

VpPH 

Vpp during Read/Write 
Operations 


11.40 


12.60 

V 


Vl_KO 

Vqq Erase/Write Lock Voltage 


2.5 



V 



DC CHARACTERISTICS— CMOS COMPATIBLE— Commercial Products 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 

Min 

TypicaK 4 ) 

Max 

Ili 

Input Leakage Current 

1 



±1.0 

juA 

Vqq = Vqq Max 
V|N = Vqq or Vqs 

Ilo 

Output Leakage Current 

1 



±10 

juA 

V CC = V CC Max 
VoUT = Vqc or Vss 

•ccs 

Vqq Standby Current 

1 


50 

100 

juA 

Vqc = Vqq Max 
CE# = Vqq ±0.2V 

•cci 

Vqq Active Read Current 

1 


10 

30 

mA 

Vqq = Vqc Max, CE# = V|l 
f = 6 MHz, l 0 UT = 0mA 
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DC CHARACTERISTICS— CMOS COMPATIBLE— Commerci 


ial Products (Continued) 


Symbol 

Parameter 


Limits 

Unit 

Test Conditions 


Min 

Typical! 4 ) 

Max 

•CC2 

Vcc Programming Current 

1,2 


1.0 

10 

mA 

Programming in Progress 

•<X3 

Vcc Erase Current 

1,2 


5.0 

15 

mA 

Erasure in Progress 

•CC4 

Vcc Program Verify Current 

1,2 


5.0 

15 

mA 

Vpp = VppH, Program 
Verify in Progress 

•CC5 

Vcc Erase Verify Current 

*1,2 


5.0 

15 

mA 

Vpp = Vppn, Erase 
Verify in Progress 

•pps 

Vpp Leakage Current 

1 



±10 

pA 

Vpp ^ Vcc 

IPPI 

Vpp Read Current, ID 
Current or Standby Current 

1 


90 

200 

JbL A 

Vpp > Vcc 


±10 

Vpp ^ Vcc 

lpP2 

Vpp Programming 
Current 

1,2 


8.0 

30 

mA 

Vpp = VppH 
Programming in Progress 

■PP3 

Vpp Erase Current 

1,2 


6.0 

30 

mA 

Vpp = VppH 
Erasure in Progress 

IPP4 

Vpp Program Verify 
Current 

1,2 


2.0 

5.0 

mA 

Vpp = VppH, Program 
Verify in Progress 

•PP5 

Vpp Erase Verify 
Current 

1,2 


2.0 

5.0 

mA 

Vpp = VppH, Erase 
Verify in Progress 

V|L 

Input Low Voltage 


-0.5 


0.8 

V 


V|H 

Input High Voltage 


0.7 V CC 


V C c + 0.5 

V 


VOL 

Output Low Voltage 




0.45 

V 

Iol = 5.8 mA 
Vcc = Vcc Min 

VoHI 

Output High Voltage 


0.85 V CC 



V 

Iqh = “2.5 mA, Vcc = Vcc Min 

VoH2 

< 

o 

o 

1 

o 

•OH = -100 /xA, Vcc = Vcc Min 

V|D 

Ag Intelligent Identifer 
Voltage 


11.50 


13.00 

V 


•id 

Ag Intelligent Identifier 
Current 

1,2 


90 

200 

fxA 

> 

CO 

II 

< 

D 

VppL 

Vpp during Read-Only 
Operations 


0.00 


6.5 

V 

NOTE: Erase/Programs are 
Inhibited when Vpp = VppL 

VPPH 

Vpp during Read/Write 
Operations 


11.40 


12.60 

V 


Vlko 

Vcc Erase/Write Lock 
Voltage 


2.5 



V 
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DC CHARACTERISTICS— TTL/NMOS COMPATIBLE— Extended Temperature 
Products 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 

Min 

TypicaK 4 ) 

Max 

Ili 

Input Leakage Current 

1 



±1.0 

JU.A 

v cc = v cc Max 
V|n = Vcc or Vss 

Ilo 

Output Leakage Current 

1 



±10 

]mA 

Vcc = Vcc Max 
VoUT = Vcc or Vss 

ices 

Vcc Standby Current 

1 


0.3 

1.0 

mA 

Vcc = Vcc Max 
CE# = V| H 

Icci 

Vcc Active Read Current 

1 


10 

30 

mA 

Vcc = v cc Max, CE# = V||_ 
f = 6 MHz, Iqut = 0 mA 

•CC2 

Vcc Programming Current 

1,2 


1.0 

30 

mA 

Programming in Progress 

ICC3 

Vcc Erase Current 

1,2 


5.0 

30 

mA 

Erasure in Progress 

ICC4 

Vcc Program Verify Current 

1,2 


5.0 

30 

mA 

Vpp = VppH, Program 
Verify in Progress 

>CC5 

Vcc Erase Verify Current 

1,2 


5.0 

30 

mA 

Vpp = VppH, Erase 
Verify in Progress 

•pps 

Vpp Leakage Current 

1 



±10 

fJL A 

o 

o 

> 

VI 

CL 

CL 

> 

•PPI 

Vpp Read Current 
or Standby Current 

1 


90 

200 

jiiA 

Vpp > Vcc 


±10.0 

Vpp ^ Vcc 

lpP2 

Vpp Programming Current 

1,2 


8.0 

30 

mA 

Vpp = VppH 

Programming in Progress 


Vpp Erase Current 

U 


6.0 


mA 

Vpp = VppH 
Erasure in Progress 

Qjim 

Vpp Program Verify Current 

H 



5.0 

mA 

Vpp = VppH, Program 
Verify in Progress 

■PP5 

Vpp Erase Verify Current 




5.0 

mA 

Vpp = VppH, Erase 
Verify in Progress 

V|L 

Input Low Voltage 




0.8 

V 


V|H 

Input High Voltage 




V C c + 0.5 

V 


V 0 L 

Output Low Voltage 

■ 



0.45 

V 

Iql = 5.8 mA 
Vcc = v cc Min 

v OH1 

Output High Voltage 





V 

Iqh = “2.5 mA 
Vcc = v cc Min 

091 

Ag Intelligent Identifer Voltage 





V 


mm 

Ag Intelligent Identifier Current 



90 

500 


> 

CO 

II 

< 

D 

VppL 

Vpp during Read-Only 
Operations 


0.00 


6.5 

V 

NOTE: Erase/ Program are 
Inhibited when Vpp = Vppi_ 

VppH 

Vpp during Read/Write 
Operations 


11.40 


12.60 

V 


v LKO 

Vcc Erase/Write Lock Voltage 


2.5 



V 
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DC CHARACTERISTICS— CMOS COMPATIBLE— Extended Temperature 
Products 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 

Min 

TypicaK 4 ) 

Max 

'Ll 

Input Leakage 
Current 

1 



±1.0 

julA 

Vcc = Vcc Max 

V|N = Vcc or V SS 

•lO 

Output Leakage 
Current 

1 



±10 

jiaA 

v cc = v cc Max 
VoilT = v cc or V SS 


Vcc Standby 
Current 

■ 






Icci 

Vcc Active Read 
Current 

■ 


m 


mA 



Vcc Programming 
Current 

IB 



10 

mA 

Programming in Progress 


Vcc Erase Current 

mm 


5.0 

30 

mA 

Erasure in Progress 


Vcc Program Verify 
Current 

IH 



30 

mA 

Vpp = VppH, Program 
Verify in Progress 

ICC5 

Vcc Erase Verify 
Current 







Ipps 

Vpp Leakage Current 

1 



±10 

juA 

o 

>° 

VI 

Q. 

CL 

> 

Ippi 

Vpp Read Current, 
ID Current or 
Standby Current 

1 


90 

200 

fiA 

Vpp > Vcc 


±10 

Vpp ^ Vcc 

lpP2 

Vpp Programming 
Current 

1,2 


8.0 

30 

mA 

Vpp = VppH 
Programming in Progress 


Vpp Erase Current 



6.0 

30 

mA 

Vpp = VppH 
Erasure in Progress 


Vpp Program Verify 
Current 





mA 

Vpp = VppH, Program 
Verify in Progress 


Vpp Erase Verify 
Current 

1,2 




mA 

Vpp = VppH, Erase 
Verify in Progress 

V|L 

Input Low Voltage 


-0.5 


0.8 



V|H 

Input High Voltage 


0.7 V CC 





VoL 

Output Low Voltage 







VOHI 

Output High Voltage 


0.85 V CC 



V 

Iqh = ~2.5 mA, 
Vcc ~ Vcc Min 

V OH2 

V CC - 0.4 

Iqh == ~ 100 jllA, 
v cc = Vcc M |n 

V ID 

Ag Intelligent Identifer 
Voltage 


11.50 





l|D 

Ag Intelligent Identifier 
Current 

1,2 


90 

500 

jllA 

Ag = V| D 
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DC CHARACTERISTICS— CMOS COMPATIBLE— Extended Temperature 
Products (Continued) 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 

Min 

TypicaK 4 ) 

Max 

VppL 

Vpp during Read-Only 
Operations 


0.00 


6.5 

V 

NOTE: Erase/Programs are 
Inhibited when Vpp = Vpp[_ 

VppH 

Vpp during Read/Write 
Operations 


11.40 


12.60 

V 


V|_KO 

Vqc Erase/Write Lock 
Voltage 


2.5 



V 



CAPACITANCE T A = 25°C, f = 1.0 MHz 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Conditions 

Min 

Max 

C|N 

Address/Control Capacitance 

3 


8 

PF 

> 

o 

II 

z 

> 

Gout 

Output Capacitance 

3 


12 

pF 

VquT = 


NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vqc = 5.0V, Vpp = 12.0V, T = 25°C. These currents 
are valid for all product versions (packages and speeds). 

2. Not 100% tested: characterization data available. 

3. Sampled, not 100% tested. 

4. “Typicals” are not guaranteed, but based on a limited number of samples from production lots. 
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AC TESTING INPUT/OUTPUT 
WAVEFORMd) 


INPUT X o1> POINTS < Xo.8 ° UTPU T 

290207-7 

AC test inputs are driven at Vqh (2.4 V-fj|_) for a Logic 
“1” and Vql (0-45 Vttl) for a Logic “0”. Input timing 
begins at V|h (2.0 VjjlJ and Vil (0.8 Vttl)- Output tim- 
ing ends at V|h and V|l_. Input rise and fall times (10% 
to 90%) <10 ns. 


HIGH SPEED AC TESTING INPUT/OUTPUT 
WAVEFORMS) 


3.0- 

0.0- 


INPUT 




- TEST POINTS - 

U r — 




5 OUTPUT 


290207-8 


AC test inputs are driven at 3.0V for a Logic “1” and 
0.0V for a Logic “0”. Input timing begins, and output 
timing ends, at 1.5V. Input rise and fall times (10% to 
90%) <10 ns. 


AC TESTING LOAD CIRCUITS) 



AC TEST CONDITIONED 

Input Rise and Fall Times (10% to 90%) 10 ns 


Input Pulse Levels 0.45V and 2.4V 

Input Timing Reference Level 0.8V and 2.0V 

Output Timing Reference Level 0.8V and 2.0V 

Capacitive Load 1 00 pF 

NOTES: 


HIGH SPEED AC TESTING LOAD CIRCUIT^) 



HIGH-SPEED AC TEST CONDITIONS^) 

Input Rise and Fall Times (10% to 90%) 10 ns 


Input Pulse Levels 0.0V and 3.0V 

Input Timing Reference Level 1 .5V 

Output Timing Reference Level — 1 .5V 

Capacitive Load 30 pF 


1. Testing characteristics for 28F010-65 in standard configuration, and 28F010-90, 28F010-120, and 28F010-150. 

2. Testing characteristics for 28F010-65 in high speed configuration. 
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Versions 

V CC ± 5% 

28F01 0-65( 4 ) 





Unit 

V CC ± io% 


28F010-65<5> 

28F010-90<5) 

28F010-120<5) 

28F010-150(S) 

Symbol 

Characteristic 

Notes 

Min 

Max 

Min 

Max 

Min 

Max 

Min 

Max 

Min 

Max 

tAVAV/tRC 

Read Cycle Time 


65 


70 


90 


120 


150 


ns 

tELQV/tCE 

Chip Enable Access Time 



65 


70 


90 


120 


150 

ns 

*AVQv/tACC 

Address Access Time 



65 


70 


90 


120 


150 

ns 

tGLQV/tOE 

Output Enable Access Time 



25 


28 


35 


50 


55 

ns 

tELQX/tLZ 

Chip Enable to Low Z 

2,3 

0 


0 








ns 

tEHQZ 

Chip Disable to Output 
in High Z 

2 


35 


40 


45 


55 


55 

ns 

tGLQX/tOLZ 

Output Enable to Output 
in Low Z 

2,3 

0 


0 



0 





ns 

tGHQZ/tDF 

Output Disable to Output 
in High Z 

2 


30 


30 


30 


30 


35 

ns 

tOH 

Output Hold from Address, 
CE#, orOE# Change 

1,2 

0 


0 



0 





ns 

tWHGL 

Write Recovery Time 
before Read 


6 


6 



6 


6 


6 

ILS 


NOTES: 

1 . Whichever occurs first. 

2. Sampled, not 100% tested. 

3. Guaranteed by design. 

4. See High Speed AC Input/Output reference Waveforms and High Speed AC Testing Load Circuits for testing characteristics. 

5. See AC Input/Output reference Waveforms and AC Testing Load Circuits for testing characteristics. 


~n 

o 


cn 


AC CHARACTERISTICS — Read Only Operations — Commercial and Extended 
Temperature Products 



Figure 7. AC Waveforms for Read Operations 
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Versions 

V CC ± 5% 

28F010-65(4) 





Unit 

v cc ± io% 


28F0 10-65( 5 ) 

28F0 10-90(5) 

28F010-120(5) 

28F010-150(5) 

Symbol 

Characteristic 

Notes 

Min Max 

Min Max 

Min Max 

Min Max 

Min Max 

tAVAV/twe 

Write Cycle Time 


65 


70 


90 


120 


150 


ns 

tAVWL/tAS 

Address Set-Up Time 


0 


0 


, 0 


0 


0 


ns 

tWLAx/tAH 

Address Hold Time 


40 


40 


40 


40 


40 


ns 

6 





55 






tDVWH/tDS 

Data Set-Up Time 


40 


40 


40 


40 


40 


ns 

6 





55 






tWHDX/tDH 

Data Hold Time 


10 


10 


10 


10 


10 


ns 

tWHGL 

Write Recovery Time 
before Read 


6 


6 


6 


6 


6 


[IS 

tGHWL 

Read Recovery Time 
before Write 

2 

0 


0 


0 


0 


0 


ns 

tELWL/tcS 

Chip Enable Set-Up Time 
before Write 


15 


15 


15 


15 


15 


ns 

tWHEH /l CH 

Chip Enable Hold Time 


0 


0 


0 


0 


0 


ns 

tWLWH/twP 

Write Pulse Width 


40 


40 


40 


60 


60 


ns 

6 





55 






tWHWI_/tWPH 

Write Pulse Width High 


20 


20 


20 


20 


20 


ns 

tWHWHI 

Duration of Programming 
Operation 

3 

10 


10 


10 


10 


10 


JlS 

tWHWH2 

Duration of Erase 
Operation 

3 

9.5 


9.5 


9.5 


9.5 


9.5 


ms 

tVPEL 

Vpp Set-Up Time to 
Chip Enable Low 

2 

1 


1 


1 


1 


1 


jllS 


NOTES: 

1. Read timing characteristics during read/write operations are the same as during read-only operations. Refer to AC Characteristics for Read-Only Operations. 

2. Guaranteed by design. 

3. The integrated stop timer terminates the programming/erase operations, thus eliminating the need for a maximum specification. 

4. See High Speed AC Input/Output reference Waveforms and High Speed AC Testing Load Circuits for testing characteristics. 

5. See AC Input/Output reference Waveforms and AC Testing Load Circuits for testing characteristics. 

6. Minimum specification for Extended Temperature product. 



o 
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AC CHARACTERISTICS— Write/Erase/Program Only Operations^) — 
Commercial and Extended Temperature Products 



28F010 


iny 



Figure 9. Typical Program Time at 12V 
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0.5 0.7 1 2 3 4 5 6 7 8 9 10 20 30 

CHIP ERASE TIME (SEC) 

1 2V ; 1 0 kc ; 23C 

....... 11.4V; 10 kc;0C 

...... 12V; 100 kc ; 23C 
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Figure 10. Typical Erase Capability 



Figure 11. Typical Erase Time at 12V 
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Figure 12. AC Waveforms for Programming Operations 
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Figure 13. AC Waveforms for Erase Operations 
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Versions 

. 

Vcc ± 5% 

28F010-65(2,4) 





Unit 

v cc ± 10% 


28F010-65<5) 

28F0 10-90(5) 

28F01 0-1 20( 5 ) 

28F010-150<5) 

ESB 

Characteristic 

Notes 

Min Max 

Min Max 

Min Max 

Min Max 

Min Max 

mm 



65 


70 


90 




150 



mm 



0 


0 


0 


0 


0 



B 





45 


45 


55 


55 


Q 

6 





60 







Data Set-Up Time 


35 




35 


45 


45 


Q 

6 





50 






%HDX 

Data Hold Time 


10 


10 


10 


10 


10 


■g 

tEHGL 

Write Recovery Time 
before Read 


6 










M’S 

tGHWL 

Read Recovery Time 
before Write 

2 

0 


0 




0 




H 

tWLEL 

Write Enable Set-Up Time 
before Chip Enable 


0 


0 




0 





tEHWH 

Write Enable Hold Time 


0 


0 


0 


0 


0 



tELEH 

Write Pulse Width 


45 


45 


45 


70 


70 


a 

6 





60 






tEHEL 

Write Pulse Width High 


20 


20 


20 


ipmi 


20 


El 

tEHEHl 

Duration of Programming 
Operation 

3 

10 






B 





tEHEH2 

Duration of Erase 
Operation 

3 

9.5 


9.5 


9.5 


9.5 


9.5 


ms 

tVPEL 

Vpp Set-Up Time to Chip 
Enable Low 

-2 

1 


1 


1 


1 


1 


JllS 


NOTE: 

1. Read timing characteristics during read/write operations are the same as during read-only operations. Refer to AC Characteristics for Read-Only Operations. 

2. Guaranteed by design. 

3. The integrated stop timer terminates the programming/erase operations, thus eliminating the need for a maximum specification. 

4. See High Speed AC Input/Output reference Waveforms and High Speed AC Testing Load Circuits for testing characteristics. 

5. See AC Input/Output reference Waveforms and AC Testing Load Circuits for testing characteristics. 

6. Minimum specification for Extended Temperature product. 
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ERASE AND PROGRAMMING PERFORMANCE 


Parameter 

Notes 

Min 

Typical 

Max 

Unit 

Chip Erase Time 

1,3,4 


2 

30 

Sec 


1,2,4 


4 

25 

Sec 


NOTES: 

1. “Typicals” are not guaranteed, but based on samples from production lots. Data taken at 25°C, 12.0V Vpp. 

2. Minimum byte programming time excluding system overhead is 16 /isec (10 fisec program + 6 fisec write recovery), 
while maximum is 400 jasec/byte (16 jusec x 25 loops allowed by algorithm). Max chip programming time is specified lower 
than the worst case allowed by the programming algorithm since most bytes program significantly faster than the worst case 
byte. 

3. Excludes 00H programming prior to erasure. 

4. Excludes system level overhead. 
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Figure 14. Alternate AC Waveforms for Programming Operations 
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ORDERING INFORMATION 


Mi 

2 8 

I 

I 



: 

i 

z 

3 


rt 


TEMPERATURE 

T = EXTENDED (-40°C to +85°C) 
BLANK = COMMERCIAL (0°C to +70°C) 


PACKAGE 

P = 32-PIN PLASTIC DIP 
N = 32-LEAD PLCC 
E = STANDARD 32-LEAD TSOP 
F = REVERSE 32-LEAD TSOP 


C 


ACCESS SPEED (ns) 
120 ns 
150 ns 


VALID COMBINATIONS: 

P28F010-65 N28F010-65 

P28F010-90 N28F010-90 

P28F01 0-1 20 N28F01 0-1 20 

P28F010-150 N28F010-150 


TN28F010-90 


E28F010-65 

E28F010-90 

E28F010-120 

E28F010-150 


F28F010-65 

F28F010-90 

F28F010-120 

F28F010-150 


TE28F010-90 

TF28F010-90 


ADDBTDQNAL BWFORMATSON 

Order 

Number 

ER-20, 

“ETOX Flash Memory 
Technology” 

294005 

ER-24, 

‘‘Intel Flash Memory” 

294008 

ER-28, 

“ETOX III Flash Memory 
Technology” 

294012 

RR-60, 

“ETOX Flash Memory 
Reliability Data Summary” 

293002 

AP-316, 

“Using Flash Memory for 
In-System 
Reprogrammable 
Nonvolatile Storage” 

292046 

AP-325 

“Guide to Flash Memory 
Reprogramming” 

292059 


REVISION HISTORY 


Number 

Description 

007 

Removed 200 ns Speed Bin 

Revised Erase Maximum Pulse Count for Figure 5 from 3000 to 1000 
Clarified AC and DC Test Conditions 
Added “dimple” to FTSOP Package 
Corrected Serpentine Layout 

008 

Corrected AC Waveforms 

Added Extended Temperature Options 

009 

Added 28F010-65 and 28F010-90 speeds 
Revised Symbols, i.e., CE, OE, etc. to CE#, OE#, etc. 




intj 

28F512 

512K (64K x 8) CMOS FLASH MEMORY 


■ Flash Electrical Chip-Erase 

1 Second Typical Chip-Erase 

■ Quick-Pulse Programming Algorithm 
— 10 juts Typical Byte-Program 

— 1 Second Chip-Program 

■ 100,000 Erase/Program Cycles 

■ 12.0V ±5% V PP 

■ High-Performance Read 

— 120 ns Maximum Access Time 

■ CMOS Low Power Consumption 
— 10 mA Typical Active Current 

— 50 jtxA Typical Standby Current 

— 0W Data Retention Power 

■ Integrated Program/Erase Stop Timers 


■ Command Register Architecture for 
Microprocessor/Microcontroller 
Compatible Write Interface 

■ Noise Immunity Features 

— ± 10% Vqc Tolerance 

— Maximum Latch-Up Immunity 
through EPI Processing 

■ ETOX II Nonvolatile Flash Technology 
— EPROM-Compatible Process Base 
— High-Volume Manufacturing 

Experience 

■ JEDEC-Standard Pinouts 

— 32-Pin Plastic Dip 
-32-Lead PLCC 

(See Packaging Spec., Order #231369) 

■ Extended Temperature Options 


Intel’s 28F512 CMOS flash memory offers the most cost-effective and reliable alternative for read/write 
random access nonvolatile memory. The 28F512 adds electrical chip-erasure and reprogramming to familiar 
EPROM technology. Memory contents can be rewritten: in a test socket; in a PROM-programmer socket; on- 
board during subassembly test; in-system during final test; and in-system after-sale. The 28F512 increases 
memory flexibility, while contributing to time- and cost-savings. 


The 28F512 is a 512-kilobit nonvolatile memory organized as 65,536 bytes of 8 bits. Intel’s 28F512 is offered 
in 32-pin plastic dip or 32-lead PLCC packages. Pin assignments conform to JEDEC standards for byte-wide 
EPROMs. 

Extended erase and program cycling capability is designed into Intel’s ETOX II (EPROM Tunnel Oxide) pro- 
cess technology. Advanced oxide processing, an optimized tunneling structure, and lower electric field com- 
bine to extend reliable cycling beyond that of traditional EEPROMs. With the 12.0V Vpp supply, the 28F512 
performs 100,000 erase and program cycles well within the time limits of the Quick-Pulse Programming and 
Quick-Erase algorithms. 

Intel’s 28F512 employs advanced CMOS circuitry for systems requiring high-performance access speeds, low 
power consumption, and immunity to noise. Its 120 nanosecond access time provides no-WAIT-state perform- 
ance for a wide range of microprocessors and microcontrollers. Maximum standby current of 100 ju,A trans- 
lates into power savings when the device is deselected. Finally, the highest degree of latch-up protection is 
achieved through Intel’s unique EPI processing. Prevention of latch-up is provided for stresses up to 100 mA 
on address and data pins, from - 1 V to Vcc + 1 V. 

With Intel’s ETOX II process base, the 28F512 levers years of EPROM experience to yield the highest levels of 
quality, reliability, and cost-effectiveness. 
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Figure 1. 28F512 Block Diagram 
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Figure 2. 28F512 Pin Configurations 
Table 1. Pin Description 




WRITE ENABLE: Controls writes to the control register and the array. 
Write enable is active low. Addresses are latched on the falling edge 
and data is latched on the rising edge of the WE# pulse. 

Note: With Vpp ^ 6.5V, memory contents cannot be altered. 

ERASE/PROGRAM POWER SUPPLY for writing the command 
register, erasing the entire array, or programming bytes in the array. 

DEVICE POWER SUPPLY (5V ± 1 0%) . 

GROUND 

NO INTERNAL CONNECTION to device. Pin may be driven or left 
floating. 
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APPLICATIONS 

The 28F512 flash memory provides nonvolatility 
along with the capability to perform over 100,000 
electrical chip-erasure/reprogram cycles. These fea- 
tures make the 28F512 an innovative alternative to 
disk, EEPROM, and battery-backed static RAM. 
Where periodic updates of code and data-tables are 
required, the 28F512’s reprogrammability and non- 
volatility make it the obvious and ideal replacement 
for EPROM. 

Primary applications and operating systems stored 
in flash eliminate the slow disk-to-DRAM download 
process. This results in dramatic enhancement of 
performance and substantial reduction of power 
consumption — a consideration particularly impor- 
tant in portable equipment. Flash memory increases 
flexibility with electrical chip erasure and in-system 
update capability of operating systems and applica- 
tion code. With updatable BIOS, system manufactur- 
ers can easily accommodate last-minute changes as 
revisions are made. 

In diskless workstations and terminals, network traf- 
fic reduces to a minimum and systems are instant- 
on. Reliability exceeds that of electromechanical 
media. Often in these environments, power interrup- 
tions force extended re-boot periods for all net- 
worked terminals. This mishap is no longer an issue 
if boot code, operating systems, communication pro- 
tocols and primary applications are flash-resident in 
each terminal. 

For embedded systems that rely on dynamic RAM/ 
disk for main system memory or nonvolatile backup 
storage, the 28F512 flash memory offers a solid 
state alternative in a minimal form factor. The 
28F512 provides higher performance, lower power 
consumption, instant-on capability, and allows an 
“execute in place” memory hierarchy for code and 
data table reading. Additionally, the flash memory is 
more rugged and reliable in harsh environments 
where extreme temperatures and shock can cause 
disk-based systems to fail. 

The need for code updates pervades all phases of a 
system’s life — from prototyping to system manufac- 
ture to after-sale service. The electrical chip-erasure 
and reprogramming ability of the 28F512 allows in- 


circuit alterability; this eliminates unnecessary han- 
dling and less-reliable socketed connections, while 
adding greater test, manufacture, and update flexi- 
bility. 

Material and labor costs associated with code 
changes increases at higher levels of system inte- 
gration — the most costly being code updates after 
sale. Code “bugs”, or the desire to augment system 
functionality, prompt after-sale code updates. Field 
revisions to EPROM-based code requires the re- 
moval of EPROM components or entire boards. With 
the 28F512, code updates are implemented locally 
via an edge-connector, or remotely over a commun- 
cation link. 

For systems currently using a high-density static 
RAM/battery configuration for data accumulation, 
flash memory’s inherent nonvolatility eliminates the 
need for battery backup. The concern for battery 
failure no longer exists, an important consideration 
for portable equipment and medical instruments, 
both requiring continuous performance. In addition, 
flash memory offers a considerable cost advantage 
over static RAM. 

Flash memory’s electrical chip erasure, byte pro- 
grammability and complete nonvolatility fit well with 
data accumulation and recording needs. Electrical 
chip-erasure gives the designer a “blank slate” in 
which to log or record data. Data can be periodically 
off-loaded for analysis and the flash memory erased 
producing a new “blank slate”. 

A high degree of on-chip feature integration simpli- 
fies memory-to-processor interfacing. Figure 3 de- 
picts two 28F512S tied to the 80C186 system bus. 
The 28F512’s architecture minimizes interface cir- 
cuitry needed for complete in-circuit updates of 
memory contents. 

With cost-effective in-system reprogramming, ex- 
tended cycling capability, and true nonvolatility, 
the 28F512 offers advantages to the alternatives: 
EPROMs, EEPROMs, battery backed static RAM, 
or disk. EPROM-compatible read specifications, 
straight-forward interfacing, and in-circuit alterability 
offers designers unlimited flexibility to meet the high 
standards of today’s designs. 
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Figure 3. 28F512 in a 80C186 System 


PRINCIPLES OF OPERATION 

Flash-memory augments EPROM functionality with 
in-circuit electrical erasure and reprogramming. The 
28F512 introduces a command register to manage 
this new functionality. The command register allows 
for: 100% TTL-level control inputs; fixed power sup- 
plies during erasure and programming; and maxi- 
mum EPROM compatibility. 

In the absence of high voltage on the Vpp pin, the 
28F512 is a read-only memory. Manipulation of the 
external memory-control pins yields the standard 
EPROM read, standby, output disable, and Intelli- 
gent Identifier operations. 

The same EPROM read, standby, and output disable 
operations are available when high voltage is ap- 
plied to the Vpp pin. In addition, high voltage on Vpp 
enables erasure and programming of the device. All 
functions associated with altering memory con- 
tents— Intelligent Identifier, erase, erase verify, pro- 
gram, and program verify — are accessed via the 
command register. 

Commands are written to the register using standard 
microprocessor write timings. Register contents 
serve as input to an internal state-machine which 
controls the erase and programming circuitry. Write 
cycles also . internally latch addresses and data 
needed for programming or erase operations. With 
the appropriate command written to the register, 


standard microprocessor read timings output array 
data, access the Intelligent Identifier codes, or out- 
put data for erase and program verification. 


Integrated Stop Timer 

Successive command write cycles define the dura- 
tion of program and erase operations; specifically, 
the program or erase time durations are normally 
terminated by associated program or erase verify 
commands. An integrated stop timer provides simpli- 
fied timing control over these operations; thus elimi- 
nating the need for /maximum program/erase timing 
specifications. Programming and erase pulse 
durations are minimums only. When the stop timer 
terminates a program or erase operation, the device 
enters an inactive state and remains inactive until 
receiving the appropriate verify or reset command. 


Write Protection 

The command register is only active when Vpp is at 
high voltage. Depending upon the application, the 
system designer may choose to make the Vpp pow- 
er supply switchable — available only when memory 
updates are desired. When Vpp = Vpp|_, the con- 
tents of the register default to the read command, 
making the 28F512 a read-only memory. In this 
mode, the memory contents cannot be altered. 
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Table 2. 28F512 Bus Operations 


Pins 

Vpp("l) 

Ao 

Ag 

CE# 

OE# 

WE# 

DQ()-DQ7 

Operation 

READ-ONLY 

Read 

VppL 

Ao 

Ag 

VlL 

V| L 

V|H 

Data Out 

Output Disable 

VppL 

X 

X 

V|L 

V| H 

V| H 

Tri-State 

Standby 



X 

VlH 

X 

X 

Tri-State 

Intelligent Identifier (Mfr)(2) 

Vrpl 

V| L 

V, D (3) 

VlL 

V|L 

V|H 

Data = 89H 

Intelligent Identifier (Device)( 2 ) 

Vrrl 

V|H 

V| D (3) 

VlL 

V| L 

V|H 

Data = B8H 

READ/WRITE 

Read 

VppH 

Ao 

Ag 

VlL 

V|L 

V|H 

Data Out( 4 ) 

Output Disable 

V PPH 

X 

X 

VlL 

V| H 

V|H 

Tri-State 

Standby( 5 ) 

V PPH 

X 

X 

V| H 

X 

X 

Tri-State 

Write 

V PPH 

Ao 

Ag 

V|L 

V|H 

V|L 

Data ln( 6 ) 


NOTES: 

1. Refer to DC Characteristics. When Vpp = Vpp|_ memory contents can be read but not written or erased. 

2. Manufacturer and device codes may also be accessed via a command register write sequence. Refer to Table 3. All other 
addresses low. 

3. V|d is the Intelligent Identifier high voltage. Refer to DC Characteristics. 

4. Read operations with Vpp = Vppn may access array data or the Intelligent Identifier codes. 

5. With Vpp at high voltage, the standby current equals Ice + Ipp (standby). 

6. Refer to Table 3 for valid Data-In during a write operation. 

7. X can be V||_ or Vm- 


Or, the system designer may choose to “hardwire” 
Vpp, making the high voltage supply constantly 
available. In this case, all Command Register func- 
tions are inhibited whenever Vcc is below the write 
lockout voltage Vlko- (See Power Up/Down Protec- 
tion). The 28F512 is designed to accommodate ei- 
ther design practice, and to encourage optimization 
of the processor-memory interface. 

The two-step program/erase write sequence to the 
Command Register provides additional software 
write protection. 

BUS OPERATIONS 

Read 

The 28F512 has two control functions, both of which 
must be logically active, to obtain data at the out- 
puts. Chip-Enable (CE#) is the power control and 
should be used for device selection. Output-Enable 
(OE#) is the output control and should be used 
to gate data from the output pins, independent of 
device selection. Refer to AC read timing 
waveforms. 

When Vpp is high (Vppn), the read operation can be 
used to access array data, to output the Intelligent 
Identifier codes, and to access data for program/ 
erase verification. When Vpp is low (VppO, the read 
operation can only access the array data. 


Output Disable 

With Output-Enable at a logic-high level (Vm), output 
from the device is disabled. Output pins are placed 
in a high-impedance state. 

Standby 

With Chip-Enable at a logic-high level, the standby 
operation disables most of the 28F512’s circuitry 
and substantially reduces device power consump- 
tion. The outputs are placed in a high-impedance 
state, independent of the Output-Enable signal. 
If the 28F512 is deselected during erasure, pro- 
gramming, or program/erase verification, the 
device draws active current until the operation is 
terminated. 

Intelligent Identifier Operation 

The Intelligent Identifier operation outputs the manu- 
facturer code (89H) and device code (B8H). Pro- 
gramming equipment automatically matches the de- 
vice with its proper erase and programming algo- 
rithms. 
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With Chip-Enable and Output-Enable at a logic low 
level, raising A9 to high voltage V|d (see DC Charac- 
teristics) activates the operation. Data read from lo- 
cations 0000H and 0001 H represent the manufac- 
turer’s code and the device code, respectively. 

The manufacturer- and device-codes can also be 
read via the command register, for instances where 
the 28F512 is erased and reprogrammed in the tar- 
get system. Following a write of 90H to the com- 
mand register, a read from address location 0000H 
outputs the manufacturer code (89H). A read from 
address 0001 H outputs the device code (B8H). 


used to store the command, along with address and 
data information needed to execute the command. 

The command register is written by bringing Write- 
Enable to a logic-low level (V|[_), while Chip-Enable is 
low. Addresses are latched on the falling edge of 
Write-Enable, while data is latched on the rising 
edge of the Write-Enable pulse. Standard microproc- 
essor write timings are used. 

Refer to AC Write Characteristics and the Erase/ 
Programming Waveforms for specific timing 
parameters. 


Write 

Device erasure and programming are accomplished 
via the command register, when high voltage is ap- 
plied to the Vpp pin. The contents of the register 
serve as input to the internal state-machine. The 
state-machine outputs dictate the function of the 
device. 

The command register itself does not occupy an ad- 
dressable memory location. The register is a latch 


COMMAND DEFINITIONS 

When low voltage is applied to the Vpp pin, the con- 
tents of the command register default to 00H, en- 
abling read-only operations. 

Placing high voltage on the Vpp pin enables read/ 
write operations. Device operations are selected by 
writing specific data patterns into the command reg- 
ister. Table 3 defines these 28F512 register 
commands. 


Table 3. Command Definitions 


Command 

Bus 

Cycles 

Req’d 

First Bus Cycle 

Second Bus Cycle 

OperationO) 

Address( 2 ) 

Data( 3 ) 

OperationO) 

Address! 2 ) 

Data( 3 ) 

Read Memory 

1 

Write 

X 

00H 




Read Intelligent Identifier Code( 4 ) 

3 

Write 

X 


Read 

(4) 

mm 


2 

Write 

X 



X 


Erase VerifyC 5 ) 

2 

Write 

EA 



X 


Set-up Program/ Program^) 

2 


X 

mm 


PA 


Program Verify( 6 ) 

2 


X 

r*?n 


X 


Reset( 7 ) 

2 

Write 

X 

FFH 

Write 

X 

FFH 


NOTES: 

1 . Bus operations are defined in Table 2. 

2. IA = Identifier address: 00H for manufacturer code, 01 H for device code. * 

EA = Address of memory location to be read during erase verify. 

PA = Address of memory location to be programmed. 

Addresses are latched on the falling edge of the Write-Enable pulse. 

3. ID = Data read from location IA during device identification (Mfr = 89H, Device = B8H). 

EVD = Data read from location EA during erase verify. 

PD = Data to be programmed at location PA. Data is latched on the rising edge of Write-Enable. 

PVD = Data read from location PA during program verify. PA is latched on the Program command. 

4. Following the Read Intelligent ID command, two read operations access manufacturer and device codes. 

5. Figure 5 illustrates the Quick-Erase algorithm. 

6. Figure 4 illustrates the Quick-Pulse Programming algorithm. 

7. The second bus cycle must be followed by the desired command register write. 
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Read Command 

While Vpp is high, for erasure and programming, 
memory contents can be accessed via the read 
command. The read operation is initiated by writing 
00H into the command register. Microprocessor 
read cycles retrieve array data. The device remains 
enabled for reads until the command register con- 
tents are altered. 

The default contents of the register upon Vpp pow- 
er-up is 00H. This default value ensures that no spu- 
rious alteration of memory contents occurs during 
the Vpp power transition. Where the Vpp supply is 
hard-wired to the 28F512, the device powers-up and 
remains enabled for reads until the command-regis- 
ter contents are changed. Refer to the AC Read 
Characteristics and Waveforms for specific timing 
parameters. 

Intelligent Identifier Command 

Flash-memories are intended for use in applications 
where the local CPU alters memory contents. As 
such, manufacturer- and device-codes must be ac- 
cessible while the device resides in the target sys- 
tem. PROM programmers typically access signature 
codes by raising A9 to a high voltage. However, mul- 
tiplexing high voltage onto address lines is not a de- 
sired system-design practice. 

The 28F512 contains an Intelligent Identifier opera- 
tion to supplement traditional PROM-programming 
methodology. The operation is initiated by writing 
90H into the command register. Following the com- 
mand write, a read cycle from address 0000H re- 
trieves the manufacturer code of 89H. A read cycle 
from address 0001 H returns the device code of 
B8H. To terminate the operation, it is necessary to 
write another valid command into the register. 

Set-up Erase/Erase Commands 

Set-up Erase is a command-only operation that 
stages the device for electrical erasure of all bytes in 
the array. The set-up erase operation is performed 
by writing 20H to the command register. 

To commence chip-erasure, the erase command 
(20H) must again be written to the register. The 
erase operation begins with the rising edge of the 
Write-Enable pulse and terminates with the rising 
edge of the next Write-Enable pulse (i.e., Erase-Veri- 
fy Command). 

This two-step sequence of set-up followed by execu- 
tion ensures that memory contents are not acciden- 
tally erased. Also, chip-erasure can only occur when 
high voltage is applied to the Vpp pin. In the absence 


of this high voltage, memory contents are protected 
against erasure. Refer to AC Erase Characteristics 
and Waveforms for specific timing parameters. 

Erase-Verify Command 

The erase command erases all bytes of the array in 
parallel. After each erase operation, all bytes must 
be verified. The erase verify operation is initiated by 
writing AOH into the command register. The address 
for the byte to be verified must be supplied as it is 
latched on the falling edge of the Write-Enable 
pulse. The register write terminates the erase opera- 
tion with the rising edge of its Write-Enable pulse. 

The 28F512 applies an internally-generated margin 
voltage to the addressed byte. Reading FFH from 
the addressed byte indicates that all bits in the byte 
are erased. 

The erase-verify command must be written to the 
command register prior to each byte verification to 
latch its address. The process continues for each 
byte in the array until a byte does not return FFH 
data, or the last address is accessed. 

In the case where the data read is not FFH, another 
erase operation is performed. (Refer to Set-up 
Erase/Erase). Verification then resumes from the 
address of the last-verified byte. Once all bytes in 
the array have been verified, the erase step is com- 
plete. The device can be programmed. At this point, 
the verify operation is terminated by writing a valid 
command (e.g. Program Set-up) to the command 
register. Figure 5, the Quick-Erase algorithm, illus- 
trates how commands and bus operations are com- 
bined to perform electrical erasure of the 28F512. 
Refer to AC Erase Characteristics and Waveforms 
for specific timing parameters. 

Set-up Program/Program Commands 

Set-up program is a command-only operation that 
stages the device for byte programming. Writing 40H 
into the command register performs the set-up 
operation. 

Once the program set-up operation is performed, 
the next Write-Enable pulse causes a transition to 
an active programming operation. Addresses are in- 
ternally latched on the falling edge of the Write-En- 
able pulse. Data is internally latched on the rising 
edge of the Write-Enable pulse. The rising edge of 
Write-Enable also begins the programming opera- 
tion. The programming operation terminates with the 
next rising edge of Write-Enable, used to write the 
program-verify command. Refer to AC Programming 
Characteristics and Waveforms for specific timing 
parameters. 
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Program-Verity Command 

The 28F512 is programmed on a byte-by-byte basis. 
Byte programming may occur sequentially or at ran- 
dom. Following each programming operation, the 
byte just programmed must be verified. 

The program-verity operation is initiated by writing 
COH into the command register. The register write 
terminates the programming operation with the ris- 
ing edge of its Write-Enable pulse. The program-ver- 
ity operation stages the device for verification of the 
byte last programmed. No new address information 
is latched. 

The 28F512 applies an internally-generated margin 
voltage to the byte. A microprocessor read cycle 
outputs the data. A successful comparison between 
the programmed byte and true data means that the 
byte is successfully programmed. Programming then 
proceeds to the next desired byte location. Figure 4, 
the 28F512 Quick-Pulse Programming algorithm, il- 
lustrates how commands are combined with bus op- 
erations to perform byte programming. Refer to AC 
Programming Characteristics and Waveforms for 
specific timing parameters. 

Reset Command 

A reset command is provided as a means to safely 
abort the erase- or program-command sequences. 
Following either set-up command (erase or program) 
with two consecutive writes of FFH will safely abort 
the operation. Memory contents will not be altered. 
A valid command must then be written to place the 
device in the desired state. 


EXTENDED ERASE/PROGRAM CYCLING 

EEPROM cycling failures have always concerned 
users. The high electrical field required by thin oxide 
EEPROMs for tunneling can literally tear apart the 
oxide at defect regions. To combat this, some sup- 
pliers have implemented redundancy schemes, re- 
ducing cycling failures to insignificant levels. Howev- 
er, redundancy requires that cell size be doubled — 
an expensive solution. 

Intel has designed extended cycling capability into 
its ETOX II flash memory technology. Resulting im- 
provements in cycling reliability come without in- 
creasing memory cell size or complexity. First, an 
advanced tunnel oxide increases the charge carry- 
ing ability ten-fold. Second, the oxide area per cell 
subjected to the tunneling electric field is one-tenth 
that of common EEPROMs, minimizing the probabili- 
ty of oxide defects in the region. Finally, the peak 
electric field during erasure is approximately 2 MV/ 
cm lower than EEPROM. The lower electric field 


greatly reduces oxide stress and the probability of 
failure — increasing time to wearout by a factor of 
100,000,000. 

The 28F512 is capable of 100,000 program/erase 
cycles. The device is programmed and erased using 
Intel’s Quick-Pulse Programming and Quick-Erase 
algorithms. Intel’s algorithmic approach uses a se- 
ries of operations (pulses), along with byte verifica- 
tion, to completely and reliably erase and program 
the device. 

For further information, see Reliability Report RR-60 
(ETOX-II Reliability Data Summary). 

QUICK-PULSE PROGRAMMING ALGORITHM 

The Quick-Pulse Programming algorithm uses pro- 
gramming operations of 1 0 p,s duration. Each opera- 
tion is followed by a byte verification to determine 
when the addressed byte has been successfully pro- 
grammed. The algorithm allows for up to 25 pro- 
gramming operations per byte, although most bytes 
verify on the first or second operation. The entire 
sequence of programming and byte verification is 
performed with Vpp at high voltage. Figure 4 illus- 
trates the Quick-Pulse Programming algorithm. 

QUICK-ERASE ALGORITHM 

Intel’s Quick-Erase algorithm yields fast and reliable 
electrical erasure of memory contents. The algo- 
rithm employs a closed-loop flow, similar to the 
Quick-Pulse Programming algorithm, to simulta- 
neously remove charge from all bits in the array. 

Erasure begins with a read of memory contents. The 
28F512 is erased when shipped from the factory. 
Reading FFH data from the device would immedi- 
ately be followed by device programming. 

For devices being erased and reprogrammed, uni- 
form and reliable erasure is ensured by first pro- 
gramming all bits in the device to their charged state 
(Data = 00H). This is accomplished; using the 
Quick-Pulse Programming algorithm, in approxi- 
mately one second. 

Erase execution then continues with an initial erase 
operation. Erase verification (data = FFH) begins at 
address 0000H and continues through the array to 
the last address, or until data other than FFH is en- 
countered. With each erase operation, an increasing 
number of bytes verify to the erased state. Erase 
efficiency may be improved by storing the address of 
the last byte verified in a register. Following the next 
erase operation, verification starts at that stored ad- 
dress location. Erasure typically occurs in one sec- 
ond. Figure 5 illustrates the Quick-Erase algorithm. 
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NOTES: 

1 . See DC Characteristics for value of V PP h and V PP |_. 

2. Program Verify is only performed after byte program- 
ming. A final read/compare may be performed (option- 
al) after the register is written with the Read command. 


Bus 

Operation 

Command 

Comments 

Standby 


Wait for Vpp Ramp to V PP h(1) 



Initialize Pulse-Count 

Write 

Set-up 

Program 

Data = 40H 

Write 

Program 

Valid Address/Data 

Standby 


Duration of Program 
Operation (twHWHi) 

Write 

Program! 2 ) 

Verify 

Data = COH; Stops Program 
Operation! 3 ) 

Standby 


tWHGL 

Read 


Read Byte to Verify 
Programming 

Standby 


Compare Data Output to Data 
Expected 

Write 

Read 

Data = 00H, Resets the 
Register for Read Operations 

Standby 


Wait for V PP Ramp to V PP [_(1) 


3. Refer to principles of operation. 

4. CAUTION: The algorithm MUST BE FOLLOWED 
to ensure proper and reliable operation of the de- 
vice. 


Figure 4. 28F512 Quick-Pulse Programming Algorithm 


I 
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1. See DC Characteristics for value of Vppn and Vppi_. 

2. Erase Verify is performed only after chip-erasure. A 
final read/compare may be performed (optional) after 
the register is written with the read command. 


Bus 

Operation 

Command 

Comments 



Entire memory must = 00H 
before erasure 



Use Quick-Pulse 
Programming Algorithm 
(Figure 4) 

Standby 


Wait for Vpp Ramp to Vppn(1 ) 



Initialize Addresses and 
Pulse-Count 

Write 

Set-up 

Erase 

Data = 20H 

Write 

Erase 

Data = 20H 

Standby 


Duration of Erase Operation 
(tWHWH2) 

Write 

Erased) 

Addr = Byte to Verify; 


Verify 

Data = AOH; Stops Erase 
Operation^) 

Standby 


tWHGL 

Read 


Read Byte to Verify Erasure 

Standby 


Compare Output to FFH 
Increment Pulse-Count 

Write 

Read 

Data = 00H, Resets the 
Register for Read Operations 

Standby 


Wait for Vpp Ramp to VppJI) 


3. Refer to principles of operation. 

4. CAUTION: The algorithm MUST BE FOLLOWED 
to ensure proper and reliable operation of the de- 
vice. 


Figure 5. 28F512 Quick-Erase Algorithm 
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DESIGN CONSIDERATIONS 


Two-Line Output Control 

Flash-memories are often used in larger memory ar- 
rays. Intel provides two read-control inputs to ac- 
commodate multiple memory connections. Two-line 
control provides for: 

a. the lowest possible memory power dissipation 
and, 

b. complete assurance that output bus contention 
will not occur. 

To efficiently use these two control inputs, an ad- 
dress-decoder output should drive chip-enable, 
while the system’s read signal controls all flash- 
memories and other parallel memories. This assures 
that only enabled memory devices have active out- 
puts, while deselected devices maintain the low 
power standby condition. 


Power Supply Decoupling 

Flash-memory power-switching characteristics re- 
quire careful device decoupling. System designers 
are interested in three supply current (Iqc) issues — 
standby, active, and transient current peaks pro- 
duced by falling and rising edges of chip-enable. The 
capacitive and inductive loads on the device outputs 
determine the magnitudes of these peaks. 

Two-line control and proper decoupling capacitor 
selection will suppress transient voltage peaks. 
Each device should have a 0.1 jllF ceramic capacitor 
connected between Vcc and Vss, and between Vpp 
and Vss- 

Place the high-frequency, low-inherent-inductance 
capacitors as close as possible to the devices. Also, 
for every eight devices, a 4.7 fx F electrolytic capaci- 
tor should be placed at the array’s power supply 
connection, between Vqc and Vss- The bulk capaci- 
tor will overcome voltage slumps caused by printed- 
circuit-board trace inductance, and will supply 
charge to the smaller capacitors as needed. 


Vpp Trace on Printed Circuit Boards 

Programming flash-memories, while they reside in 
the target system, requires that the printed circuit 
board designer pay attention to the Vpp power sup- 
ply trace. The Vpp pin supplies the memory cell cur- 
rent for programming. Use similar trace widths and 
layout considerations given the Vqc power bus. Ad- 
equate Vpp supply traces and decoupling will de- 
crease Vpp voltage spikes and overshoots. 


Power Up/Down Protection 

The 28F512 is designed to offer protection against 
accidental erasure or programming during power 
transitions. Upon power-up, the 28F512 is indifferent 
as to which power supply, Vpp or Vqc, powers up 
first. Power supply sequencing is not required. Inter- 
nal circuitry in the 28F512 ensures that the com- 
mand register is reset to the read mode on power 
up. 

A system designer must guard against active writes 
for Vcc voltages above V|_ko when v pp is active. 
Since both WE# and CE# must be low for a com- 
mand write, driving either to Vih will inhibit writes. 
The control register architecture provides an added 
level of protection since alteration of memory con- 
tents only occurs after successful completion of the 
two-step command sequences. 


28F512 Power Dissipation 

When designing portable systems, designers must 
consider battery power consumption not only during 
device operation, but also for data retention during 
system idle time. Flash memory nonvolatility in- 
creases the usable battery life of your system be- 
cause the 28F512 does not consume any power to 
retain code or data when the system is off- Table 4 
illustrates the power dissipated when updating the 
28F512. 


Table 4. 28F512 Typical Update 
Power Dissipation^) 


Operation 

Notes 

Power Dissipation 
(Watt-Seconds) 

Array Program/ 
Program Verify 

1 

0.085 

Array Erase/ 
Erase Verify 

2 

0.092 

One Complete Cycle 

3 

0.262 


NOTES: 

1. Formula to calculate typical Program/Program Verify 
Power = [Vpp X # Bytes x Typical # Prog Pulses 
(twHWHl X IPP2 Typical + t WH GL x !pP4 Typical)] + 
[Vcc x * Bytes X Typical # Prog Pulses (twHWHl x 
l C C 2 Typical + t WH GL X Icc 4 Typical). 

2. Formula to calculate typical Erase/ Erase Verify Power 
= [Vpp(lpp 3 Typical X t E RASE Typical + Ipps Typical X 
tWHGL x * Bytes)] + [V C c(lcC3 Typical X t ERAS E Typi- 
cal + Ices Typical X t W HGL x # Bytes)]. 

3. One Complete Cycle = Array Preprogram + Array 
Erase + Program. 

4. “Typicals” are not guaranteed, but based on a limited 
number of samples from production lots. 
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ABSOLUTE MAXIMUM RATINGS* 

Operating Temperature 

During Read 0°Cto +70°C(1) 

During Erase/Program 0°Cto + 70°CO | ) 

Operating Temperature 

During Read -40°Cto + 85°C( 2 ) 

During Erase/Program -40°Cto +85°C( 2 ) 

Temperature Under Bias — 1 0°C to + 80°C(i) 

Temperature Under Bias -50°C to + 95°C( 2 ) 

Storage Temperature -65°C to + 125°C 

Voltage on Any Pin with 

Respect to Ground -2.0V to + 7.0V( 2 ) 

Voltage on Pin Ag with 

Respect to Ground . . ■ - 2.0V to + 1 3.5V( 2 > 3 ) 


Vpp Supply Voltage with 
Respect to Ground 

During Erase/Program — -2.0V to + 14.0V( 2 > 3 ) 

Vcc Supply Voltage with 

Respect to Ground -2.0V to + 7.0V( 2 ) 

Output Short Circuit Current 100 mA( 4 ) 

NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 

* WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


NOTES: 

1 . Operating temperature is for commercial product defined by this specification. 

2. Operating temperature is for extended temperature product defined by this specification. 

3. Minimum DC input voltage is -0.5 V. During transitions, inputs may undershoot to -2.0V for periods less than 20 ns. 
Maximum DC voltage on output pins is Vcc + 0.5 V, which may overshoot to Vcc + 2.0 V for periods less than 20 ns. 

4. Maximum DC voltage on Ag or Vpp may overshoot to + 1 4.0V for periods less than 20 ns. 

5. Output shorted for no more than one second. No more than one output shorted at a time. 


OPERATING CONDITIONS 


Symbol 

Parameter 

Limits 


Comments 

Min 

Max 

Ta 

Operating TemperatureO) 


■ 

I 

For Read-Only and 
Read/Write Operations 
for Commercial Products 

Ta 

Operating Temperature( 2 ) 


■ 

■ 

For Read-Only and 

Read/Write Operations 

for Extended Temperature Products 

Vcc 

Vcc Supply Voltage 

4.50 

5.50 

V 



DC CHARACTERISTICS— TTL/NMOS COMPATIBLE— Commercial Products 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 

Min 

Typ<4) 

Max 

Ili 

Input Leakage Current 

1 



±1.0 

julA 

Vcc = Vcc Max 
V|N = Vcc or V SS 

Ilo 

Output Leakage Current 

■ 





v cc = v cc Max 
Vqut = Vcc or Vss 

lees 

Vcc Standby Current 

■ 

■ 



g 

Vcc = Vcc Max 
CE# = V| H 

Icci 

Vcc Active Read Current 



10 

30 

g 

v cc = v cc Max, CE# = V|j_ 
f = 6 MHz, Iqut = 0 mA 


Vcc Programming 
Current 



1.0 

10 

mA 

Programming in Progress 


Vcc Erase Current 

1,2 


5.0 

15 

mA 

Erasure in Progress 


Vcc Program Verify 
Current 

1,2 


5.0 

15 

mA 

Vpp = Vpph 

Program Verify in Progress 
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DC CHARACTERISTICS— TTL/NMOS COMPATIBLE— Commercial Products 

(Continued) 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 

Min 

TypW 

Max 

ICC5 

Vqc Erase Verify Current 

1,2 


5.0 

15 

mA 

Vpp = VppH 

Erase Verify in Progress 

ipps 

Vpp Leakage Current 

1 



±10.0 

jxA 

Vpp ^ Vqq 

•PP1 

V P p Read Current, Standby 
Current, or ID Current 

1 


90 

200 

julA 

Vpp > Vqq 


±10.0 

Vpp ^ Vqq 

lpP2 

Vpp Programming Current 

1,2 


8.0 

30 

mA 

Vpp = VppH 

Programming in Progress 

IPP3 

Vpp Erase Current 

1,2 


4.0 

30 

mA 

Vpp = VppH 
Erasure in Progress 

lpP4 

Vpp Program Verify Current 

1,2 


2.0 

5.0 

mA 

Vpp = VppH 

Program Verify in Progress 

>PP5 

Vpp Erase Verify Current 

1,2 


2.0 

5.0 

mA 

Vpp = VppH 

Erase Verify in Progress 

V|L 

Input Low Voltage 


-0.5 


0.8 

V 


V|H 

Input High Voltage 


2.0 


Vqq + 0.5 

V 


VOL 

Output Low Voltage 




0.45 

V 

Iol = 5.8 mA 
Vqq = Vqq Min 

VOHI 

Output High Voltage 


2.4 



V 

Iqjh = “2.5 mA 
Vqq = Vqq Min 

V ID 

Ag Intelligent Identifier Voltage 


11.50 


13.00 

V 


•id 

Ag Intelligent Identifier Current 

1,2 


90 

200 

jliA 

> 

CD 

11 

< 

O 

Vppl 

Vpp during Read-Only 
Operations 


0.00 


6.5 

V 

NOTE: Erase/ Program are 
Inhibited when Vpp = Vpp[_ 

VpPH 

Vpp during Read/Write 
Operations 


11.40 


12.60 

V 


V|_KO 

Vqc Erase/Write Lock Voltage 


2.5 



V 



DC CHARACTERISTICS— CMOS COMPATIBLE— Commercial Products 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 

Min 

Typ<4) 

Max 

Ili 

Input Leakage Current 

1 



±1.0 

/xA 

Vqq = Vqq Max 
V|N = Vcc or Vss 

•lo 

Output Leakage Current 

1 



±10.0 

jilA 

V CC = V CC Max 
v OUT = v cc or Vqs 

•ccs 

Vqq Standby Current 

1 


50 

100 

jxA 

V CC = V CC Max 
CE# = Vqq ±0.2V 

•cci 

Vqq Active Read Current 

1 


10 

30 

mA 

Vcc = Vqq Max, CE# = V||_ 
f = 6 MHz, Iqut = 0 
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DC CHARACTERISTICS— CMOS COMPATIBLE— Commercial Products (Continued) 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 

Min 

Typ<4) 

Max 

ICC2 

Vcc Programming 
Current 

1,2 


1.0 

10 

mA 

Programming in Progress 

l(X3 

Vcc Erase Current 

1,2 


5.0 

15 

mA 

Erasure in Progress 






15 

mA 

Vpp = VppH 

Program Verify in Progress 


Vcc Erase Verify Current 

1,2 


5.0 

15 

mA 

Vpp = VppH 

Erase Verify in Progress 


Vpp Leakage Current 

1 



±10.0 

p.A 

Vpp ^ Vcc 

•PPI 

Vpp Read Current, ID 
Current, or Standby 
Current 

1 


90 

200 


Vpp > Vcc 


±10.0 

Vpp ^ Vcc 

IPP2 

Vpp Programming 
Current 

1,2 


8.0 

30 


Vpp = VppH 
Programming in Progress 

IPP3 

Vpp Erase Current 



m 

30 

mA 

Vpp = VppH 
Erasure in Progress 

lpP4 

Vpp Program Verify 
Current 




5.0 

mA 

Vpp = VppH 

Program Verify in Progress 

IPP5 

Vpp Erase Verify Current 



2.0 

5.0 

mA 

Vpp = VppH 

Erase Verify in Progress 

V|L 

Input Low Voltage 


-0.5 


0.8 



E9H 

Input High Voltage 


0.7 V CC 


V CC + 0.5 

V 



Output Low Voltage 

■ 


■ 




VOHI 

Output High Voltage 

1 


1 




V0H2 


Iqh = -100 /xA, 
V CC = V CC Min 

V|D 

Ag Intelligent Identifier 
Voltage 


11.50 


13.00 

V 

> 

CD 

11 

< 

D 

l|D 

Ag Intelligent Identifier 
Current 

1,2 




jllA 

> 

CO 

II 

< 

O 

VpPL 

Vpp during Read-Only 
Operations 


0.00 


6.5 

V 

NOTE: Erase/ Program 
are Inhibited when 
Vpp = V PP |_ 


Vpp during Read/Write 
Operations 

■ 


■ 


H 


V LKO 

i 

Vcc Erase/Write Lock 
Voltage 





H 
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DC CHARACTERISTICS— TTL/NMQS COMPATIBLE— Extended Temperature 
Products 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 

Min 

Typ(4) 

Max 

Ili 

Input Leakage Current 

1 



±1.0 

fJL A 

V CC = Vqq Max 
V|n = Vqc or Vss 

•lo 

Output Leakage Current 

1 



±10.0 

jjlA 

Vcc = Vqq Max 
v OUT = Vqq or Vss 

•ccs 

Vqc Standby Current 

1 

' 

0.3 

1.0 

mA 

Vcc = Vcc Max 
CE# = V| H 

Icci 

Vqc Active Read Current 

1 


10 

30 

mA 

Vcc = Vcc Max, CE# = V, L 
f = 6 MHz, l 0 UT = 0mA 

ICC2 

Vcc Programming Current 

1,2 


1.0 

30 

mA 

Programming in Progress 

>CC3 

Vqc Erase Current 

1,2 


5.0 

30 

mA 

Erasure in Progress 

•CC4 

Vqq Program Verify Current 

1,2 


5.0 

30 

mA 

Vpp = Vpph 

Program Verify in Progress 

•CC5 

Vqq Erase Verify Current 

1,2 


5.0 

30 

mA 

Vpp = VppH 

Erase Verify in Progress 

Ipps 

Vpp Leakage Current 

1 



±10.0 

jllA 

o 

o 

> 

VI 

Q. 

Q_ 

> 

IPPI 

Vpp Read Current, Standby 
Current, or ID Current 

1 


90 

200 

juA 

Vpp > Vqc 


±10.0 

Vpp ^ Vqq 

lpP2 

Vpp Programming Current 

1,2 


8.0 

30 

mA 

Vpp = VppH 

Programming in Progress 

IPP3 

Vpp Erase Current 

1,2 


4.0 

30 

mA 

Vpp = Vpph 
E rasure in Progress 

lpP4 

Vpp Program Verify Current 

1,2 


2.0 

5.0 

mA 

Vpp = VppH 

Program Verify in Progress 

•PP5 

Vpp Erase Verify Current 

1,2 


2.0 

5.0 

mA 

Vpp = Vpph 

Erase Verify in Progress 

V| L 

Input Low Voltage 


-0.5 


0.8 

V 


V|H 

Input High Voltage 


2.0 


Vqq + 0.5 

V 


V 0 L 

Output Low Voltage 




0.45 

V 

Iql = 5.8 mA 
v cc = Vqq Min 

VoHI 

Output High Voltage 


2.4 



V 

Ioh = — 2.5 mA 
Vcc = Vqq Min 

V ID 

Ag Intelligent Identifier Voltage 


11.50 


13.00 

V 


l|D 

Ag Intelligent Identifier Current 

1,2 


90 

500 

jiiA 

Ag = V| D 

VppL 

Vpp during Read-Only 
Operations 


0.00 


6.5 

V 

NOTE: Erase/ Program are 
Inhibited when Vpp = Vppi_ 

VppH 

Vpp during Read/Write 
Operations 


11.40 


12.60 

V 


V LKO 

Vqq Erase/Write Lock Voltage 


2.5 



V 
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DC CHARACTERISTICS— CMOS COMPATIBLE— Extended Temperature 
Products 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 

Min 

Typ<4) 

Max 

lu 

Input Leakage Current 

1 



±1.0 

fxA 

Vcc = Vcc Max 
V|n = Vcc or Vss 

•lo 

Output Leakage Current 

1 



±10.0 

juA 

Vcc = Vcc Max 
Vout = v cc or Vss 

lees 

Vcc Standby Current 

1 


50 

100 

jllA 

V C c = Vcc Max 
CE# = Vcc ±0.2V 

Icci 

Vcc Active Read Current 

1 


10 

50 

mA 

Vcc = Vcc Max, CE# = V| L 
f = 6 MHz, Iqut = o mA 

>CC2 

Vcc Programming Current 

1,2 


1.0 

10 

mA 

Programming in Progress 

•CC3 

Vcc Erase Current 

1,2 


5.0 

15 

mA 

Erasure in Progress 

•CC4 

Vcc Program Verify 
Current 

1,2 


5.0 

30 

mA 

Vpp = VppH 

Program Verify in Progress 

ICC5 

Vcc Erase Verify Current 

1,2 


5.0 

30 

mA 

Vpp = VppH 

Erase Verify in Progress 

Ipps 

Vpp Leakage Current 

1 



±10.0 

1 nA 

Vpp ^ Vcc 

IPPI 

Vpp Read Current, ID 
Current, or Standby 
Current 

1 


90 

200 

juA 

Vpp > Vcc 


±10.0 

Vpp ^ Vcc 

lpP2 

Vpp Programming Current 

1,2 


8.0 

30 

mA 

Vpp = VppH 
Programming in Progress 

IPP3 

Vpp Erase Current 

1,2 


4.0 

30 

mA 

Vpp = VppH 
Erasure in Progress 

IPP4 

Vpp Program Verify 
Current 

1,2 


2.0 

5.0 

mA 

Vpp = VppH 

Program Verify in Progress 

•PP5 

Vpp Erase Verify Current 

1,2 


2.0 

5.0 

mA 

Vpp = VppH 

Erase Verify in Progress 

V|L 

Input Low Voltage 


-0.5 


0.8 

V 


V|H 

Input High Voltage 


0.7 Vcc 


V C C + 0-5 

V 


V 0 L 

Output Low Voltage 




0.45 

V 

Iql = 5.8 mA 
Vcc = Vcc Min 
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DC CHARACTERISTICS— CMOS COMPATIBLE— Extended Temperature 
Products (Continued) 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 

Min 

Typ(4) 

Max 

V OH1 

Output High Voltage 


0.85 Vcc 



V 

Iqh = _2 - 5 mA > 
Vcc = Vcc Min 

V OH2 

< 

o 

o 

1 

o 

4^ 

Iqh = — 100 /xA, 
v cc = v cc Min 

V ID 

Ag Intelligent Identifier Voltage 


11.50 


13.00 

V 

> 

CD 

II 

< 

o 

>ID 

Ag Intelligent Identifier Current 

1,2 


90 

500 

jllA 

> 

CD 

II 

< 

D 

VppL 

Vpp during Read-Only Operations 


0.00 


6.5 

V 

NOTE: Erase/ 
Program 
are Inhibited 
when 

Vpp = V PPL 

VppH 

Vpp during Read/Write Operations 


11.40 


12.60 

V 


V LKO 

Vcc Erase/Write Lock Voltage 


2.5 



V 



CAPACITANCE T A = 25°C, f = 1.0 MHz 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Conditions 

Min 

Max 

C|N 

Address/Control Capacitance 

3 


8 

PF 

> 

o 

II 

> 

COUT 

Output Capacitance 

3 


12 

PF 

VoUT = 0V 


NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, Vpp = 12.0V, T = +25°C. These 
currents are valid for all product versions (packages and speeds). 

2. Not 100% tested: characterization data available. 

3. Sampled, not 1 00% tested. 

4. “Typicals” are not guaranteed, but based on a limited number of samples from production lots. 
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AC TESTING INPUT/OUTPUT WAVEFORM 


AC TEST CONDITIONS 

Input Rise and Fall Times (1 0% to 90%) 1 0 ns 


Input Pulse Levels 0.45V and 2.4V 

Input Timing Reference Level 0.8V and 2.0V 

Output Timing Reference Level 0.8V and 2.0V 


AC CHARACTERISTICS— Read-Only Operations 


Versions^) 

Notes 

N28F512-120 

TN28F512-120 

P28F512-120 

TP28F512-120 

N28F512-150 

P28F512-150 

Q 

Symbol 

Characteristic 



Min 


tAVAV/tRC 

Read Cycle Time 




150 



tELQV/tCE 

Chip Enable Access Time 





150 


tAVQV/tACC 

Address Access Time 



120 



H| 


Output Enable Access Time 





55 

ns 


Chip Enable to Output in Low Z 

2,3 

0 


0 


ns 

tEHQZ 

Chip Disable to Output in High Z 

2 


55 


55 

ns 

tGLQx/tOLZ 

Output Enable to Output in Low Z 

2,3 

0 

« 

0 


ns 

tGHQz/tDF 

Output Disable to Output in High Z 

2 


30 


35 

ns 

tOH 

Output Hold from Address, CE#, or 
OE# Change 

2,4 

0 


0 


ns 

tWHGL 

Write Recovery Time before Read 


6 


6 


]U,S 


NOTES: 

1. Model number prefixes: N = PLCC, P = PDIP, T = Extended Temperature. 

2. Sampled, not 100% tested. 

3. Guaranteed by design. 

4. Whichever occurs first. 


2 - 4 — \J 

INPUT X 
0.45— ' 


^ 9 ft 

' TEST points 

r 0.8 

1 ► 


output xxxxxx 

2 q ° q ^>test points 

AC Testing: Inputs are driven at 2.4V 
a logic “0”. Testing measurements 
“1” and 0.8V for a logic "O”. Rise/f 

290204-8 

for a logic “1” and 0.45V for 
are made at 2.0V for a logic 
: all time £ 10 ns. 


AC TESTING LOAD CIRCUIT 


DEVICE 

UNDER 

TEST 


1.3V 


1N914 

3.3K 

— O OUT 


: c L = ioopF 


290204-9 


C L = 100 pF 

Cl includes Jig Capacitance 




















Figure 6. AC Waveforms for Read Operations 
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AC CHARACTERISTICS — Write/Erase/Program Operations^ 4 ) 


Versions 

Notes 

28F512-120 

28F512-150 

Unit 

Symbol 

Characteristic 

Min 

Max 

Min 

Max 

tAVAV/twC 

Write Cycle Time 


120 


150 


ns 

tAVWL/tAS 

Address Set-Up Time 


0 


0 


ns 

tWLAX/tAH 

Address Hold Time 


60 


60 


ns 

tDVWH/tDS 

Data Set-up Time 


50 


50 


ns 

tWHDX/tDH 

Data Hold Time 


10 


10 


ns 

tWHGL 

Write Recovery Time before Read 


6 


6 


JllS 

tGHWL 

Read Recovery Time before Write 

2 

0 


0 


JU.S 

tELWL/tcS 

Chip Enable Set-Up Time before Write 


20 


20 


ns 


Chip Enable Hold Time 


0 


0 




Write Pulse Width 


60 


60 



tWHWL/tWPH 

Write Pulse Width High 




20 



msm 

Duration of Programming Operation 

3 





^9 

WBSM 

Duration of Erase Operation 

3 

9.5 


9.5 



tvPEL 

Vpp Set-Up Time to Chip Enable Low 

2 

1.0 


1.0 


JJLS 


NOTES: 

1 . Read timing characteristics during read/write operations are the same as during read-only operations. Refer to AC Char- 
acteristics for Read-Only Operations. 

2. Guaranteed by design. 

3. The integrated stop timer terminates the programming/erase operations, thereby eliminating the need for a maximum 
specification. 

4. Erase/Program cycles on extended temperature products is 1 ,000 cycles. 


ERASE AND PROGRAMMING PERFORMANCE 


Parameter 

Notes 

Limits 

Unit 

N/P28F512-120, 150 

TN/TP28F512-120<6) 

Min 

Typ 

Max 

Min 

Typ 

Max 

Chip Erase 
Time 

1,3,4 


1 

10 


1 

10 

Sec 

Chip Program 
Time 

1,2,4 


1 

6.25 


1 

6.25 

Sec 


NOTES: 

1. “Typicals” are not guaranteed, but based on a limited number of samples from production lots. Data taken at 25°C, 12.0V 
Vpp at 0 cycles. 

2. Minimum byte programming time excluding system overhead is 16 jus (10 juts program + 6 juts write recovery), while 
maximum is 400 jxs/byte (16 juts x 25 loops allowed by algorithm). Max chip programming time is specified lower than the 
worst case allowed by the programming algorithm since most bytes program significantly faster than the worst case byte. 

3. Excludes 00H Programming Prior to Erasure. 

4. Excludes System-Level Overhead. 

5. Refer to RR-60 “ETOX II Flash Memory Reliability Data Summary” for typical cycling data and failure rate calculations. 

6. Extended temperature products 
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Figure 8. 28F51 2 Typical Programming Capability 






28F512 






Figure 11. AC Waveforms for Programming Operations 
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ALTERNATIVE CE# -CONTROLLED WRITES 


Versions 

Notes 




Symbol 

Characteristic 

Min 


Min 







150 


■n 

UVEL 

Address Set- 
Up Time 


0 


0 


ns 

tELAX 

Address Hold 
Time 


80 


80 


ns 




50 


50 


ns 


Data Hold 
Time 


10 


10 


ns 


Write 

Recovery Time 
before Read 


6 


6 



*GHEL 

Read 

Recovery Time 
before Write 

2 

0 


0 



tWLEL 

Write Enable 
Set-Up Time 
before Chip 
Enable 


0 


0 



tEHWH 

Write Enable 
Hold Time 


0 


0 


ns 

tELEH 

Write Pulse 
Width 

1 

70 


70 


ns 

tEHEL 

Write Pulse 
Width High 


20 


20 


ns 

tVPEL 

Vpp Set-Up 
Time to Chip 
Enable Low 

2 

1.0 


1.0 


JLLS 


NOTE: 

1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of Chip-Enable and Write-Enable. In 
systems where Chip-Enable defines the write pulse width (within a longer Write-Enable timing waveform) all set-up, hold and 
inactive Write-Enable times should be measured relative to the Chip-Enable waveform. 

2. Guaranteed by design. 
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Figure 12. AC Waveforms for Erase Operations 
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Figure 13. Alternate AC Waveforms for Programming Operations 
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Ordering Information 


|t 1 p| 2 |b|f |s| 1 |z|-| 1 U|o| 


I 


PACKAGE 

P = 32-PIN PLASTIC DIP 
N = 32-LEAD PLCC 

* — TEMPERATURE 

T = EXTENDED (-40°C TO +85°C) 
BLANK = COMMERCIAL (0°C TO +70°C) 


-ACCESS SPEED (ns) 
120 ns 
150 ns 


290204-13 


Valid Combinations: 

P28F51 2-1 20 N28F51 2-1 20 TP28F51 2-1 20 

P28F51 2-1 50 N28F51 2-1 50 TN28F51 2-1 20 


ADDITIONAL INFORMATION Order Number 

ER-20, “ETOX II Flash Memory Technology” 294005 

ER-24, “Intel Flash Memory” 294008 

RR-60, “ETOX II Flash Memory Reliability Data Summary” 293002 

AP-31 6, “Using Flash Memory for In-System Reprogrammable 292046 

Nonvolatile Storage” 

AP-325 “Guide to Flash Memory Reprogramming” 292059 


REVISION HISTO 

RY 

Number 

Description 

006 

* Removed 200 ns speed bin 

Revised Erase Maximum Pulse Count for Figure 5 from 3000 to 1000 
Clarified AC and DC test conditions 

007 

Corrected AC Waveforms 

Added Extended Temperature devices; TP28F512-120, TN28F512-120 

008 

Revised symbols; i.e., CE, OE, etc. to CE # , OE # , etc. 
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28F256A 

256K (32K x 8) CMOS FLASH MEMORY 


■ Flash Electrical Chip-Erase 

— 1 Second Typical Chip-Erase 

■ Quick-Pulse Programming Algorithm 
— 10 ju>s Typical Byte-Program 

— 0.5 Second Chip-Program 

■ 100,000 Erase/Program Cycles 

■ 12.0V ±5% Vpp 

■ High-Performance Read 

— 120 ns Maximum Access Time 

■ CMOS Low Power Consumption 
— 10 mA Typical Active Current 

— 50 fx A Typical Standby Current 

— 0W Data Retention Power 

■ Integrated Program/Erase Stop Timer 


■ Command Register Architecture for 
Microprocessor/Microcontroller 
Compatible Write Interface 

■ Noise Immunity Features 

— ± 10% Vcc Tolerance 

— Maximum Latch-Up Immunity 
through EPI Processing 

■ ETOX II Flash Nonvolatile Technology 
— EPROM-Compatible Process Base 
— High-Volume Manufacturing 

Experience 

■ JEDEC-Standard Pinouts 
-32-Pin PDIP 

— 32-Lead PLCC 

(See Packaging Spec., Order #231369) 


Intel’s 28F256A CMOS flash memory offers the most cost-effective and reliable alternative for read/write 
random access nonvolatile memory. The 28F256A adds electrical chip-erasure and reprogramming to familiar 
EPROM technology. Memory contents can be rewritten: in a test socket; in a PROM-programmer socket; on- 
board during subassembly test; in-system during final test; and in-system after-sale. The 28F256A increases 
memory flexibility, while contributing to time and cost savings. 


The 28F256A is a 256-kilobit nonvolatile memory organized as 32,768 bytes of 8 bits. Intel’s 28F256A is 
offered in 32-pin plastic dip and 32-lead PLCC. Pin assignments conform to JEDEC standards. 


Extended erase and program cycling capability is designed into Intel’s ETOX II (EPROM Tunnel Oxide) pro- 
cess technology. Advanced oxide processing, an optimized tunneling structure, and lower electric field com- 
bine to extend reliable cycling beyond that of traditional EEPROMs. With the 1 2.0V Vpp supply, the 28F256A 
performs a minimum of 1 0,000 erase and program cycles well within the time limits of the Quick-Pulse Pro- 
gramming and Quick-Erase algorithms. 

Intel’s 28F256A employs advanced CMOS circuitry for systems requiring high-performance access speeds, 
low power consumption, and immunity to noise. Its 120 ns access time provides no-WAIT-state performance 
for a wide range of microprocessors and microcontrollers. Typical standby current of 50 jliA translates into 
power savings when the device is deselected. Finally, the highest degree of latch-up protection is achieved 
through Intel’s unique EPI processing. Prevention of latch-up is provided for stresses up to 100 mA on address 
and data pins, from -IV to Vcc + IV. 


With Intel’s ETOX II process base, the 28F256A levers years of EPROM experience to yield the highest levels 
of quality, reliability, and cost-effectiveness. 
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Figure 1. 28F256A Block Diagram 
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Figure 2. 28F256A Pin Configurations 
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Table 1. Pin Description 


Symbol 

Type 

Name and Function 

Ao-A-14 

INPUT 

ADDRESS INPUTS for memory addresses. Addresses are internally 
latched during a write cycle. 

DQ 0 -DQ 7 

INPUT/ 

OUTPUT 

DATA INPUT/OUTPUT: Inputs data during memory write cycles; outputs 
data during memory read cycles. The data pins are active high and float to 
tri-state OFF when the chip is deselected or the outputs are disabled. Data 
is internally latched during a write cycle. 

CE# 

INPUT 

CHIP ENABLE activates the device’s control logic, input buffers, 
decoders, and sense amplifiers. CE# is active low; CE# high deselects 
the memory device and reduces power consumption to standby levels. 

OE# 

INPUT 

OUTPUT ENABLE gates the devices output through the data buffers 
during a read cycle. OE# is active low. 

WE# 

INPUT 

WRITE ENABLE controls writes to the control register and the array. Write 
enable is active low. Addresses are latched on the falling edge and data is 
latched on the rising edge of the WE# pulse. Note: With Vpp ^ 6.5V, 
memory contents cannot be altered. 

Vpp 


ERASE/PROGRAM POWER SUPPLY for writing the command register, 
erasing the entire array, or programming bytes in the array. 

Vcc 


DEVICE POWER SUPPLY (5V ± 10%). 

Vss 


GROUND. 

NC 


NO INTERNAL CONNECTION to device. Pin may be driven or left floating. 


APPLICATIONS 

The 28F256A flash memory provides nonvolatility 
along with the capability to perform over 100,000 
electrical chip-erasure/reprogram cycles. These fea- 
tures make the 28F256A an innovative alternative to 
disk, EEPROM, and battery-backed static RAM. 
Where periodic updates of code and data-tables are 
required, the 28F256A’s reprogrammability and non- 
volatility make it the obvious and ideal replacement 
for EPROM. 

Primary applications and operating systems stored 
in flash eliminate the slow disk-DRAM download pro- 
cess. This results in a dramatic enhancement of per- 
formance and substantial reduction of power con- 
sumption-considerations particularly important in 
portable equipment. Flash memory increases flexi- 
bility with electrical chip-erasure and in-system up- 
date capability of operating systems and application 
code. With updatable BIOS, system manufacturers 
can easily accommodate last-minute changes as re- 
visions are made. 

In diskless workstations and terminals, network traf- 
fic reduces to a minimum and systems become in- 
stant-on. Reliability exceeds that of electromechani- 


cal media. Often in these environments, power inter- 
rupts force extended re-boot periods for all net- 
worked terminals. This mishap is no longer an issue 
if boot code, operating systems, communications 
protocols and primary applications are flash-resident 
in each terminal. 

For embedded systems that rely on dynamic RAM/ 
disk for main system memory or nonvolatile backup 
storage, the 28F256A provides higher performance, 
lower power consumption, instant-on capability, and 
allows an ‘’execute in place” memory hierarchy for 
code and data table reading. Additionally, the flash 
memory is more rugged and reliable in harsh envi- 
ronments where extreme temperatures and shock 
can cause disk-based systems to fail. 

The need for code updates pervades all phases of a 
system’s life — from prototyping to system manufac- 
turing to after-sale service. The electrical chip-era- 
sure and reprogramming ability of the 28F256A al- 
lows in-circuit alterability; this eliminates unneces- 
sary handling and less-reliable socketed connec- 
tions, while adding greater test, manufacture, and 
update flexibility. 

Material and labor costs associated with code 
changes increases at higher levels of system inte- 
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gration — the most costly being code updates after 
sale. Code “bugs”, or the desire to augment system 
functionality, prompt after-sale code updates. Field 
revision to EPROM-based code requires the remov- 
al of EPROM components or entire boards. With the 
28F256A, code updates are implemented locally via 
an edge-connector, or remotely over a communica- 
tions link. 

For systems currently using a high-density static 
RAM/battery configuration for data accumulation, 
flash memory’s inherent nonvolatility eliminates the 
need for battery backup. The concern for battery 
failure no longer exists, an important consideration 
for portable equipment and medical instruments, 
both requiring continuous performance. In addition, 
flash memory offers a considerable cost advantage 
over static RAM. 

Flash memory’s electrical chip-erasure, byte pro- 
grammability and complete nonvolatility fit well with 
data accumulation and recording needs. Electrical 
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chip-erasure gives the designer a “blank slate” in 
which to log or record data. Data can be periodically 
off-loaded for analysis and the flash memory erased 
producing a new “blank slate”. 

A high degree of on-chip feature integration simpli- 
fies memory-to-processor interfacing. Figure 3 de- 
picts two 28F256As tied to the 80C1 86 system bus. 
The 28F256A’s architecture minimizes interface cir- 
cuitry needed for complete in-circuit updates of 
memory contents. 

With cost-effective in-system reprogramming, ex- 
tended cycling capability, and true nonvolatility, the 
28F256A is a functional superset of one or more of 
the alternatives: EPROMs, EEPROMs, battery 
backed static RAM, or disk. EPROM-compatible 
read specifications, straightforward interfacing, and 
in-circuit alterability offer designers unlimited flexibili- 
ty to meet the high standards of today’s designs. 
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Figure 3. 28F256AS in a 80C186 System 
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PRINCIPLES OF OPERATION 

Flash memory augments EPROM functionality with 
in-circuit electrical erasure and reprogramming. The 
28F256A introduces a command register to manage 
this new functionality. The command register allows 
for: 100% TTL-level control inputs; fixed power sup- 
ply during erasure and programming; and maximum 
EPROM compatibility. 

In the absence of high voltage on the Vpp pin, the 
28F256A is a read-only memory. Manipulation of the 
external memory-control pins yields the standard 
EPROM read, standby, output disable, and Intelli- 
gent Identifier operations. 

The same EPROM read, standby, and output disable 
operations are available when high voltage is ap- 
plied to the Vpp pin. In addition, high voltage on Vpp 
enables erasure and programming of the device. All 
functions associated with altering memory con- 
tents — Intelligent Identifier, erase, erase verify, pro- 
gram, and program verify— are accessed via the 
command register. 

Commands are written to the register using standard 
microprocessor write timings. Register contents 
serve as input to an internal state-machine which 
control the erase and programming circuitry. Write 
cycles also internally latch addresses and data 
needed for programming and erase operations. With 
the appropriate command written to the register, 
standard microprocessor read timings output array 
data, access the Intelligent Identifier codes, or out- 
put data for erase and program verification. 


Integrated Program/Erase Stop Timer 

Successive command write cycles define the dura- 
tion of program and erase operations; specifically, 
the program or erase time durations are normally 
terminated by associated program or erase verify 
commands. An integrated stop timer provides simpli- 
fied timing control over these operations; thus elimi- 
nating the need for maximum program/erase timing 
specifications. Programming and erase pulse dura- 
tions are minimums only. When the stop timer termi- 
nates a program or erase operation, the device en- 
ters an inactive state and remains inactive until re- 
ceiving the appropriate verify or reset command. 


Write Protection 

The command register is only active when Vpp is at 
high voltage. Depending upon the application, the 
system designer may choose to make the Vpp pow- 
er supply switchable — available only when memory 
updates are desired. When Vpp = Vpp|_, the con- 
tents of the register default to the read command, 
making the 28F256A a read-only memory. In this 
mode, the memory contents cannot be altered. 

Or, the system designer may choose to “hardwire” 
Vpp, making the high voltage supply constantly 
available. In this case, all Command Register func- 
tions are inhibited whenever Vcc is below the write . 
lockout voltage V|_ko (See Power Up/Down Protec- 
tion). The 28F256A is designed to accommodate ei- 
ther design practice, and to encourage optimization 
of the processor-memory interface. 

The two-step program/erase write sequence to the 
Command Register provides additional software 
write protection. 


BUS OPERATIONS 


Read 

The 28F256A has two control functions, both of 
which must be logically active, to obtain data at the 
outputs. Chip-Enable (CE#) is the power control and 
should be used for device selection. Output-Enable 
(OE#) is the output control and should be used to 
gate data from the output pins, independent of de- 
vice selection. Refer to AC read timing waveforms. 

When Vpp is high (Vppn), the read operations can 
be used to access array data, to output the Intelli- 
gent Identifier codes, and to access data for pro- 
gram/erase verification. When Vpp is low (Vppi_), the 
read operation can access only the array data. 


Output Disable 

With Output-Enable at a logic-high level (Vm), output 
from the device is disabled. Output pins are placed 
in a high-impedance state. 


Standby 

With Chip-Enable at a logic-high level, the standby 
operation disables most of the 28F256A’s circuitry 
and substantially reduces device power consump- 
tion. The outputs are placed in a high-impedance 
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state, independent of the Output-Enable signal. If 
the 28F256A is deselected during erasure, program- 
ming, or program/erase verification, the device 
draws active current until the operation is terminat- 
ed. 

Intelligent Identifier Operation 

The Intelligent Identifier operation outputs the manu- 
facturer code (89H) and device code (B9H). Pro- 
gramming equipment automatically matches the de- 
vice with its proper erase and programming algo- 
rithms. With Chip-Enable and Output-Enable at a 
logic low level, rising A g to high voltage V|d (see 
D.C. Characteristics) activates the operation. Data 
read from locations 0000H and 0001 H represent the 
manufacturer’s code and the device code, respec- 
tively. 

The manufacturer- and device-codes can also be 
read via the command register, for instances where 
the 28F256A is erased and reprogrammed in the tar- 
get system. Following a write of 90H to the com- 
mand register, a read from address location 0000H 
outputs the manufacturer code (89H). A read from 
address 0001 H outputs the device code (B9H). 


plied to the Vpp pin. The contents of the register 
serve as input to the internal state-machine. The 
state-machine outputs dictate the function of the de- 
vice. 

The command register itself does not occupy an ad- 
dressable memory location. The register is a latch 
used to store the command, along with address and 
data information needed to execute the command. 

The command register is written by bringing Write- 
Enable to a logic-low level (V||_), while Chip-Enable is 
low. Addresses are latched on the falling edge of 
Write-Enable, while data is latched on the rising 
edge of the Write-Enable pulse. Standard microproc- 
essor write timings are used. 

Refer to AC Write Characteristics and the Erase/ 
Programming Waveforms for specific timing parame- 
ters. 

COMMAND DEFINITIONS 

When low voltage is applied to the Vpp pin, the con- 
tents of the command register default to 00H, en- 
abling read-only operations. 


Write 

Device erasure and programming are accomplished 
via the command register, when high voltage is ap- 


Placing high voltage on the Vpp pin enables read/ 
write operations. Device operations are selected by 
writing specific data patterns into the command reg- 
ister. Table 3 defines these 28F256A register com- 
mands. 


Table 2. 28F256A Bus Operations 



Pins 

Vpp(i) 

A 0 

Ag 

CE# 

OE# 

WE# 

DQ()-DQ7 

Operation 


Read 

VppL 

A o 

Ag 

V|L 

V| L 

V|H 

Data Out 

5 

z 

Output Disable 

Vppl 

X(7) 

X 

V|L 

V|H 

V|H 

Tri-State 

0 

1 

o 

Standby 

VppL 

a 

X 


X 

X 

Tri-State 

< 

LU 

Intelligent ID Manufacturer^) 

VppL 






Data = 89H 


Intelligent ID Device( 2 ) 









Read 

Vpph 

Ao 

Ag 

V|L 

VlL 

V|H 

Data Out* 4 ) 

READ/ 

fRITE 

Output Disable 

VppH 

X 

X 

V| L 

V|H 

V| H 

Tri-State 

Standby* 5 ) 

VppH 

X 

X 

V|H 

X 

X 

Tri-State 


Write 

VppH 

Ao 

Ag 

VlL 

V|H 

VlL 

Data In * 6 ) 


NOTES: 

1. Refer to DC Characteristics. When Vpp = Vppi_ memory contents can be read but not written or erased. 

2. Manufacturer and device codes may also be accessed via a command register write sequence. 

Refer to Table 3. All other addresses low. 

3. V|d is the Intelligent Identifier high voltage. Refer to D.C. Characteristics. 

4. Read operations with Vpp = Vppp may access array data or the Intelligent Identifier codes. 

5. With Vpp at high voltage, the standby current equals Iqq + Ipp (standby). 

6. Refer to Table 3 for valid Data-In during a write operation. 

7. X can be V||_ or Vm- 
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Table 3. Command Definitions 


Command 

Bus 

Cycles 

Req’d 

First Bus Cycle 

Second Bus Cycle 

Operation* 1 ) 

Address* 2 ) 

Data* 3 ) 

Operation* 1 ) 

Address* 2 ) 

Data* 3 ) 

Read Memory 

1 

Write 

X 

00H 




Read Intelligent ID Codes 

3 

Write 

X 

90H 

Read 

(4) 

(4) 

Set-Up Erase/ Erased) 

2 

Write 

X 

20H 

Write 

X 

20H 

Erase Verify( 6 ) 

2 

Write 

EA 

AOH 

Read 

X 

EVD 

Set-Up Program/ Program* 5 ) 

2 

Write 

X 

40H 

Write 

PA 

PD 

Program Verify( 5 ) 

2 

Write 

X 

COH 

Read 

X 

PVD 

Reset( 7 ) 

2 

Write 

X 

FFH 

Write 

X 

FFH 


NOTES: 

1. Bus operation are defined in Table 2. 

2. IA = Identifier address: 00H for manufacturer code, 01 H for device code. 

EA = Address of memory location to be read during erase verify. 

PA = Address of memory location to be programmed. 

Addresses are latched on the falling edge of the Write-Enable pulse. 

3. ID = Data read from location IA during device identification. (Mfr = 89H, Device = B9H). 

EVD = Data read from location EA during erase verify. 

PD = Data to be programmed at location PA. Data is latched on the rising edge of the Write-Enable. 
PVD = Data read from location PA during program verify. PA is latched on the Program command. 

4. Following the Read Intelligent ID command, two read operations access manufacturer and device codes. 

5. Figure 4 illustrates the Quick-Pulse Programming Algorithm. 

6. Figure 5 illustrates the Quick-Erase Algorithm. 

7. The second bus cycle must be followed by the desired command register write. 

Read Command 

While Vpp is high, for erasure and programming, 
memory contents can be accessed via the read 
command. The read operation is initiated by writing 
00H into the command register. Microprocessor 
read cycles retrieve array data. The device remains 
enabled for reads until the command register con- 
tents are altered. 

The default contents of the register upon Vpp pow- 
er-up is 00H. This default value ensures that no spu- 
rious alternation of memory contents occurs during 
the Vpp power transition. Where the Vpp supply is 
hard-wired to the 28F256A, the device powers-up 
and remains enabled for reads until the command 
register contents are changed. Refer to the AC 
Read Characteristics and Waveforms for specific 
timing parameters. 

Intelligent Identifier Command 

Flash memories are intended for use in applications 
where the local CPU alters memory contents. As 
such, manufacturer- and device-codes must be ac- 
cessible while the device resides in the target sys- 
tem. PROM programmers typically access signature 
codes by raising Ag to a high voltage. However, mul- 


tiplexing high voltage onto address lines is not a de- 
sired system-design practice. 

The 28F256A contains an Intelligent Identifier oper- 
ation to supplement traditional PROM-programming 
methodology. The operation is initiated by writing 
90H into the command register. Following the com- 
mand write, a read cycle from address 0000H re- 
trieves the manufacturer code 89H. A read cycle 
from address 0001 H returns the device code B9H. 
To terminate the operation, it is necessary to write 
another valid command into the register. 

Set-Up Erase/Erase Commands 

Set-up Erase is a command-only operation that 
stages the device for electrical erase of all bytes in 
the array. The set-up erase operation is performed 
by writing 20H to the command register. To com- 
mence chip-erasure, the erase command (20H) 
must again be written to the register. The erase op- 
eration begins with the rising edge of the Write-En- 
able pulse and terminate with the rising edge of the 
next Write-Enable pulse (i.e., Erase-Verify Com- 
mand). 

This two-step sequence of set-up followed by execu- 
tion ensures that memory contents are not acciden- 
tally erased. Also, chip-erasure can only occur when 
high voltage is applied to the Vpp pin. In the absence 
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of this high voltage, memory contents are protected 
against erasure. Refer to AC Erase Characteristics 
and Waveforms for specific timing parameters. 


Erase-Verify Command 

The erase command erases all of the bytes of the 
array in parallel. After each erase operation, all bytes 
must be verified. The erase verify operation is initiat- 
ed by writing AOH into the command register. The 
address for the byte to be verified must be supplied 
as it is latched on the falling edge of the Write-En- 
able pulse. The register write terminates the erase 
operation with the rising edge of its Write-Enable 
pulse. 

The 28F256A applies an internally-generated margin 
voltage to the addressed byte. Reading FFH from 
the addressed byte indicates that all bits in the byte 
are erased. 

The erase-verify command must be written to the 
command register prior to each byte verification to 
latch its address. The process continues for each 
byte in the array until a byte does not return FFH 
data, or the last address is accessed. 

In the case where the data read is not FFH, another 
erase operation is performed. (Refer to Set-Up 
Erase/Erase.) Verification then resumes from the 
address of the last-verified byte. Once all bytes in 
the array have been verified, the erase step is com- 
plete. The device can be programmed. At this point, 
the verify operation is terminated by writing a valid 
command (e.g., Program Set-Up) to the command 
register. Figure 5, the Quick-Erase algorithm, illus- 
trates how commands and bus operations are com- 
bined to perform electrical erasure of the 28F256A. 
Refer to AC Erase Characteristics and Waveforms 
for specific timing parameters. 


Set-Up Program/Program Commands 

Set-up program is a command-only operation that 
stages the device for byte programming. Writing 40H 
into the command register performs the set-up oper- 
ation. 

Once the program set-up operation is performed, 
the next Write-Enable pulse causes a transition to 
an active programming operation. Addresses are in- 
ternally latched on the falling edge of the Write-En- 
able pulse. Data is internally latched on the rising 
edge of the Write-Enable pulse. The rising edge of 
Write-Enable also begins the programming opera- 
tion. The programming operation terminates with the 
next rising edge of Write-Enable, used to write the 


program-verify command. Refer to AC Programming 
Characteristics and Waveforms for specific timing 
parameters. 


Program Verify Command 

The 28F256A is programmed on a byte-by-byte ba- 
sis. Byte programming may occur sequentially or at 
random. Following each programming operation, the 
byte just programmed must be verified. 

The program-verify operation is initiated by writing 
COH into the command register. The register write 
terminates the programming operation with the ris- 
ing edge of its Write-Enable pulse. The program-ver- 
ify operation stages the device for verification of the 
byte last programmed. No new address information 
is latched. 

The 28F256A applies an internally-generated margin 
voltage to the byte. A microprocessor read cycle 
outputs the data. A successful comparison between 
the programmed byte and true data means that the 
byte is successfully programmed. Programming then 
proceeds to the next desired byte location. Figure 4, 
the 28F256A Quick-Pulse Programming algorithm, il- 
lustrates how commands are combined with bus op- 
erations to perform byte programming. Refer to AC 
Programming Characteristics and Waveforms for 
specific timing parameters. 


Reset Command 

A reset command is provided as a means to safely 
abort the erase- or program-command sequences. 
Following either set-up command (erase or program) 
with two consecutive writes of FFH will safely abort 
the operation. Memory contents will not be altered. 
A valid command must then be written to place the 
device in the desired state. 


EXTENDED ERASE/PROGRAM 
CYCLING 

EEPROM cycling failures have always concerned 
users. The high electrical field required by thin oxide 
EEPROMs for tunneling can literally tear apart the 
oxide at defect regions. To combat this, some sup- 
pliers have implemented redundancy schemes, re- 
ducing cycling failures to insignificant levels. Howev- 
er, redundancy requires that cell size be doubled — 
an expensive solution. 

Intel has designed extended cycling capability into 
its ETOX II flash memory technology. Resulting im- 
provements in cycling reliability come without in- 
creasing memory cell size or complexity. First, an 
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advanced tunnel oxide increases the charge carry- 
ing ability ten-fold. Second, the oxide area per cell 
subjected to the tunneling electric field is one-tenth 
that of common EEPROMs, minimizing the probabili- 
ty of oxide defects in the region. Finally, the peak 
electric field during erasure is approximately 
2 MV/cm lower then EEPROM. The lower electric 
field greatly reduces oxide stress and the probability 
of failure — increasing time to wear out by a factor of 
100,000,000. 

The 28F256A is capable of 100,000 program/erase 
cycles. The device is programmed and erased using 
Intel’s Quick-Pulse Programming and Quick-Erase 
algorithms. Intel’s algorithmic approach uses a se- 
ries of operations (pulses), along with byte verifica- 
tion, to completely and reliably erase and program 
the device. 

For further reliability information, see Reliability Re- 
port RR-60 (ETOX II Reliability Data Summary). 


QUICK-PULSE PROGRAMMING 
ALGORITHM 

The Quick-Pulse Programming algorithm uses pro- 
gramming operations of 10 jis duration. Each opera- 
tion is followed by a byte verification to determine 
when the addressed byte has been successfully pro- 
grammed. The algorithm allows for up to 25 pro- 
gramming operations per byte, although most bytes 
verify on the first or second operation. The entire 
sequence of programming and byte verification is 


performed with Vpp at high voltage. Figure 4 illus- 
trates the Quick-Pulse Programming algorithm. 


QUICK-ERASE ALGORITHM 

Intel’s Quick-Erase algorithm yields fast and reliable 
electrical erasure of memory contents. The algo- 
rithm employs a closed-loop flow, similar to the 
Quick-Pulse Programming algorithm, to simulta- 
neously remove charge from all bits in the array. 
Erasure begins with a read of memory contents. The 
28F256A is erased when shipped from the factory. 
Reading FFH data from the device would immedi- 
ately be followed by device programming. 

For devices being erased and reprogrammed, uni- 
form and reliable erasure is ensured by first pro J 
gramming all bits in the device to their charged state 
(data = 00H). This is accomplished, using the 
Quick-Pulse Programming algorithm, in approxi- 
mately one-half second. 

Erase execution then continues with an initial erase 
operation. Erase verification (data = FFH) begins at 
address 0000H and continues through the array to 
the last address, or until data other than FFH is en- 
countered. With each erase operation, an increasing 
number of bytes verify to the erased state. Erase 
efficiency may be improved by storing the address of 
the last byte verified in a register. Following the next 
erase operation, verification starts at that stored ad- 
dress location. Erasure typically occurs in one sec- 
ond. Figure 5 illustrates the Quick-Erase algorithm. 
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Compare data output 
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Data = 00H, resets the 
register for read 
operations. 

Standby 


Wait for Vpp ramp 
to Vppi_(1) 



290243-5 


NOTES: 

1 . See DC Characteristics for the value of Vppn and Vpp|_. 

2. Program Verify is only performed after byte program- 
ming. A final read/compare may be performed (optional) 
after the register is written with the Read command. 

3. Refer to principles of operation. 

4. CAUTION: The algorithm MUST BE FOLLOWED to en- 
sure proper and reliable operation of the device. 

Figure 4. 28F256A Quick-Pulse Programming Algorithm 
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NOTES: 

1. See DC Characteristics for the value of Vppn and Vppi_. 

2. Erase Verify is performed only after chip-erasure. A final 
read/compare may be performed (optional) after the regis- 
ter is written with the Read command. 


Bus 

Operation 

Command 

Comments 

Standby 


Wait for Vpp ramp 
to Vppn ( = 12.0V) (1) 
Use Quick-Pulse 
Programming (Fig. 4) 



Initialize Addresses, 
Erase Pulse Width, 
and Pulse Count 

Write 

Set-Up 

Erase 

Data = 20H 

Write 

Erase 

Data = 20H 

Standby 


Duration of Erase 
operation (twHWH2) 

Write 

Erase 

Addr = Byte to verify; 


Verify( 2 ) 

Data =? AOH; Stops 
Erase Operation (3) 

Standby 


tWHGL 

Read 


Read byte to verify 



erasure 

Standby 


Compare output to FFH 
increment pulse count 

Write 

Read 

Data = 00H, resets the 
register for read 
operations. 

Standby 


Wait for Vpp ramp 
to Vppi_(1) 


3. Refer to principles of operation. 

4. CAUTION: The algorithm MUST BE FOLLOWED to en- 
sure proper and reliable operation of the device. 


Figure 5. 28F256A Quick-Erase Algorithm 


5-102 




28F256A 


iny 


DESIGN CONSIDERATIONS 
Two-Line Output Control 

Flash memories are often used in larger memory ar- 
rays. Intel provides two read-control inputs to ac- 
commodate multiple memory connections. Two-line 
control provides for: 

a. the lowest possible memory power dissipation, 
and 

b. complete assurance that output bus contention 
will not occur. 

To efficiently use these two control units, an ad- 
dress-decoder output should drive chip-enable, 
while the system’s read signal controls all flash 
memories and other parallel memories. This assures 
that only enabled memory devices have active out- 
puts, while deselected devices maintain the low 
power standby condition. 

Power Supply Decoupling 

Flash memory power-switching characteristics re- 
quire careful device decoupling. System designers 
are interested in three supply current (Ice) issues — 
standby, active, and transient current peaks pro- 
duced by falling and rising edges of chip-enable. The 
capacitive and inductive loads on the device outputs 
determine the magnitudes of these peaks. 

Two-line control and proper decoupling capacitor 
selection will suppress transient voltage peaks. 
Each device should have a 0.1 ju,F ceramic capacitor 
connected between Vcc and Vss. and between Vpp 
and Vss- 

Place the high-frequency, low-inherent-inductance 
capacitors as close as possible to the devices. Also, 
for every eight devices, a 4.7 ju,F electrolytic capaci- 
tor should be placed at the array’s power supply 
connection, between Vcc and Vss- The bulk capaci- 
tor will overcome voltage slumps caused by printed- 
circuit-board trace inductance, and will supply 
charge to the smaller capacitors as needed. 


Vpp Trace on Printed Circuit Boards 

Programming flash memories, while they reside in 
the target smith, requires that the printed circuit 
board designer pay attention to the Vpp pin power 
supply trace. Use similar trace widths and layout 
considerations given the Vcc power bus. Adequate 
Vpp supply traces and decoupling will decrease Vpp 
voltage spikes and overshoots. 

Power Up/Down Protection 

The 28F256A is designed to offer protection against 
accidental erasure or programming during power 
transitions. Upon power-up, the 28F256A is indiffer- 
ent as to which power supply, Vpp or Vqq, powers 
up first. Power supply sequencing is not required. 
Internal circuitry in the 28F256A ensures that the 
command register is reset to the read mode upon 
power up. 

A system designer must guard against active writes 
for Vcc voltages above Vj_ko when Vpp is active. 
Since both WE# and CE# must be low for a com- 
mand write, driving either to V|h will inhibit writes. 
The control register architecture provides an added 
level of protection since alteration of memory con- 
tents only occurs after successful completion of the 
two-step command sequences. 

28F256A Power Dissipation 

When designing portable systems, designers must 
consider battery power consumption not only during 
device operation, but also for data retention during 
system idle time. Flash nonvolatility increases the 
usable battery life of your system because the 
28F256A does not consume any power to retain 
code or data when the system is off. Table 4 illus- 
trates the power dissipated when updating the 
28F256A. 


Table 4. 28F256A Typical Update Power Dissipation^) 


Operation 

Power Dissipation 
(Watt-Seconds) 

Notes 

Array Program/Program Verify 

0.043 

1 

Array Erase/ Erase Verify 

0.083 

2 

One Complete Cycle 

0.169 

3 


NOTES: 

1 . Formula to calculate typical Program/Program Verify Power = [Vpp x # Bytes x typical # Prog Pulses (twHWHi x 
Ipp2 typical + twHGL x Ipp4 typical)] + [Vcc x # Bytes x typical # Prog Pulses (twHWHi x Icc2 typical + twHGL x 
I C C4 typical)]. 

2 . Formula to calculate typical Erase/Erase Verify Power = [V pp (Ipp3 typical x t E RASE typical + Ipps typical x twHGL x 
# Bytes)] + [V C c(lcC3 typical x t ERAS E typical + Ices typical x t WH GL x * Bytes)]. 

3 . One Complete Cycle = Array Preprogram + Array Erase + Program. 

4 . “Typicals” are not guaranteed, but based on a limited number of samples from production lots. 
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ABSOLUTE MAXIMUM RATINGS* 


Operating Temperature 

During Read 

During Erase/Program . . . 

0°cto +70°C(1) 

0°Cto +70°C 

Temperature Under Bias 

-10°Cto +80°C 

Storage Temperature 

....-es'cto +125°C 

Voltage on Any Pin with 
Respect to Ground 

....-2.0 V to +7.0V<2) 

Voltage on Pin Ag with 
Respect to Ground 

. -2.0V to +13.5V(2.3) 

Vpp Supply Voltage with 
Respect to Ground 
During Erase/Program . . . 

..-2.0V to +14.0(2.3) 

Vcc Supply Voltage with 
Respect to Ground 

....-2.0V to +7.0V(2) 

Output Short Circuit Current . 

100 mA( 4 ) 


NOTES: 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 

* WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings " may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions " is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


1. Operating temperature is for commercial product defined by this specification. 

2. Minimum DC input voltage is -0.5V. During transitions, inputs may undershoot to -2.0V for periods less than 20 ns. 
Maximum DC voltage on output pins is Vcc +0.5V, which may overshoot to Vcc +2.0V for periods less than 20 ns. 

3. Maximum DC voltage on Ag or Vpp may overshoot to + 1 4.0V for periods less than 20 ns. 

4. Output shorted for no more than one second. No more than one output shorted at a time. 


OPERATING CONDITIONS 


Symbol 

Parameter 



Comments 



Ta 

Operating Temperature 

0 


D 

For Read-Only and 
Read/Write Operations 

Vcc 

Vqc Supply Voltage 

4.50 

5.50 

V 
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DC CHARACTERISTICS— TTL/NMOS COMPATIBLE 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 

Min 

TypicaK 4 ) 

Max 

Ili 

Input Leakage Current 

1 



±1.0 

fiA 

v cc = v cc max 

V|N = Vcc or V SS 

l|_0 

Output Leakage Current 

1 



±10.0 

jmA 

Vcc = Vcc max 
VoUT = Vcc or V SS 

•ccs 

Vcc Standby Current 

1 


0.3 

1.0 

mA 

Vcc = Vccmax 
CE# = V| H 

Icci 

Vcc Active Read Current 

1 


10 

30 

mA 

v cc = VccmaxCE# = V||_ 
f = 6 MHz, Iout = 0 mA 

>CC2 

Vcc Programming Current 

1,2 


1.0 

10 

mA 

Programming in Progress 

ICC3 

Vcc Erasure Current 

1,2 


5.0 

15 

mA 

Erasure in Progress 

ICC4 

Vcc Program Verify Current 

1,2 


5.0 

15 

mA 

Vpp = VppH 

Program Verify in Progress 

ICC5 

Vcc Erase Verify Current 

1,2 


5.0 

15 

mA 

Vpp = VppH 

Erase Verify in Progress 

ipps 

Vpp Leakage Current 

1 



±10.0 

jaA 

o 

o 

> 

VI 

CL 

CL 

> 

IPPI 

Vpp Read Current, ID Current, 
or Standby Current 

1 


90 

200 

julA 

Vpp > Vcc 


±10.0 

Vpp ^ Vcc 

IPP2 

Vpp Programming Current 

1,2 


8.0 

30 

mA 

Vpp = VppH 

Programming in Progress 

IPP3 

Vpp Erase Current 

1,2 


4.0 

20 

mA 

Vpp = VppH 
Erasure in Progress 


Vpp Program Verify Current 



2.0 

5.0 

mA 

Vpp = VppH 

Program Verify in Progress 


Vpp Erase Verify Current 

1,2 


2.0 

5.0 

mA 

Vpp = VppH 

Erase Verify in Progress 

V|L 

Input Low Voltage 


-0.5 


0.8 

V 


V|H 

Input High Voltage 


2.0 


Vcc + 0.5 

V 


VOL 

Output Low Voltage 




0.45 

V 

Iql = 5.8 mA 

Vcc = Vcc min 

VOHI 

Output High Voltage 


2.4 



V 

Ioh = “2.5 mA 
Vcc = Vccmin 

V|D 

Ag Intelligent Identifier 
Voltage 


11.50 


13.00 

V 


l|D 

Ag Intelligent Identifier 
Current 

1,2 


90 

200 

julA 

> 

CO 

II 

< 

D 

VpPL 

Vpp During Read-Only 
Operations 


0.00 


6.5 

V 

Note: Erase/ Program are 
Inhibited when Vpp = Vpp|_ 

VpPH 

Vpp During Read/Write 
Operations 


11.40 


12.60 

V 


VLKO 

Vcc Erase/Write Lock Voltage 


2.5 



V 
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DC CHARACTERISTICS— CMOS COMPATIBLE 


Symbol 

Parameter 

Notes 

Limits 

Unit 

Test Conditions 


Min 

Typical^) 

Max 

Ili 

Input Leakage Current 

1 



±1.0 

jllA 

v cc = v cc max 
V|N = Vcc or Vgs 

Ilo 

Output Leakage Current 

1 



±10.0 

juA 

Vcc = Vcc max 
VoUT = Vcc Of Vss 

lees 

V<x Standby Current 

1 


50 

100 

juA 

Vcc = Vccmax 
CE# = V cc ±0.2V 

! CC1 

Vcc Active Read Current 

1 


10 

30 

mA 

v cc = VccmaxCE# = Vil 
f = 6 MHz, Iout = 0 mA 

>CC2 

Vcc Programming Current 

1,2 


1.0 

10 

mA 

Programming in Progress 

•CC3 

Vqc Erase Current 

1,2 


5.0 

15 

mA 

Erasure in Progress 

•CC4 

Vcc Program Verify Current 

1,2 


5.0 

15 

mA 

Vpp = Vpph 

Program Verify in Progress 

•CC5 

Vqc Erase Verify Current 

1,2 


5.0 

15 

mA 

Vpp = Vpph 

Erase Verify in Progress 

•pps 

Vpp Leakage Current 

1 



±10.0 

jmA 

o 

o 

> 

vi 

Q. 

CL 

> 

•PPI 

Vpp Read Current, ID 
Current, or Standby Current 

1 


90 

200 

jllA 

Vpp > Vcc 


±10.0 

Vpp ^ Vcc 

lpP2 

Vpp Programming Current 

1,2 


8.0 

30 

mA 

Vpp = Vpph 

Programming in Progress 

•PP3 

Vpp Erase Current 

1,2 


4.0 

20 

mA 

Vpp = Vpph 
E rasure in Progress 

lpP4 

Vpp Program Verify Current 

1,2 


2.0 

5.0 

mA 

Vpp = Vpph 

Program Verify in Progress 

IPP5 

Vpp Erase Verify Current 

1,2 

> 

2.0 

5.0 

mA 

Vpp = Vpph 

Erase Verify in Progress 

VlL 

Input Low Voltage 


-0.5 


0.8 

V 


V|H 

Input High Voltage 


0.7V C c 


Vcc + 0.5 

V 


V 0 L 

Output Low Voltage 




0.45 

V 

Iql — 5.8 mA 
Vcc = Vcc mi n 

VoHI 

Output High Voltage 


0.85V CC 



V 

lOH = -2.5 mA, 
Vcc = Vcc min 

v OH2 

< 

o 

o 

1 

o 

Iqh = 1 00 juA, 
V CC = v cc min 

V|D 

Ag Intelligent Identifier 
Voltage 


11.50 


13.00 

V 


•id 

Ag Intelligent Identifier 
Current 

1,2 


90 

200 

juA 

Ag = Vid 
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DC CHARACTERISTICS— CMOS COMPATIBLE (Continued) 


Symbol 

Parameter 

Notes 

Min 

TypicaK 4 ) 

Max 

Unit 

Test Conditions 

VppL 

Vpp During Read-Only 
Operations 


0.00 


6.5 

V 

Note: Erase/Program are 
Inhibited when Vpp = Vppj_ 

VppH 

Vpp During Read/Write 
Operations 


11.40 


12.60 

V 


V|_KO 

Vcc Erase/Write Lock Voltage 


2.5 



V 



CAPACITANCES) t = 25°C,f = i.OMHz 



NOTES FOR DC CHARACTERISTICS AND CAPACITANCE: 

1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, Vpp - 12.0V, T = 25°C. These currents 
are valid for all product versions (Packages and Speeds). 

2. Not 100% tested: characterization data available. 

3. Sampled, not 100% tested. 

4. “Typicals” are not guaranteed, but based on a limited number of samples from production lots. 


AC TESTING INPUT/OUTPUT WAVEFORM AC TESTING LOAD CIRCUIT 



AC Test Conditions 

Input Rise and Fall Times (10% to 90%) 10 ns 


Input Pulse Levels 0.45 and 2.4 

Input Timing Reference Level 0.8 and 2.0 

Output Timing Reference Level 0.8 and 2.0 


I 
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AC CHARACTERISTICS Read-Only Operations 

Versions .. . 

Notes - 

Symbol Characteristic 

tAVAv/tRC Read Cycle Time 

tELQv/tCE Chip Enable Access Time 


tAVQv/tACC Address Access Time 


tGLQv/tOE Output Enable 
Access Time 


tELQX^LZ Ch iP Enable to Output 
J n Low Z 


Chip Disable to Output 
in High Z 


tGLQx/toLZ Output Enable to Output 
in Low Z 

tGHQZ^DF Output Disable to Output 
in High Z 


toH Output Hold from Address, 

CE#, or OE# Change 

tWHGL Write Recovery Time 

before Read 


iny 


28F256A-120 


28F256A-150 
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AC CHARACTERISTICS — For Write/Erase/Program Operations^) 


Versions 

Notes 

28F256A-120 

28F256A-150 

Unit 

Symbol 

Characteristic 

Min 

Max 

Min 

Max 

tAVAV^WC 

Write Cycle Time 


120 


150 


ns 

tAVWL/Us 

Address Set-Up Time 


0 


0 


ns 

tWLAX/tAH 

Address Hold Time 


60 


60 


ns 

tDVWH/tDS 

Data Set-Up Time 


50 


50 


ns 

tWHDX/tDH 

Data Hold Time 


10 


10 


ns 

tWHGL 

Write Recovery Time 
before Read 


6 


6 


JJiS 

tGHWL 

Read Recovery Time 
before Write 

2 

0 


0 


fXS 

*ELWL/tcS 

Chip Enable Set-Up 
Time before Write 


20 


20 


ns 

tWHEH/tCH 

Chip Enable Hold Time 


0 


0 


ns 

tWLWH/tWP 

Write Pulse Width 


60 


60 


ns 

tWHWL/twPH 

Write Pulse Width High 


20 


20 


ns 

tWHWHI 

Duration of 

Programming Operation 

3 

10 


10 


JULS 

tWHWH2 

Duration of 
Erase Operation 

3 

9.5 


9.5 


ms 

tVPEL 

Vpp Set-Up Time to 
Chip Enable Low 

2 

1.0 


1.0 


JULS 


NOTES: 

1 . Read timing parameters during read/write operations are the same as during read-only operations. Refer to AC Charac- 
teristics for Read-Only Operations. 

2. Guaranteed by design. 

3. The integrated stop timer terminates the programming/erase operations, thereby eliminating the need for a maximum 
specification. 


ERASE AND PROGRAMMING PERFORMANCE 


Parameter 

Notes 

Limits 

Unit 

28F256A-120 

28F256A-150 

Min 

Typ 

Max 

Min 

Typ 

Max 

Chip Erase Time 

1,3,4 


1 

10 


1 

10 

sec 

Chip Program Time 

1,2,4 


0.5 

3 


0.5 

3 

sec 


NOTES: 

1. “Typicals” are not guaranteed, but based on a limited number of samples taken from production lots. Data taken at 25°C, 
12.0V Vpp, at 0 cycles. 

2. Minimum byte programming time excluding system overhead is 16 jus program + 6 jlls write recovery), while maximum is 
400 jms/byte (16 /as x 25 loops allowed by algorithm). Max chip programming is specified lower than the worst case allowed 
by the programming algorithm since most bytes program significantly faster than the worst case byte. 

3. Excludes 00H Programming Prior to Erasure. 

4. Excludes System-Level Overhead. 

5. Refer to RR-60 “ETOX” II Flash Memory Reliability Data Summary for typical cycling data and failure rate calculations. 
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Figure 1 1. AC Waveforms for Programming Operations 
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Figure 12. AC Waveforms for Erase Operations 
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ALTERNATIVE CE# -CONTROLLED WRITES 


Versions 

Notes 

28F256A-120 

28F256A-150 

Unit 

Symbol 

Characteristic 

Min 

Max 

Min 

Max 

*AVAV 

Write Cycle Time 


120 


150 


ns 

*AVEL 

Address Set-Up Time 


0 


0 


ns 

*ELAX 

Address Hold Time 


80 


80 


mm 

tDVEH 

Data Set-Up Time 


50 


50 


mm 

tEHDX 

Data Hold Time 


10 


10 


ns 

tEHGL 

Write Recovery Time 
before Read 


6 


6 



tGHEL - 

Read Recover Time 
before Write 

2 

0 


0 



tWLEL 

Write Enable Set-Up Time 
before Chip-Enable 


0 


0 


ns 

tEHWH 

Write Enable Hold Time 


0 


0 


ns 

tELEH 

Write Pulse Width 

1 

70 


70 



tEHEL 

Write Pulse Width High 


20 


20 


ns 

tVPEL 

Vpp Set-Up Time 
to Chip-Enable Low 

2 

1.0 


1.0 


JUS 


NOTE: 

1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of Chip-Enable and Write-Enable. In 
systems where Chip-Enable defines the write pulse width (with a longer Write-Enable timing waveform) all set-up, hold and 
inactive Write-Enable times should be measured relative to the Chip-Enable waveform. 

2. Guaranteed by design. 














Figure 13. Alternate AC Waveforms for Programming Operations 
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ORDERING INFORMATION 



ADDITIONAL INFORMATION 

Order Number 


ER-20, “ETOX II Flash Memory Technology” 294005 

ER-24, “Intel Flash Memory” 294008 

RR-60, “ETOX II Flash Memory Reliability Data Summary” 293002 

AP-316, “Using Flash Memory for In-System Reprogramming 292046 

Nonvolatile Storage” 

AP-325, “Guide to Flash Memory Reprogramming” 292059 


REVISION HISTOF 

IY 

Number 

Description 

004 

Removed Preliminary Classification. 

Removed 200 ns speed bin. 

Revised Erase Maximum Pulse Count for Figure 5 from 3000 to 1000. 
Clarified AC and DC test conditions. 

005 

Corrected AC waveforms. 

006 

Revised symbols; i.e., CE, OE, etc. to CE#, OE#, etc. 
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1.0 INTRODUCTION 

Intel’s ETOX II (EPROM tunnel oxide) flash memory 
technology uses a single-transistor cell to provide in- 
system reprogrammable nonvolatile storage. Repro- 
gramming entails electrically erasing all bits in parallel 
and then randomly programming any byte in the array. 
This new technology offers designers alternatives for 
two of industry’s needs: 1) a cost-effective means of 
updating program code; and 2) a solid-state approach 
for non-volatile data accumulation or storage. 

This application note: 

• introduces you to the concepts of in-system writing; 

• discusses the hardware and software considerations 
for reprogramming flash memories in-system; 

• offers a checklist for integrating Intel’s flash memo- 
ries into microprocessor- or microcontroller-based 
systems; and 

• shows an example of an 80C186 design which incor- 
porates flash memory. 

1.1 PROM Programmer vs System- 
Processor Controlled 
Programming 

While soldered to a printed circuit board, one of two 
sources controls flash memory reprogramming: 1) a 
PROM programmer connected to the board, or 2) the 
system’s own central processing unit (CPU). These are 
called on-board programming (OBP), and in-system 
writing (ISW), respectively. With OBP, the PROM 
programmer supplies the programming voltage (Vpp) 
and the programming intelligence; with ISW, Vpp is 
generated locally and the system itself drives the repro- 
gramming process. Both methods offer a variety of ben- 
efits. However this application note focuses on ISW. 


NOTE: 

See Appendix A for OPB design considerations. 


1.2 Information Download and Upload 

ETOX II flash memory technology programs extreme- 
ly quick, permitting “on-the-fly” programming with 
unbuffered 19.2K baud data input. The remote ISW 
system handles the serial communication link for the 
host interface, as well as the flash memory reprogram- 
ming. 

Version Updates (Download) 

Flash memories enable code version updates using sim- 
ple hardware designs. Beyond the basic system, a local 
Vpp supply is all that is needed for remote code down- 
load. 

A central host computer can download program code 
to many remote systems. Flash memory offers this ca- 
pability without the drawbacks of other technologies. It 
is solid-state and nonvolatile, thus eliminating mechani- 
cal component wear-out (common with disk drives) 
and the risk of losing updates (a concern with battery- 
backed RAM). These aspects of flash memory offer 
major advantages in automated factories, remote sys- 
tems, portable equipment and other applications. Final- 
ly, flash memories provide this capability at a much 
lower cost than byte-alterable EEPROM and battery- 
backed SRAM. 

Data Acquisition (Upload) 

Intel’s flash memories allow single-byte programming 
for data accumulation applications. A remote data-log- 
ger uploads its information to a central host via serial 
link. The flash memory device is then in-system erased 



Figure 1. These diagrams illustrate OBP and ISW. In OBP, a PROM programmer updates a system’s 
flash memory. The ISW diagram shows a host updating remote flash memory via serial link. The 
remote system performs the flash reprogramming with its own CPU. 


Intel’s ETOX flash memory process has patents pending. 
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for resumption of data acquisition. This is useful in an 2.1 Flash MGVTIOrV PinOUtS 
advanced electrical power meter, for example. It could 
be configured to track and monitor power usage and 
report the data to a central computer for billing and 
utility management. This reduces the cost of manual 
door-to-door meter reading. 

2.0 DEVICE FEATURES AND ISW 
APPLICATION CONSIDERATIONS 

This section gives a brief overview of Intel’s flash mem- 
ory features and explains how they facilitate ISW de- 
sign. 



The 32-pin DIP memory site is forward-compatible 
from the 25 6K bit to the 2 Mbit flash memory density. 
It fits into the 27C010 Mbit EPROM pinout and re- 
quires no multiplexed pins. Also, with just a single cir- 
cuit-board jumper trace, a 28-pin EPROM can be 
placed in the lower pins of the 32-pin flash memory 
site. (See Figures 2A and 2B, Flash Memory Pinouts.) 
For more information on intertechnology pin compati- 
bility see Ap Brief AB-25. 
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Table 1. Command Register Instructions 


Command 

Bus 

Cycles 

Req’d 

First Bus Cycle 

Second Bus Cycle 

Oper- 

ation 

Addr(D 

Data<2) 

Oper- 

ation 

AddrO) 

Data<2) 

Read Memory( 3 ) 

1 

Write 

X 

00H 

Read 

Valid 

Valid 

Read Intelligent Identifier 

1 

Write 

X 

90H 

Read 

00/01 H 

ID 

Set-Up Erase/ Erase 

2 

Write 

X 

20H 

Write 

X 

20 H 

Erase Verify 

2 

Write 

EA 

A0H 

Read 

X 

EVD 

Set-Up Program/Program 

2 

Write 

X 

40H 

Write 

PA 

PD 

Program Verify 

2 

Write 

X 

C0H 

Read 

X 

PVD 

Reset( 3 ) 

2 

Write 

X 

FFH 

Write 

X 

FFH 


NOTES: 

1 . Addresses are latched on the falling edge of the Write-Enable pulse. 

EA = Address of memory location to be read during erase verify. 

PA = Address of memory location to be read during program verify. 

2. EVD = Data read from location EA during erase verify. 

PD = Data to be programmed at location PA. Data is latched on the rising edge of Write-Enable. 

PVD = Data read from location PA during program verify. PA is latched on the Program command. 

3. The second bus cycle must be followed by the next desired command register write, given the proper delay times. 


2.2 Command Register Architecture 

Simplified Processor Interface 

Intel’s command register architecture simplifies the 
processor interface. The command register allows 
CE#, WE#, and OE# to have standard read/write 
functionality. All commands such as “Set-up Program” 
or “Program Verify” can be written with standard sys- 
tem timings. Raising Vpp to 12V enables the command 
register for memory read/write operation, while lower- 
ing Vpp below Vcc + 2V restores the device to a read 
only memory. 

Writing to the register toggles an internal state-ma- 
chine. The state-machine output controls device func- 
tionality. Some commands require one write cycle, 
while others require two. The command register itself 
does not occupy an addressable memory location. The 
register simply stores the command, along with address 
and data needed to execute the command. With this 
architecture, the device expects the first write cycle to 
be a command and does not corrupt data at the speci- 
fied address. Table 1 contains a list of command regis- 
ter instructions. 

The following sections describe the commands in rela- 
tion to device operation. For more information on the 
command register see the appropriate flash memory 
data sheets, and Section 4.4 “Reprogramming Rou- 
tines”. 

Read Memory Command-— 00H 

This command allows for normal memory read opera- 
tions with Vpp turned on. After writing the command 
and waiting 6 jus, the CPU can read from the memory 


at system speeds. Once placed in the read mode no 
further action is required on the command register for 
subsequent read operations. 

Read Intelligent Identifier Command — 90H 

Most PROM programmers read the device’s intelligent 
identifier to select the proper programming algorithm. 
On EPROMs, raising A9 to the Vpp level configures 
the device for this purpose. Since this is unacceptable 
in-system, you can read the flash memory intelligent 
identifier by first writing command 90H. Follow this by 
reading address 0000 and 000 1H for the manufacturer 
and device ID. Reset the device with the Read Memory 
command after you have read the identifier. 

Set-Up Erase/Erase Commands-— 20H 

Write this command (20H) twice in succession to initi- 
ate erasure. The first write cycle sets up the device for 
erasure. The device starts erasing itself on the second 
command’s rising edge of Write-Enable. Erasure is 
stopped when the CPU issues the Erase Verify com- 
mand or when the device’s integrated stop timer times 
out. Integrated stop timers provide a safety net for 
complex system environments. In these environments, 
s/w timer accuracy may be difficult to achieve. Some 
method of timing is still required, however the timer 
need only meet a minimum specification (10 ms). This 
is far easier than calibrating a timer to meet both a 
minimum and maximum specification (10 ms 
±500 /as). 

NOTE: 

Prior to erasure, it is necessary to program all bytes to 
the same level (data = 00H). See the Quick-Erase al- 
gorithm for more details. 
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Erase Verify Command — AOH 

The erase command erases all bytes of the array in par- 
allel. After each erase operation, all bytes must be veri- 
fied to see if they erased. Write the Erase Verify com- 
mand (AOH) to stop erasure and setup verification. 

Alternatively, you may allow the internal stop timer to 
halt erasure. You must still issue the Erase Verify com- 
mand to set up verification. 

The device latches the address to be verified on the 
falling edge of WE# and the actual command on the 
rising edge. Wait 6 jlls before reading the data at the 
address specified on the previous write cycle. 

The flash memory applies an internally-generated refer- 
ence voltage to the addressed byte. Reading OFFH from 
the addressed byte in this mode indicates that all bits in 
the byte are erased with sufficient margin to Vcc and 
temperature fluctuations. 

If the location is erased, then repeat the Erase Verify 
procedure for the next address location. Write the com- 
mand prior to each byte verification to latch the byte’s 
address. Continue this process for each byte in the ar- 
ray until a byte does not return OFFH data, or the last 
address is accessed. 

In the case where the data read is not OFFH, perform 
another erase operation. (Refer to Set-up Erase/Erase). 
Continue verifying from the address of the last verified 
byte. Once you have accessed the last address, erasure 
is complete and you can proceed to program the device. 
Terminate the erase verify operation by writing another 
valid command (e.g., Program Set-up). 

Set-up Program/Program Commands— 40H 

Write this command (40H) twice in succession to initi- 
ate programming. The first write cycle sets up the de- 
vice for programming. The device latches address and 
data on the falling and rising edges of the second write 
cycle, respectively. It also begins programming on the 
rising edge. You stop the programming operation by 
issuing the Program Verify command, or by allowing 
the integrated program stop timer to time out. This 
timer works similiar to the erase stop timer. Again, a 
minimum specification replaces a tougher minimum/ 
maximum combination (10 jlls -25 juts). 

Program Verify Command— COH 

Flash memory devices program on a byte-by-byte basis. 
After each programming operation, the byte just pro- 
grammed must be verified. Write the Program Verify 
command (COH) to stop programming and set-up veri- 
fication. Should your software allow the integrated stop 
timer to halt programming, the software must resume 
the algorithm with the Program Verify command. The 


device executes this command on the rising edge of 
Write-Enable. The program Verify command stages the 
device for verification of the byte last programmed. No 
new address information is latched. 

The flash memory applies an internally-generated refer- 
ence voltage to the addressed byte. Wait 6 jus for the 
internal voltages to settle before reading the data at the 
address programmed. Reading valid data indicates that 
the byte programmed successfully. 

Command Register Reset— FFH 

Flash memories reset to the read mode during power- 
up, and remain in this mode as long as Vpp is less than 
Vcc + 2V. If your system leaves Vpp tumed-on dur- 
ing a system reset , then incorporate a command register 
device reset into the hardware initialization routines. 
This is necessary because the CPU might be controlling 
programming or erasure when the system reset hits. 

Write the reset command (OFFH) twice in succession 
to reset the device. The double write is necessary be- 
cause of the state-machine reprogramming structure. 
For example, suppose the system is reset after a Set-up 
Program command. The flash memory state machine 
expects the next write cycle to contain valid address 
and data for programming, followed by another write 
cycle for program verification. The first Reset com- 
mand will be mistaken for program data but will not 
corrupt the existing data. This is because the command 
(data = OFFH) is a null condition for flash memory 
programming. Only data bits programmed to zero pull 
charge onto the memory cell and change the data. The 
second write cycle actually resets the device to the read 
function. Following the second reset cycle, you can 
write the next command (Read, Program Set-up, Erase 
Set-up, etc.). 

If the Vpp supply is turned off upon system reset, the 
software reset is not required. The flash memory will 
reset itself automatically when Vpp powers down. 

Data Protection on Power Transitions 

The command register architecture offers another bene- 
fit in addition to simplified processor interface — during 
system power-up and power-down it protects data from 
corruption by unstable logic. Erasure or programming 
require Vpp to be greater than Vcc + 2 V and the 
proper command sequence to be initiated. For example 
the CPU must write the erase command twice in suc- 
cession. The odds of this occurring randomly are slim. 
Additionally, should Vpp ramp to 12V prior to Vcc 
ramping past 2.5V, the device will lock out all spurious 
writes and internally block 12V from the flash memory 
cells. For even greater security, you can switch Vpp as 
discussed in Section 3.13. 
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2.3 Vpp Specifications 

Flash memories, like EPROMs, require a 12V external- 
ly-generated power supply for reprogramming. Intel’s 
Vpp specifications 12.0V ±0.6V (5%) is compatible 
with most off-the-shelf (or available in-system) power 
supplies. (Note, Section 3.1 discusses Vpp generation 
techniques, and Appendix B shows different circuit al- 
ternatives.) 

It is essential to use the specified Vpp when reprogram- 
ming the flash memory device. Once the command to 
erase, program, or verify is issued, the device internally 
derives the required voltages from the Vpp supply. The 
command register controls selection of internal refer- 
ence circuitry tapped off of Vpp. An improper Vpp lev- 
el causes the references to be wrong, degrading the per- 
formance of the part. 

(When programming U.V. EPROMs, Vcc is raised to 
6.5V. On flash memories, the Vpp reference circuitry 
and command register architecture provide the same 
function while keeping Vcc and Vpp at static levels. 
An incorrect Vcc level during U.V. EPROM program- 
ming poses similar hazards to improper Vpp levels on 
flash memories.) 

The hardware design section discusses various methods 
for generating Vpp. 

3.0 HARDWARE DESIGN FOR ISW 

Covered in this section are the following: 

• Description of ISW-specific functional system 
blocks including memory requirements 

• Vpp generation techniques 

• Communication Considerations 



Figure 3. System Block Diagram 


System Level Hardware Requirements for ISW: 

• processor or controller 

• limited amount EP/ROM or other flash memory 
devices for boot code, communications s/w, and re- 
programming algorithms 


• limited amount of RAM for variable storage (i.e., 
stacks, buffers, and other changing parameters) 

• data import capability (i.e., serial line, LAN, floppy 
disk) 

• flash memory for nonvolatile code or data storage 
needs 

• Vpp generator or regulator 

All of the functional blocks in Figure 3 are typical of 
any embedded or reprogrammable system with the ex- 
ception of the Vpp generator. Some microcontrollers 
have on-chip EP/ROM, RAM and a serial port. With 
these devices, implementation of the ISW capability re- 
quires little additional hardware. 

The next section discusses Vpp generation techniques 
and communications design considerations. 

3.1 Vpp Generation 

A static Vpp is needed to reprogram flash memories. 
The Vpp voltage can be generated by: 

1) regulating it down from a higher voltage; 

2) pumping it up from a lower voltage (i.e., charge 
pump, DC/DC converter, etc.); or 

3) designing or specifying the system’s 12V supply 
with the required ISW tolerances and specifications. 

Sufficient current for reprogramming should be consid- 
ered when selecting your Vpp generation option. Paral- 
lel reprogramming for flash memory in 16-bit or 32-bit 
systems will require, respectively, 2X or 4X additional 
current capability. 

3.1.1 REGULATING DOWN FROM HIGHER 
VOLTAGE 

Vpp is obtained from a higher voltage by using a linear 
regulator. Given the higher voltage, regulation offers 
the least expensive method of generating Vpp. Standard 
three terminal 12V ±1%, ±2%, ±4% non-adjustable 
regulators are available off-the-shelf. Some regulators 
have on/off control built-in. (See Appendix B, Vpp Cir- 
cuit #1.) All regulators require a minimum input volt- 
age greater than the output voltage. (See Appendix B, 
Vpp Circuit #2 and #3.) 

3.1.2 PUMPING 5V UP TO 12V 

Vpp can be obtained by pumping Vcc and regulating it 
to the proper voltage. A voltage charge-pump can be 
designed and built by using a charge-pump integrated 
circuit and some discrete components (see Appendix B, 
Vpp Circuit #4) or by using a monolithic DC/DC con- 
verter (see Appendix A, Vpp Circuit #5). 

When using adjustable circuits containing discrete com- 
ponents, design the output voltage so it falls within the 
Vpp specifications for all corners of the components’ 



AP-316 


skew (i.e., Vcc - 10%; Rx ± 1%, Ry ±1%, etc.). In- 
clude the resistors’ temperature coefficients in the cal- 
culation matrix. Note that each of the various compo- 
nents can add error to the Vpp supply. 

The monolithic DC/DC converter shown in Appendix 
B Circuit #5 fits into a 24-pin socket. It offers the 
advantages of close temperature tracking and ease of 
implementation. It has also been characterized at tem- 
peratures and meets all the Vpp specifications. Appen- 
dix C contains a partial list of vendors selling DC/DC 
converters. 

Most DC/DC converters are only 50-60% efficient, so 
heat dissipation may be a concern. Some discrete boost 
circuits such as Appendix B, Circuit #4, offer much 
higher efficiency (70-85%). Circuit #4 as shown can 
supply 200 mA. Smaller inductor and capacitor compo- 
nent values and higher frequency boost convertors can 
be used where less power is required. For example, de- 
signs which reprogram one or two flash memories 
simultaneously might use the LT1172. (Contact Linear 
Technologies for more information.) 

In all Vpp generation methods, a capacitor on the input 
voltage terminals reduces the output noise voltage. 
Some power supplies (Appendix B, Circuits #3 and 
#4) specify a large- valued capacitor to decrease the Ef- 
fective Series Resistance (ESR). Place a 0. 1 jaF capaci- 
tor within 0.25 inches of each flash memory’s Vpp in- 
put (in addition the one on the Vpp generator’s input). 

NOTE: 

The ESR is inversely proportional to the capacitance 
value and the rated working voltage. To lower the 
ESR choose a capacitor with a large capacitance and a 
high working voltage (i.e., above 100V). 

3.1.3 ABSOLUTE DATA PROTECTION— 

Vpp ON/OFF CONTROL 

With Vpp below V cc + 2V or V e c below 2.5V, 
internal circuitry disables the command register and 
eliminates the possibility of inadvertent erasure or 
programming. Switching the Vpp supply off pro- 
vides the secondary benefits of improved power and 
thermal management. 

There are two ways to switch Vpp on and off: 

1) directly switch the Vpp generator’s output, or 

2) switch the input voltage supplying the regulation 
circuit. 

Any switching circuit will cause a voltage drop, so 
choose a switch with this drop in mind. Some power 
supplies have asymmetrical tolerances on 12V (i.e. 
+ 5%, —4%). Flash memory allows the 12V supply to 
drop as low as —5%. The 1% difference between the 
supply and the device requirement allows the switch to 
have an ON resistance voltage drop of 0.12V. Continu- 
ing with this example, assume the system only repro- 
grams one flash memory at a time. The current through 
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the switch into the flash is Ipp = 30 mA. Solving for 
the allowable resistance across the switch: R = V/I = 
(0.12V)/(30 mA) = 4 Ohms. See Figure 4. Example 
Voltage Drop Across Switch. Note, one can reduce the 
effective Rp>s (ON) by placing 2 or more FETs in par- 
allel if necessary. 



Controlling the input voltage of a DC/DC convertor 
with a MOSPOWER FET is another straightforward 
approach. (See Appendix B, Circuit #5.) Choose the 
FET switch carefully. It should have a very low on-re- 
sistance to minimize the voltage divider effect of the 
converter and FET switch. If the voltage across the 
FET switch is too high, the converter will not have the 
proper input voltage to meet its specifications. Always 
design the switching circuit with sufficient margin to 
maximum Vpp and Vcc load currents. 

3.1.4 WRITES AND READS DURING V PP 
TRANSITIONS 

After switching Vpp off, the CPU can read from the 
flash memory without waiting for the capacitors on 
Vpp to bleed off. To do this, write the Read Memory 
command prior to issuing the Vpp_OFF instruction. 
Alternatively, the device resets automatically to read 
mode when Vpp drops below Vcc + 2V. 

Raising Vpp to 12V enables the command register. You 
must wait 100 ns after Vpp achieves its steady state 
value before writing to the command register. Remem- 
ber that the steady state Vpp settling time depends on 
both the power supply slew rate and the capacitive load 
on the Vpp bus. 

3.1.5 OTHER V PP CONSIDERATIONS 

The Vpp pin is an MOS input which can be damaged 
by electrostatic discharge (ESD). In OBP applications, 
an external power source supplies Vpp and then is re- 
moved. Electrostatic charge can build up on the float- 
ing Vpp pin. You can solve this problem by one of two 
means: 1) tie the pin to Vcc through a diode and pull- 
up resistor (Figure 5a) or through a resistor to ground 
(Figure 5b). With either approach use a 10 Kfl or larg- 
er resistor to minimize Vpp power consumption. 
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Figure 5 


( NOTE: 

Typically EPROMs require Vpp to be within one di- 
ode drop of Vcc for optimal standby power consump- 
tion. Either approach can be used with the flash mem- 
ory. 

ISW applications do not require this ESD protection as 
most regulators and charge pumps contain a voltage 
divider on the output stage. A divider provides a resis- 
tive path to ground even with the supply turned off. 
(Note: check the schematics of the Vpp supply chosen.) 
However, if you directly switch the Vpp supply, add 
the resistor to ground; the switch isolates the Vpp pin 
and allows charge to build up. 

3.1.6 Vpp CIRCUITRY AND TRACE LAYOUT 

You should lay out Vpp circuitry and traces for high 
frequency operation since programming power charac- 
teristics exhibit an AC current component. Use the fol- 
lowing standard power supply design rules: 

© Keep leads as short as possible and use a single 
ground point or ground plane (a ground plane elimi- 
nates problems). 

° Locate the resistor network (or a regulator) as close 
as possible to the adjustment pin to minimize noise 
pick-up in the feedback loop. The resistor divider 
network should also be as short as possible to mini- 
mize line loss. 

• Keep all high current loops to a minimum length 
using copper connections that are as wide as possi- 
ble. (This will decrease the inductive impedance 
which otherwise causes noise spikes.) 

• Place the voltage regulator as close to the flash 
memory as practical to avoid an output ground 
loop. Excessive lead length results in an error volt- 
age across the distributed line resistance. 

© Separate the input capacitor return from the regula- 
tor load return line. This eliminates an input ground 
loop, which could result in excessive output ripple. 


3.2 Communications — Getting Data to 
and from the Flash Memory 

The flash memory does not care about the origin of the 
data to be programmed. The data could be downloaded 
from a serial link, parallel link, disk drive, or generated 
locally as in data accumulation applications. 

While most systems communicate via serial link, send- 
ing a font to a printer’s flash memory is an example of a 
parallel interface. In either format, designers must de- 
cide whether or not to buffer the incoming data. Error- 
free serial protocols will require buffering for recon- 
struction of information packets. With equal capacity 
of RAM and flash memory in a system, the download 
time would only be limited by the speed of the commu- 
nication link. 

Both worst case and typical analysis must be done for 
real time download and un-buffered programming. The 
maximum transmission rate is 19.2K baud assuming 
worst case programming times. The time between char- 
acters at 19.2K baud is 520 juts; the worst case byte 
programming time is approximately 0.5 ms (including 
software overhead). Typical byte programming takes 
16 jas which allows for much higher unbuffered trans- 
mission rates. However, a single byte can take up to the 
full 400 fxs specified time (plus software overhead), so 
you should not base transmission rate on typical pro- 
gramming times. 

Partial buffering or FIFO schemes can also be imple- 
mented to increase transmission rates. An argument for 
buffering is reduction of interconnect time and costs. 

4.0 SOFTWARE DESIGN FOR ISW 

Covered in this section are the following software re- 
quirements: 

• system integration of ISW 

• reprogramming considerations for single- and multi- 
ple-flash memory based designs. 

4.1 System Integration — Boot Code 
Requirements 

Boot code in remote systems should contain various 
IS W-specific procedures in addition to standard initiali- 
zation and diagnostic routines. 

The most dependable boot code for remote version up- 
dates contains some basic communications capability 
and the ISW reprogramming algorithms. Thus, a data- 
link disruption while reprogramming would be recover- 
able. For manufacturing flexibility, this boot memory 
could be an OBP 256K flash memory. 
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1. Bootstrap, and reset flash memory; 

2. Check “HOST_INT” and “VALID_AP” 
flags: 

If HOST INT is inactive and VALID_AP 

= 4150H, jump to application start address; 

3. If VALID AP < > 41 50H, loop and wait 

for host (the link probably went down during 
update); 

4. When “HOST INT” is active, vector to 

host interaction code. , 

(See next section.) 



Figure 6. Example of ISW Integration to the Boot Sequence 


An alternative to storing these routines in a separate 
boot device is storing them in the flash memory con- 
taining the program code. Prior to erasure, the CPU 
would transfer the ISW routines to system RAM and 
execute from there. This type of approach is suitable for 
battery-operated equipment or systems with back-up 
power supplies. 

The communication link could be disrupted during re- 
programming, leaving the device in an unknown config- 
uration. Therefore, the boot code should reset the flash 
memory and check two ISW flags. The following sec- 
tion discusses the flag check concept. 

4.1.1 ISW FLAG CHECK 

After resetting the flash memories and initializing other 
system components, the CPU should check the com- 
munications link for a host interrupt. We will call this 

the HOST INT flag. Had the communication link 

gone down prior to completion of downloading, then 
the host would have to re-establish contact to complete 
the task. 

Assuming no HOST INT request has been made, the 

boot protocol then checks a data sequence in the flash 

memory signifying a valid application (VALID AP). 

You program this sequence into the memory array after 
confirmation of a successful download. If a download is 
interrupted midway through erasure or programming, 

then the VALID AP flag locations will not contain 

the VALID AP code. On the next system bootstrap 

the CPU recognizes this and holds up system boot until 
valid code is programmed. In Figure 6 an example flag 

protocol uses the VALID AP sequence of 4150H 

(ASCII codes for “AP”). 

4.2 Communication Protocols and 
Flash Memory ISW 

The remote download communications protocol must 
guarantee accurate transmission of flash memory in- 


structions and program code. This protocol can be as 
simple as a read-back technique or as complex as an 
error-free transmission protocol. (See Figure 7 for pos- 
sible system-level flash memory instructions.) 

A simple read-back technique optimizes download for 
boot code memory needs and ease of implementation. 
The embedded CPU echoes the flash memory instruc- 
tion (i.e., Erase or Program) to the host, and waits for a 
confirmation prior to execution. After programming 
the update, the remote system checks the update by 
transmitting it back to the host for confirmation. The 
remote system then programs the VALID AP se- 

quence. Note that programming and reading back 
64 Kbytes at 19.2K baud takes about 0.57 minutes per 
direction: 

(65,536 bytes) * (10 bits/byte) * (1 sec/19.2 Kbits) * 

(1 min/60 sec) = 0.57 minutes. 

Implementing either software- or hardware-based er- 
ror-free communications protocol improves transmis- 
sion efficiency. It eliminates the possibility of errant 
data being programmed if not buffered and checked, 
and optimizes the download process for transmission 
time. Additionally, file compression and decompression 
routines can improve the transmission rate. 


General ISW instructions include: 

STATUS CHECK 
INITIATE REPROGRAMMING 

MOVE ISW ROUTINES FROM FLASH MEMORY TO RAM 
(If not resident in separate boot memory) 

Data accumulation-specific commands include: 

RETRIEVE DATA 
ERASE FLASH MEMORY 


Figure 7. Sample System-Level 
ISW Instruction Set 
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Status Check 

The host should request a status update from the re- 
mote system prior to sending a reprogramming instruc- 
tion. Depending on the response, the host may break 
the link and reconnect later, or it may send an erasure 
or data-upload command. This type of handshaking is 
necessary when system downtime for reprogramming 
might not be acceptable. An example of this is an auto- 
mated factory where robots handle caustic chemicals. 


4.3 Data Accumulation Software 
Techniques 

Data can be accumulated in a remote environment with 
flash memory and then uploaded to a host computer for 
manipulation. You can adapt various standard data- 
logging techniques for use with flash memory. With 
any technique, you determine the next available memo- 
ry location by reading for erased data (OFFH). This 
address would only be located once on system boot- 
strap and then recalled from RAM and incremented as 
needed. 

Given a repeating data string of known length and 
composition, program start and stop codes at either end 
of the string. Do not pick 00H or OFFH data for these 
codes because they are used during erasure. The start 
and stop codes enable the CPU to differentiate between 
available memory for logging and logged data equal to 
00H or OFFH. 

For non-regular data input, you can address this same 
issue by programming the logged data followed by the 
variable identifier. Again, do not pick 00H or OFFH 
data for the variable identifiers. 

With any technique, the host computer separates and 
manipulates the data after the uploading operation. 


4.4 Reprogramming Routines 

Intel’s ETOX flash memories provide a cost-effective 
updatable, non-volatile code storage medium. The reli- 
ability and operation of the device is based on the use of 
specified erasure and programming algorithms. 

Intel offers reprogramming software drivers to make it 
easy for you to design and implement flash memory 
applications. The software is designed around the CPU- 
family architectures and requires minimal modification 
to define your system parameters. For example, you 
supply the memory width (8-bit, 16-bit, or 32-bit), sys- 
tem timing, and a subroutine for control of Vpp. 


NOTE: 

Contact your nearest sales office for details. 

If you prefer to implement the algorithms yourself, they 
are outlined in the device data sheets. Command regis- 
ter instructions required for the various operations are 
included in the data sheet flow charts. 

The following sections describe both single-device and 
multiple-device parallel reprogramming implementa- 
tions. 

4.4.1 Quick-Erase Algorithm 

Flash memories chip-erase all bits in the array in paral- 
lel. The erase time depends on the Vpp voltage level 
(11.4V- 12.6V), temperature, and number of erase/ 
write cycles on the part. See the device data sheets for 
specific parametric influences on reprogramming times. 

Note that prior to erasing a flash memory device the 
processor must program all locations to 00H. This equal- 
izes the charge on all memory cells insuring uniform and 
reliable erasure . 

Algorithm Timing Delays 

The Quick-Erase algorithm has three different time de- 
lays: 

1) The first is an assumed delay when Vpp first turns 
on. The capacitors on the Vpp bus cause an RC 
ramp. After switching on Vpp, the delay required is 
proportional to the number of flash memory devices 
times 0.1 jmF/device. Vpp must reach its final value 
100 ns before the CPU writes to the command regis- 
ter. Systems that hardwire Vpp to the device can 
eliminate this delay. 

2) The second delay is the “Time Out TEW” function, 
where TEW is the erase timing width. The function 
occurs after writing the erase command (the second 
time) and before writing the erase-verify command. 
The erase-verify command or the integrated stop 
timer internally stops erasure. 

TEW for ETOX II flash memories is a minimum of 
10 ms. This delay can be either software or hard- 
ware controlled. Either way, the minimum nature of 
the timing specification allows for interrupt-driven 
timeout routines. Should the interrupt latency be 
longer than the minimum delay specification, the 
stop timer halts erasure. 

3) The third delay in the erase algorithm is a 6 juts time 
out between writing the erase verify command and 
reading for OFFH. During this delay, the internal 
voltages of the memory array are changing from the 
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erase levels to the verify levels. A read attempt prior 
to waiting 6 jus will give false data — it will appear 
that the chip does not erase. Repeatedly trying to 
erase verify the device without waiting 6 jlls will 
cause over-erasure. This delay is short enough that 
it is best handled with software timing. Again, note 
that the delay specification is a minimum. 

High Performance Parallel Device Erasure 

In applications containing more than one flash memo- 
ry, you can erase each device serially or you can reduce 
total erase time by implementing a parallel erase algo- 
rithm. 7 You save time by erasing all devices at the same 
time. However, since flash memories may erase at dif- 
ferent rates, you must verify each device separately. 
This can be done in a word-wise fashion with the com- 
mand register Reset command and a special masking 
algorithm. 

Take for example the case of two-device (parallel) era- 
sure. The CPU first writes the data word erase com- 
mand 2020h twice in succession. This starts erasure. 
After 10 ms, the CPU writes the data word verify com- 
mand AOAOh to stop erasure and setup erase verifica- 


tion. If both bytes are erased at the given address, then 
the CPU increments the address (by 2) and then writes 
the verify command AOAOh again. If neither byte is 
erased, then the CPU issues the erase sequence again 
without incrementing the address. 

Suppose at the given address only the low byte verifies 
FFh data? Could the whole chip be erased? The answer 
is yes. Rather than check the rest of the low byte ad- 
dresses independently of the high byte, simply use the 
reset command to mask the low byte from erasure and 
erase verification on the next erase loop. In this exam- 
ple the erase command would be 20FFh and the verify 
command would be AOFFh. Once the high byte verifies 
at that address, the CPU modifies the command 'back 
to the default 2020h and AOAOh, increments the ad- 
dress by 2, and writes the verify command to the next 
address. 

See Figure 8 for a conceptual view of the parallel erase 
flow chart and Appendix D for the detailed version. 
These flow charts are for 16-bit systems and can be 
expanded for 32-bit designs. 


RAISE Vpp 


PROGRAM ALL DEVICES TO OOh 


RESET ALL VARIABLES 
ISSUE ERASE COMMAND 


VERIFY COMMAND 


BOTH DEVICES ERASED 


LAST ADDRESS 


MASK 

HI-OR LO-BYTE 
COMMANDS 


* YOU MASK THE DEVICE BY SUBSTITUTING A RESET COMMAND 
FOR THE ERASE & VERIFY COMMANDS. THAT WAY THE 
ERASED BYTE IDLES THROUGH THE NEXT ERASE LOOP. 


Figure 8. High Performance Parallel Erasure (Conceptual Overview) 


7. Parallel Erasure and Programming require appropriate choice of Vpp supply to support the increased power consumption. 
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4.4.2 Quick-Pulse Programming Algorithm 

Flash memories program with a modified version of the 
Quick-Pulse Programming algorithm used for U.V. 
EPROMs. It is an optimized closed-loop flow consist- 
ing of 10 juts program pulses followed by byte verifica- 
tion. Most bytes verify after the first pulse, although 
some may require more passes through the pulse/verify 
loop. As with U.V. EPROMs, this algorithm guaran- 
tees a minimum of ten years data retention. See the 
device data sheets for more details on the programming 
algorithm. 


Algorithm Timing Delays 

The Quick-Pulse Programming algorithm has three dif- 
ferent time delays: 

• The first and third — Vpp set-up and verify set-up 
delays — are the same as discussed in the erasure sec- 
tion. In this case the third delay is for the transition 
between writing the Program Verify command and 
reading for valid data. 


The second delay is the “Time Out 10 jus” function, 
which occurs after writing the data and before writ- 
ing the program-verify command. This write com- 
mand internally stops programming. The section en- 
titled “Pulse Width Timing Techniques” gives 86- 
family assembly code for generating a 10 jlls timer 
routine. 


High Performance Parallel Device Programming 

Software for word- or double-word programming can 
be written in two different manners. The first method 
offers simplicity of design and minimizes software over- 
head by using a byte programming routine on each de- 
vice independently. Here you increment the address by 
2 or 4 when addressing 1 of 2 or 4 devices, respectively. 
The second method offers higher performance by pro- 
gramming the word or double-word data in parallel. 
This method manipulates the command register in- 
structions for independent byte control. See Figure 9 
for conceptual 2-device parallel programming flow 
chart and Appendix E for the detailed version. 


Raise Vpp 

Get Address/Data Word 
* Reset Command and 
Counter Variables 

Program Data < 

Word 


Time Out 10 p.s 


Stop Programming with 
Program Verify command 


i N Mask Hi or Lo Byte 

Data Word Programmed?— ►Increment Pulse Counter 

I Last Pulse? !!_ 

Y 

1 ♦ — More Data? 


Write Read command Write Read command 
Lower Vpp Lower Vpp 

Programming Complete Program Error 

292046-11 

*You mask the device by substituting a Reset command for the Program and Verify commands. That way, the pro- 
grammed bytes do not get further programmed on subsequent pulses. 


Figure 9. Parallel Programming Flow Chart (Conceptual Overview) 
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NOTE: 

Word or double-word programming assumes 2 or 4 
8-bit flash memory devices. 

Parallel Programming Algorithm Summary: 

• Decreases programming time by programming 2 
flash memories (16 bits) in parallel. The algorithm 
can be expanded for 32-bit systems. 

• Eliminates tracking of high/low byte addresses and 
respective number of program pulses by directing 
the CPU to write data- words (16-bit) to the com- 
mand register. 

• Maintains word write and word read operations. 
Should a byte on one device program prior to a byte 
on the other, the CPU continues to write word-com- 
mands to both devices. However, it deselects the 
verified byte with software commands. An alterna- 
tive is to independently program high and low bytes 
using hardware select capability. 

4.4.3 Pulse Width Timing Techniques 

Software or hardware methods can be used to generate 
the timing required for erasure and programming. With 
either method you should use an in-circuit emulator 
(ICE™) and an oscilloscope to verify proper timing. 
Also remove the flash memory device from the system 
during initial algorithm testing. 

Software Methods and Examples 

Software loops are easily constructed using a number of 
techniques. Timing loops need to be done in assembly 
language so that the number of clock cycles can be 
obtained from the instructions. 

In order to calculate a delay loop three things are need- 
ed — 

1) processor clock speed, 

2) clock cycles per instruction, and 

3) the duration of the delay loop. 

As an example, the 80C186 divides the input clock by 

2. With a 20 MHz input clock the processor’s internal 
clock runs at 10 MHz. This translates to a 100 ns cycle 
time. Delays can be made by loading the CX register 
with a count and using the LOOP instruction. The 


LOOP instruction takes 16 clock cycles to execute per 
pass. It decrements the CX register on each pass and 
jumps to the specified operand until CX equals zero. 

When writing a delay loop consider all instructions be- 
tween the start and end of the delay. If a macro is 
written that delays 10 jlls, add the clock cycles for all 
instructions in the macro. 

Here is an example of a 10 jus delay and the calculation 
of the constant required for a 10 MHz 80C186. 


WAIT 10 /as: 

push cx ;10 clock cycles 

mov cx, DELAY ;4 clock cycles 
loop $ ;see calculation 

pop cx ;10 clock cycles 

1. Start to End = 10 jus/cycle time 

= 10 /as/100 ns 
= 100 cycles 

2. Loop Instruction = 100-24 cycles 

= 76 cycles 

3. Loop Cycles = 76 

= (15 X [DELAY -1] + 5) 

4. Solving for DELAY = 6 


Hardware Methods 

Using an Internal Timer — 

Many microcontrollers and some microprocessors have 
on-chip timers. At higher input clock speeds these in- 
ternal timers have a resolution of 1 /as or better. The 
timers are loaded with a count and then enabled. The 
timer starts counting and when it reaches the terminal 
count a bit is set. The CPU executes a polling algorithm 
that checks the timer status. Alternatively, a timer-con- 
trolled interrupt can be used. After the timer has been 
set and the interrupt enabled, the CPU can be pro- 
grammed to wait in idle mode or it could continue exe- 
cuting until the timed interrupt. 
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One thing to take into account when using interrupts is 
the time required for the CPU to recognize and inter- 
rupt request (interrupt latency). This is important when 
figuring the timer value, because the time seen by the 
part will be the programmed delay plus the minmum 
interrupt latency time. 

The 80C186 has three 16-bit timers on-chip. Timer #2 
can be a prescaler for the other two timers, which ex- 
tends timers #0 and #1 range out to 2 A 32. By using 
two timers, 10 /is pulses and 10 ms pulses can be easily 
achieved. 

Using an External Timer — 

External timers can take many forms. One popular ex- 
ample is the 82C54 (CHMOS Programmable Interval 
Timer) which has three 16-bit timers on-chip. One tim- 
er can be used as a prescaler for the others so that a 
count of 2 A 32 can be achieved as with the 80C186 inter- 
nal timers. 


5.0 SYSTEM DESIGN EXAMPLE: 
AN 80C186 DESIGN 




Initialize H/W, Comm, 


Boot 

flash memory algo’s, etc. 

UCS 


FC000H 

Version update code, 


Application 

Data Accumulation storage, 
etc. 

MCSO 

RAM 

40000H 


Vector table, Stack, 
Buffers, etc. 

LCS 


0000 


Figure 10. 80C186 Memory Map 


The permanent code was placed in an EPROM in the 
UCS memory segment; this code includes routines for 
hardware initialization, communications, data upload- 
ing and downloading, erasure and programming algo- 
rithms, I/O drivers, ASCII to binary conversion tables, 
etc. This would be useful for systems reconfigured for 
different communication protocols as the last step prior 
to shipment. 


A general purpose controller and/or data acquisition 
system was built to demonstrate 86-based ISW. The 
80C186 CPU drives the system, which contains 
16 Kbytes of EPROM (two 27C64’s), 64 Kbytes of 
flash memory (two 28F256A’s), 64 Kbytes of SRAM 
(two 32K x 8’s) three 8-bit ports (82C55A), one serial 
port (82510), and a 5V to 12.0V DC/DC converter. 
Three 74HC573’s demultiplex the address/data bus 
and latch the byte high enable line (BHE#) and the 
status lines (if needed). Two data transceivers 
(74HC245) simulate the worst case data path for a sys- 
tem requiring added drive capability. If the transceivers 
are not needed they can be replaced with wired headers. 
See Appendix F for detailed schematics parts list, and 
changes for the 28F512 or 28F010. 

The 80C186 reset (output) drives the reset input on the 
82510, 82C55A, and the OE# inputs on the address 
latches and data transceivers. The reset line goes inac- 
tive 5 clock cycles before the first code fetch. Also, the 
CPU’s write signal is split into byte-write-high and 
byte-write-low to allow for byte or word writes. 

The 80C186 has on-chip memory and peripheral chip 
selects. Two of the memory chip selects are dedicated. 
One is the Upper Chip Select (UCS#, dedicated for the 
boot area) and the second is the Lower Chip Select 
(LCS#, for the interrupt vector table area). See the 
memory map in Figure 10. 


Code and constants that might change are placed in the 
64 Kbytes of flash memory. Application examples in- 
clude operating systems, code for rapidly advancing 
biomedical technologies such as blood test software, en- 
gine-control code and parameters, character fonts for 
printers, postage rates, etc. The RAM is used for the 
interrupt table, stack, variable data storage, and buff- 
ers. 



The three 8-bit ports on the 82C55A peripheral con- 
troller can be used for control and/or data acquisition. 
It powers-up with all port pins high. Similarly, all port 
pins go high after warm resets as well. Because the pins 
are high after a power-up/reset, an open collector in- 
vertor was used to control the MOSPOWER switch 
which in turn controls Vpp. You must drive the FET 
switch to one rail or the other to guarantee its low on- 
resistance. Vpp is turned off during power-up or reset 
as a hardware write protection solution. The DC/DC 
converter supplies Vpp. 

The 82510 is a flexible single channel CHMOS UART 
offering high integration. The device off-loads the sys- 
tem and CPU of many tasks associated with asynchro- 
nous serial communications. 
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The part can be used as a basic serial port for the host 
serial link, or can be configured to support high speed 
modem applications. For more information on the 
82510 see the 82510 data sheet and AP-401 “Designing 
with the 82510 Asynchronous Serial Controller”. 

Software was written to download code and data pa- 
rameters (code updates) from a PC to the demo board 
through the PC’s COM1 port (serial port). The system 
also can upload data (remote data acquisition) to the 
PC via the same link. 

Once the download code and data has been pro- 
grammed it can not be lost, even if power should fail. 
This is because Intel’s ETOX II flash memory technol- 
ogy is based on EPROM technology and does not need 
power to retain data. 

The end result: rugged, solid state, low power nonvola- 
tile storage. 


intel. 

6.0 SUMMARY 

Intel’s flash memories offer designers cost-effective al- 
ternatives for remote version updates or for reliable 
data accumulation in the field or factory. Designers will 
also benefit from time savings in any kind of code de- 
velopment — no 15 minute waits for U.V. EPROM era- 
sure. 

This application note covers the basics of in-system 
writing to flash memories and can be used as a check 
list for systems other than the 80C186 design shown. 
The basic concepts remain the same: a CPU controls 
the reprogramming operations; a 12V supply must be 
applied to the flash memory for erasure and program- 
ming; and a communications link connects the host to 
the remote system and supplies the code to be pro- 
grammed. 
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ON-BOARD PROGRAMMING DESIGN 
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INTRODUCTION 

On-board programming 1 (OBP) with Intel’s flash 
memory provides designers with cost reduction capabil- 
ities for alterable code storage designs. When used in 
conjunction with on-board programming, flash memo- 
ry presents opportunities for savings in two areas: 
greater testability in the factory, which translates to 
improved outgoing quality and reduced return rate; and 
quicker, more reliable field updates, which translates to 
decreased product support cost. 


This appendix: 

• outlines the design considerations associated with 
on-board programming, and the improvements af- 
forded by Intel’s flash memory; 

• offers guidelines for converting current 64K 
EPROM OBP designs; 

• designs an 8-bit system for on-board programming; 

• suggests some 16-bit flash design considerations; 
and offers information on OBP equipment and ven- 
dors. 


1 . With on-board programming, non-volatile memory is programmed while socketed or soldered on the application board, 
rather than before hand as a discrete component. This programming method is also called in-module or in-circuit program- 
ming, and has been practiced by some major corporations since 1981. See sidebar on following pages for more information 
on U.V. EPROM OBP usage. 



INTEL’S FLASH MEMORY— DESIGNED 5 Volt Vcc Erasure and Programming 

TO MEET YOUR OBP NEEDS Verification 


Intel’s flash memory simplifies OBP code updates by 
offering designers the command register architecture. 
As described in section 2.2, this architecture offers the 
full reliability of EPROM off-board programming 
without the hassles of elevating Vcc- 


Unlike EPROM OBP, flash memory enables Vcc to 
remain at 5.0V throughout all operations. Internal cir- 
cuitry derives the erasure and programming verification 
levels from the voltage on Vpp rather than from Vcc. 
These verify modes enable use of a single Vcc bus for 
the entire board, as opposed to the two buses needed for 
U.V. EPROM OBP. (See sidebar entitled EPROM 
OBP). 



EPROM OBP 


EPROM OBP has been a proven manufacturing technique since 1981. Ingenuity and clever circuit design have 
enabled manufacturers to overcome the hurdles associated with OBP and enjoy the benefits. 

In many cases, Intel’s flash memory simplifies today’s solutions and offers new capabilities to advance the state of 
OBP technology. The following paragraphs outline the hurdles and a few of the solutions in use today. 


EPROMs require program verification at an elevated Vcc t0 insure long-term data retention. PROM program- 
mers easily accommodate this requirement, and it is generally invisible to the end-user. 
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REPLACING CURRENT EPROM OBP 
DESIGNS WITH FLASH MEMORY 

Hardware Considerations 

A slight hardware modification is required to adapt 
most of the current EPROM OBP designs for use with 
Intel’s flash memory. Simply convert the EPROM 
memory sites from 28 to 32 pins. All other board-de- 
sign cirteria used for EPROM OBP apply to flash 
memory as well. (For discussions of these criteria see 
section entitled New OBP Designs). 

Standard EPROM OBP requires the board designer to 
bus PGM# to the edge connector. With flash memo- 
ries’ command register architecture, this same trace en- 
ables electrical erasure and programming, only now the 
line is called Write Enable (WE#). The timing for 
WE# is similar to that of read accesses, although that 
is handled via software changes. 

Another potential hardware change is on the board 
programmer side of the design -the Vpp supply. Many 
EPROMs program with 12.5- 13.0V Vpp supplies. In- 
tel’s ETOX II flash memory requires 11. 4- 12.6V Vpp. 
This change should not be an issue since the Vpp sup- 
ply on many board programmers is programmable. 

Mixed memory systems containing both conventional 
U.V. EPROM and flash memories require special con- 
sideration. This type of memory design requires separa- 
tion of the Chip Enable (CE#) control lines between 
the EPROM and flash devices to allow for independent 
reprogramming control and access. The PGM# and 


WE# lines can be common if the board programmer 
can give the appropriate timings to either type of de- 
vice. 


Software Considerations 

Manufacturers who program EPROMs on-board today 
will need new board-programmer software to take ad- 
vantage of flash memory’s feature set, specifically soft- 
ware for the Quick-Erase and Quick-Pulse Program- 
ming algorithms. 


Benefits of Converting Your EPROM OBP 
Design to Flash 


The most pressing reason to convert from a standard 
EPROM to flash memory is the total cost savings. To 
appreciate this, you must consider your way of doing 
business at the board and system levels — from the fac- 
tory to installation and repair in the field. In the facto- 
ry, boards can be tested with a diagnostics program in 
the flash memory and then erased and reconfigured for 
shipment in the same step. Improved testing will de- 
crease the probability of field failures and costly cus- 
tomer returns. Simplified test and rework methods will 
decrease your inventory holding costs. Also, if in the 
process of converting to flash memory you include the 
ability to OBP via a cable-connector, service calls for 
code updates will be quicker, more reliable, and cost 
less money. Your serviceman would simply connect the 
programming equipment to the system without disman- 
tling it to remove the EPROMs. (See section entitled 
The System/Board-Programmer H/W Connection for 
details.) 



EPROM OBP (cont’d) 

With OBP, the EPROM board-programmer handles the elevated-V<x requirement easily as well. However, 
when V cc is greater than 5V, logic devices populating the same board may draw excessive current and not 
operate predictably. 

One solution to this issue involves running separate Vqc traces to the board’s edge connector— one for EPROM 
programming, and one for powering up the rest of the board. 

A second consideration when designing for EPROM OBP has been accessing manufacturer and device codes. 

The identifier mode requires forcing A9 to 12V. This translates to adding extra isolation, which implies the 
increased costs of buffers and extra board space. 
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NEW OBP DESIGNS 

Design Considerations 

As with EPROM in-circuit programming, flash memo- 
ry board programming requires the use of a board-pro- 
grammer. Unlike U.V. erasure for standard EPROM 
OBP, electrical erasure enables flash memory OBP 
without removing the board from the system. 

We will look at designing a board that is to remain pow- 
ered-up in the system during erasure and reprogram- 
ming. The key concept is to design the board in such a 
way that the programmer can take control of the system 
during code updates. The implementation of such a de- 
sign is straightforward, easy, and suited to automated 
production assembly. 

Taking Control 

The board-programmer needs to take control of the 
system’s address bus, data bus, control lines, etc. to 
update the code without damaging the system. (See 
Figure 2. System to Board-Programmer Interface.) 
Taking control simply means isolating the rest of the 
system from these lines. 

Various methods of isolating the memory from the sys- 
tem include using tristate buffers, latches, or even the 
capabilities designed into microprocessors (julP) and mi- 
crocontrollers (jliC). For example, Intel’s 86-based juP 
family has HLD/HLDA signals that were set-up for 
multiprocessor system designs where bus control is a 
major concern. The HLD signal, when acknowledged, 
tristates the address, data, and control lines. Although 
not designed for multiprocessor environments, Intel’s 
MCS®-51 and MCS-96 microcontroller families have 
Reset capabilities to help simplify this same task. 


inlel. 

One issue to be aware of when using a CPU’s reset 
control function is that it may switch from the reset to 
active condition at a non-standard logic level. This only 
presents a problem if the address/data buffer takes 
longer to activate than the CPU, and the CPU attempts 
to fetch code from a memory device isolated from it. 

One approach to insure successful programming take- 
over (i.e. without bus contention) is to have the board- 
programmer’s lines in a high impedance state during 
connection to the system. Once connection to the sys- 
tem has been secured, the serviceman could hit a button 
on the board-programmer to start the system takeover 
procedure. Then when total control has been estab- 
lished, the programmer would commence with erasure 
and reprogramming. 

Aside from the flash device’s isolation from the system, 
various CPU control lines (MEMRD#, WE#, 
PSEN # , etc.) may need isolation as well. If active dur- 
ing Reset, these lines may put the CPU into an unspeci- 
fied state. When designing a board for OBP, check the 
\xC/ juP data sheets carefully for any special reset con- 
ditions. 

Printed Circuit Board Guidelines for 
Vcc and Vpp 

Programming conventional EPROM and flash memo- 
ries takes 30 mA of current on Vcc an d Vpp, due to 
the nature of hot-electron injection. Most of the charge 
transfers to the memory cell’s floating gate in a short 
current spike during the first pulse. You should design 
both the Vcc and Vpp traces with A.C. current spikes 
in mind. Wherever possible, limit the inductance by 
widening the two traces. Bypass capacitors (0.1 jliF) 
should be placed as close as possible to the memory 
device’s Vcc and GND pins, as well as the devices Vpp 
and GND pins. The capacitor on Vcc decreases the 
power supply droop. The capacitor on Vpp supplies 
added charge, and filters and protects the memory from 
high frequency over-voltage spikes 2 . 


2. For a complete discussion of electrical noise, grounds, power supply distribution and decoupling see Ap-74— High Speed 
Memory System Design Using the 2147H, and AP-125 — Designing Microcontroller Systems for Electrically Noisy Environ- 
ments. 


EPROM OBP (cont’d) 

Some users of OBP get around this issue by programming all EPROMs with a common algorithm. However, this 
practice compromises the device’s reliability, and should not be done. 

A better solution than ignoring the identifier is to choose a qualified EPROM vendor and program with its 
algorithm only. 

One subtle concern with EPROM OBP that designers often overlook is U.V. board erasure. 

— * U.V. EPROM board erasure requires removal of the board from its host system. This incurs the hidden 
costs of labor, lower yields due to handling, and the reliability risks of dismantling a system. Flash memory 
decreases these costs by enabling a greater degree of factory automation, and increases the flexibility afforded by 
OBP. 
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SYSTEM CARD 


BOARD-PROGRAMMER 


High Order Address 
Line for Memory 
Select 


Address Bus for 
Chip Enables 
and Flash Memory 
Address Inputs 


Device Address 
Lines 


Data Bus for 
Input/Output 


Sys. Interface 
Control Lines 


CE# - Decoder Enable Line 
OE# - Read Control Line 
WE# - Erase/Program Lines 
Vpp - Programming Power 

GND 


During normal system read operation, all interface traces are left open-circuited. Some of the lines have pull-downs or 
weak pull-ups to insure proper device operation. 

Figure 2. System to Board-Programmer Interface 


EPROM OBP (cont’d) 

— > Special U.V. board erasers must be purchased, at significant costs and with limited throughput. A low-end 
U.V. bulb costs $75~$100 each. A U.V. board eraser system could cost upwards of $10,000, with recurring costs 
of light bulbs and energy. Thus, the cost of U.V. erasure is often under-estimated. 

— > Although portable board programmers are commercially available, U.V. lights by nature are not very 
rugged, and are not suited for out-of-factory code updates. This complicates field service. 


— > Erasure can be easily controlled in a lab environment; however, it is not as clear on the manufacturing floor 
which label to remove for U.V. erasure, because parts other than EPROMs have windows (i.e. EPLD’s, micro- 
controllers with embedded EPROM memory, etc.) 
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The System/Board-Programmer Hardware 
Connection 

In most U.V. EPROM OBP applications, designers use 
the board’s edge-connector as the programmer inter- 
face. This approach is the lowest cost solution for stan- 
dard EPROM technology because U.V. erasable devic- 
es require system disassembly for erasure anyway. With 
flash memory, you can eliminate the system disman- 
tling and capitalize on the erase feature by adding a 
cable connector to the board for reprogramming pur- 
poses. The connector should extend from the board 
through the system’s chassis, and should be easy to 
reach by a serviceman. 

Various types of cables exist on the market that could 
be used to connect programming equipment to the sys- 
tem. The key design consideration when choosing the 
type of cable is elimination of all transient noise that 
would interfere with the programming or erasure pro- 
cess. 

Three types of noise interference and methods to dimin- 
ish the noise are as follows: 

1. line to line cross-talk (due to board-programmer’s 
drivers that drive sharp step functions on adjacent 
address lines); solved with either ribbon cables, hav- 
ing alternate lines grounded, or with braided twisted- 
pairs that have a ground line for each active signal; 

2. programmer line-driver-to-board impedance mis- 
matches leading to transmission line effects of signal 
reflection, and interference; solved by limiting cable 
length, decreasing programmer switching speed (or 
allowing longer settling time between address 
switches) or by using matched line drivers on the 
programmer and high impedance buffers on the 
board end, or by using series termination resistors on 
the driving end of the cable (i.e. — board-programmer 
end, with the exception of the bi-directional data bus 
which needs series resistors at both ends); 

3. rf pick-up in electrically noisy environments; use ei- 
ther shielded cable such as coax, ribbon cable with 
solid copper ground plane, or a new type that has 
recently become available called Flex cable. 

Braided twisted-pair cables when kept under three feet 
in length generally reduce cross-talk to acceptable lev- 
els. This type of cable offers the most cost-effective so- 
lution which works well in most applications. Depend- 
ing on the environment, the programmer and your de- 
sign, you may need a combination of solutions, such as 
braided twisted-pairs with series termination. 


At first all of these alternatives may seem expensive or 
superfluous, but keep in mind that the cost of a single 
cable and programmer gets amortized over the total 
number of systems programmed. 


AN 8-BIT BUS DESIGN EXAMPLE 

An example of an in-circuit reprogrammable controller 
board is an 80C31, two 28F256A’s and some glue 
chips. (See Figure 3. for a system block diagram. See 
Appendix A. for a detailed system schematic.) 3 4 The 
important issues for erasure and reprogramming are as 
follows: 

1. the board-programmer must have uncontested access 
and control of the flash memory array; and 

2. the microcontroller must be reset (un-active) during 
the erasure and programming cycles. 


SYSTEM DESIGN 

Bus Control Circuitry 

The 80C3 1 has an active-high reset pin, which tristates 
the address and data bases. Route this line (RESET) to 
the programming connector. Tie the OE# pins on the 
low-order address latch (74HCT573), and the PSEN# 
buffer-enable (74HCT 125)4 together, and route that 
line MEMWR 5 to another pin on the programmer-in- 
terface connector. 

During normal system operations when the jjlC reads 
program code from the 28F256 devices, the pull-down 
on MEMWR keeps the address latches and PSEN# 
buffer active. During flash memory OBP, the board- 
programmer drives MEMWR active-high, which dis- 
ables these outputs, and isolates the address bus and 
PSEN # from the programming signals. 

The board-programmer must independently control the 
RESET and MEMWR traces because they disable at 
different Vjl values (2.5V for RESET vs 0.8V for 
MEMWR). If controlled by the same 5V supply, on 
power-up or after a reset condition the fxC would try to 
execute code while still isolated from its code source — 
specifically before the address latches and PSEN# 
buffer activate. 


Address Decode Circuitry 

This design shows two 28F256A flash memories. Sys- 
tems with more than one memory device typically de- 
code the CPU’s high-order address to select a particu- 
lar device. 


3. Note that the flow-through latch on the data bus is not needed with the 80C31, but is drawn as an example for CPU’s that 
can not tristate their data bus. 

4. The isolation buffer is required on PSEN# in this design because the 80C31 goes into unspecified states when the Reset 
and PSEN# lines are active simultaneously. To avoid any possible problems, buffer PSEN#. 

5. MEMWR = > bus isolation control of PSEN# and the data bus. 



Figure 3. System Block Diagram 
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This is accomplished as illustrated. When A15 is low, 
the lower 32K bytes are selected. The output of the 
inverter drives the other 28F256A’s chip enable. This 
type of memory architecture promotes power savings 
by disabling all memories but the one being addressed. 

To accomplish this two-line memory control architec- 
ture, route the inverter’s input A15 to the 80C31 and to 
the programmer interface connector. 8 The board-pro- 
grammer controls the inverter’s output enable with 
MEMEN # . 9 The MEMEN# line performs the func- 
tion normally performed by CE# in component pro- 
gramming. When driven to a logic “1” level 
MEMEN # pulls the inverter’s output high. This dese- 
lects all memory devices controlled by that I.C. During 
normal read and standby operations, the pull-down on 
MEMEN # keeps the decoder enabled. 

Erasure and Programming Control Circuitry 

In this design, Vpp and WE# are active only during 
reprogramming. At other times, the two inputs would 
be inactive. Simply tie the WE# line to Vcc through a 
pull-up resistor. The pull-up limits the current to the 
board programmer during reprogramming. (Recall that 
WE# is active low.) Flash memories allow Vpp to be at 
12V, Vcc ° r ground for read operations. This design 
ties Vpp to Vcc through a diode and resistor to allow 
for EPROM OBP compatibility. If this option is not 
required, simply tie Vpp to ground through a current- 
limiting pull-down resistor. 

Returning Control to the Host System 

The board-programmer should return system-control 
to the host processor in an organized manner. First it 
should lower Vpp from 12V to 5V, or ground. Then the 
board programmer should place its address and data 


buses into a high impedance state. Next PS2, which 
controls MEMWR should be tristated thus disabling 
the PSEN# /Address latch isolation. Finally the board- 
programmer should switch PS1, which drives the RE- 
SET line to reactivate the juC. This sequence guaran- 
tees that the /xC will begin operation at a known pro- 
gram code location. 


16-BIT BUS DESIGN 
CONSIDERATIONS 

An example of an On-Board programmable 16-bit sys- 
tem board would be an 80C186 microprocessor, two 
28F010 flash memories, RAM, and some glue chips. 
The basic hardware design considerations would be the 
same as those in the previously discussed 8-bit bus ex- 
ample. 

There are a few issues with 16-bit designs that do not 
arise in 8-bit designs. For the programmer to take con- 
trol of the system, it must tristate and reset the ju.P as 
well as tristate the bus buffers and latches. The HOLD 
and RESET lines of Intel’s 86-based family of micro- 
processors have been designed with bus isolation in 
mind for use in multiprocessor systems. 

The designer has two options for erasing and program- 
ming the high and low bytes of the flash memory array 
independently. 

1) The designer can route two WE# lines to the pro- 
grammer connector — BYTE HIGH WE# and BYTE 
LOW WE#. 

2) The reprogramming software can follow the masking 
procedure shown in section 4.4. This method allows a 
common WE# line for the high and low bytes. 


8. Note the lack of isolation buffers between the 80C31’s high order addresses (Port 2) and the board-programmer interface, 
compared to the latch separating the low order addresses (Port 0) and the interface. In this design example, we make use of 
the 80C31’s ability to tristate these ports, so no isolation is needed for any of the addresses. The latch on Port 0 is for the 
time-multiplexed address/data architecture of this microcontroller, and not specifically for isolation. 

9. MEMEN = memory enable, active low. 
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OBP EQUIPMENT AND VENDORS 

If you are considering OBP for your next design, and 
have not used on-board programming before, you will 
need to choose a board-programmer vendor. Various 
suppliers offer OBP systems; therefore, it is well worth 
it to send out requests for programming support bids. If 
your production volume justifies the purchase of more 
than one board-programmer, you may want to negoti- 
ate a non-recurring engineering charge for development 
cost, followed by variable costs for additional units. 

Most vendors offer a variety of basic systems, designed 
to easily adapt to your needs. Systems can be purchased 
that program either single boards serially, or a number 
of boards in parallel. Light-weight OBP equipment de- 
signed for field reprogramming can also be obtained 
from some of the vendors. 

Most companies will work directly with you at the be- 
ginning of your design phase to ensure OBP compati- 
bility. If your design is beyond the definition stage, the 
programmer manufacturer will request a copy of your 
schematics or block diagrams under non-disclosure. 
The vendor has an OBP design specialist that will 
check the design for OBP compatibility. Any potential 
problems will be located and corrected at this early 
stage. 

Every board’s architecture is different (i.e., based on 
different central processing units (CPU), decoding 
schemes, buffering methodologies, interface connectors, 
and types and densities of memories). Vendors write 
custom software modules for each application. Also, 
the vendor or the board designer typically builds an 
interface jig to connect the board’s edge connector to 
the programmer. This choice is often left as a decision 
for the designer. 


Partial List* of Companies Selling 
Board-Programmers 

Following are a few of the companies who offer on- 
board programming solutions today: 

Data I/O Corp. 

Digelec 

Elan Digital Systems 

Oliver Advanced Engineering, Inc. 

Stag Microsystems, Inc. 

*This list is intended for example only, and in no way 
represents all companies that support on-board pro- 
gramming. Intel Corporation assumes no responsibili- 
ty for circuity other than circuitry embodied in an In- 
tel product. No other circuit patent licenses are im- 
plied. 


SUMMARY 

• On-board programming (OBP) has been around 
since 1981. 

• Designing a board for OBP can be easily done by 
working with a board-programmer vendor’s OBP- 
design-specialist during the initial design phase. 

• In-circuit alterable code storage can be easily imple- 
mented by using flash memory and it’s features. 

• Time and money savings can be realized in a num- 
ber of ways by taking advantage of flash memory 
OBP: 

< > Decreased board costs and improved reliability 

from elimination of EPROM sockets; 

<> Decreased manufacturing costs from elimination 
of board eraser depreciation costs, recurring U. V. 
light bulb and energy expenses; 

< > Decreased inventory expense from simplified test 

and rework methods (one-step diagnostics, era- 
sure, and board configuration); 

< > Decreased product costs based on decreased 

board-handling loss; 

< > Improved board diagnostics and testability leading 

to higher quality and decreased customer returns; 
and 

< > Quicker, more reliable field code updates. 


5-144 



AP-316 


iny 


APPENDIX B 

V PP GENERATION CIRCUITS 


Circuit # 1 — Regulation from a higher voltage 

Circuit #2 — Regulation from a higher voltage 

Circuit # 3 — Regulation from a higher voltage 

Circuit #4 — 5V to 12V Boost 

Circuit #5 — 5V to 12V Boost 

Circuit #6 — Monolithic DC/DC Convertor 

For more detailed information on Vpp generation circuits, see AP-357 titled Power Supply Solutions for Flash 
Memory (Order Number 292092). 


Circuit #1 


Down Conversion 

(From 14.0V-26.0V to 12.00V) 



COMPONENTS 

COST* 

LM2391CT 

$0.75 

R1 = 20Kft,1% 

0.045 

R2 = 180Ka,1% 

0.045 

R3 = 10 Kn 

0.02 

Cl = 0.1 /xF 

0.02 

C2 = 100 jaF 

0.15 


$1.03 


NOTES: 

— The LM2391 offers an enable pin for added data protection. 
— The drop out voltage is 0.6V. 

— R3 is NOT required if Vpp enable is driven by a CMOS device. 
*Cost approximations assume 10,000 piece quantity. 
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Circuit # 2 


Down Conversion 

(From 16.00V-26.00V to 12.00V) 



COMPONENTS 

COST* 

LM-317 

0.40 

R1 = 1240,1% 

0.045 

R2 = 10700, 1% 

0.045 

Cl = 0.1 jllF 

0.02 

C2 = 100 jaF 

0.15 


$0.66 


NOTES: 

LM-317 requires a minimum Vin-Vqut = 3 -°V 
*Cost approximations assume 1 0,000 piece quantity. 


Circuit #3 


Down Conversion 

(From 15.0V-40.0V to 12.00V) 



292046-14 

COMPONENTS COST* 


LT-1085 2.50 

R1 = 1240,1% 0.045 

R2 = 10700,1% 0.045 

Cl = 10 jitF 0.10 

C2 = 1 0 jaF 0.10 


$2.79 


NOTES: 

LT-1085 requires a minimum V|n-Vout = 1.5V 
“"Cost approximations assume 10,000 piece quantity. 
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Circuit #4 


Up Conversion 

(From 5V to 12.0V) 


5V 



COMPONENTS COST* 


LT1072 1.82 

R1 = 10.7k, 1% 0.045 

R2 = 1.24k, 1% 0.045 

R3 = Ik, 5% 0.02 

R4 = 120k, 5% 0.02 

R5 = 270k, 5% 0.02 

Cl = 1 julF 0.10 

C2 = 1 jllF 0.10 

C3 = 1 0 jliF 0.15 

LI =150 jutH 1.00 

Q1 = 2N3904 0.10 


$3.42 


NOTES: 

Drive Vpp COMMAND low to turn on the circuit. 
*Cost approximations assume 10,000 piece quantity. 
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VppOUT 

R1 

R2 

Resistor 

Tolerance 

12.0V 

10.7k 

1.24k 

1% 
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Circuit #5 


Up Conversion Circuit 

(From 5.0V to 12.0V) 


+ 5v 


V+ 

+ 5v 

Valor 

V+ 


PM7006 

V- 

GND 

GND 

V- 


iny 


COMPONENTS 

COST 1 

PM7006 

$6.25 

Cl = 0.1 jitF 

0.05 

BuzIlA 

2.59 


$8.89 


NOTES: 

1. The capacitor decreases output noise to 140 mV pk-pk. 

2. We added the BuzIlA Mospower nFET to enable/disable the converter. This control minimizes power consumption 
which under full load can reach 600 mA. 

3. The voltage drop across the switch is 0.1V. Due to this drop the PM7006 will not maintain the Vpp spec with 10% 
fluctuations in Vcc supply. 

•Cost approximations assume 10,000 piece quantity. 
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APPENDIX C 

LIST* OF DC-DC CONVERTER COMPANIES 


AT&T MICROELECTRONICS t 
3000 Skyline Drive 
Mesquite, TX 75149 
Tel: (800) 526-7819 
Fax: (214) 284-2317 

BURR-BROWN CORP.t 
P.O. Box 11400 
Tucson, AZ 85734 
Tel: (800) 548-6132 
Fax: (602) 741-3895 

LINEAR TECHNOLOGY CORP.A 
1630 McCarthy Blvd. 

Milpitas, CA 95035 
Tel: (408) 432-1900 
Fax: (408) 434-0507 

MAXIM INTEGRATED PRODUCTSA 

120 San Gabriel Drive 

Sunnyvale, CA 94086 

Tel: (408) 737-7600 

Fax: (408) 737-7194 

MOTOROLA INC.A 
2100 E. Elliot Rd. 

Tempe, AZ 85284 
Tel: (800) 845-6686 


NATIONAL SEMICONDUCTOR CORP.A 
Mt. Prospect, IL 60056 
Tel: (800) 628-7364 
Fax: (800) 888-5113 

SHINDENGEN AMERICA, INC.t 
2649 Townsgate Rd., Suite 200 
Westlake Village, CA 91361 
Tel: (800) 634-3654 
Fax: (805) 373-3710 

SILICONIX INC.A 
2201 Laurelwood Rd. 

Santa Clara, CA 95056 
Tel: (800) 554-5565 
Fax: (408) 727-5414 

TOKO AMERICA, INC.t 
1250 Feehanville Drive 
Mount Prospect, IL 60056 
Tel: (708) 297-0070 
Fax: (708) 699-7864 

VALOR ELECTRONICS t 
6275 Nancy Ridge Dr. 

San Diego, CA 92121 
Tel: (619) 458-1471 



This list is intended for reference only, and in no way represents all companies that support power conversion 
products. Since this industry develops many new solutions each year, Intel recommends that the designer contacts 
the vendors for the latest products. Intel will continue to work with the industry to develop optimum solutions for 
power conversion. Intel Corporation assumes no responsibilities for circuitry other than circuitry embodied in Intel 
products. No other circuit patent licenses are implied. 

tMonolithic Solutions 

ADiscrete DC to DC Converter Solutions 
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APPENDIX D 

PARALLEL ERASE FLOW CHART 



COMMENTS 


Wait for Vpp to stabilize. 


Use Quick-Pulse Programming 
algorithm. 

Initialize Variables: 

PLSCNT HI = HI Byte Pulse 

Counter 

PLSCNT LO = Low Byte Pulse 

Counter 

FLAG = Erasure Error Flag 
ADRS = Address 

E COM = Erase Command 

V__.COM = Verify Command 

Erase Set-up Command 


Start Erasing 


Duration of Erase Operation. 

Erase Verify Command stops 
erasure. 


See next page for subroutine. 

When both devices at ADRS are 

erased, F DATA = FFFFH. 

If not equal, increment the pulse 
counter and check for last pulse. 

Reset commands to default 

(E COM = 2020H, 

V COM = AOAOH) 

before verifying next ADRS. 


Reset devices for read operation. 


Turn off Vpp. 


292046-34 


5-150 




AP-316 


int©!. 

Device Erase Verify and Mask Subroutine 



COMMENTS 


This subroutine reads the data word 

(F DATA). It then masks the HI or 

LO Byte of the Erase and Verify 
commands from executing during 
the next operation. 


If both HI and LO bytes verify, then 
return. 

Mask* the HI Byte with 00H. 


If the LO Byte verifies erasure, then 
mask* the next erase and verify 
commands with FFH (Reset). 

If the LO Byte does not verify, 
increment its pulse counter and 
check for max count. FLAG = 1 
denotes a LO Byte error. 


Repeat sequence for the HI Byte 


FLAG = 2 denotes a HI Byte error. 
FLAG = 3 denotes both HI and LO 
Byte errors. 


* Masking can easily and efficiently be done in assembly languages. Simply load word registers with the incoming flash 
data (F DATA), the erase commands and the verify commands. Then manipulate the HI or LO register contents. 
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APPENDIX E 

PARALLEL PROGRAMMING FLOW CHART 


Start Program 
Apply Vpph 


COMMENTS 


Wait for Vpp ramp to Vppn 


Get ADRS/P_DAT 
, -i 

Initialize: 

PLSCNT HI = 0 

PLSCNT LO = 0 

FLAG = 0 

V DAT = P DAT 

P_COM = 4040H 

V COM = C0C0H 

Write xx/P_COM 

\ — 

Write ADRS/V DAT 

♦ 

Time Out IOuS 

~ =T~ 

Write ADRS/V_COM 

* 

Time Out 6uS 


High/Low Byte 
Compare & Mask 
Subroutine 


ADRS = address to program 
P_DAT = data word to program 

Initialize Data Word Variables: 

PLSCNT HI = HI Byte Pulse 

Counter 

PLSCNT LO = LO Byte Pulse 

Counter 

FLAG = Program Error Flag 

V DAT = valid data 

P COM = Program Command 

V__COM = Verify Command 

Program Set-up Command 
xx = Address don’t care 

Program 

See next page for subroutine 


Program Verify Command 


ReadADRS/F DAT 


"T___D AT -- P_D AT 


FLAG = 0 

? 


F DAT = flash memory data 

Compare flash memory data 
to valid data (word compare). If not 
equal, check for program error 
flag. If flag not set, compare High 
and Low Byte in subroutine. 


More Data 

? 


Check buffer or I/O port for 
more data to program. 


Write READ COM 


Apply Vppi_ 


Write READ_COM 

I 

Apply V PPL 


Reset device for read operation. 


Turn off Vpp. 
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Program Verify and Mask Subroutine 























AP-316 




APPENDIX F 

DETAILED SYSTEM SCHEMATICS 



D3 PI Q3 
4 D2 Q2 17 

13 D1 Q1 31Z 

_2 DO QO ia_ 

OE# J 

JL1 LE GND 


i D3 PI Q3 Jfi, 
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256K FLASH MEMORY DEMO PARTS LIST 


Device 

Component 

Pins 

Description 

in 

80C186 

68 

1 6-bit high integration CPU 

[2.3,4] 

74HC573 

20 

Latch 

[5,6] 

74HC245 

20 

Transceiver 

[7] 

74HC32 

14 

OR gate 

[8L,8H] 

27C64 

28 

16 Kbyte EPROM 

[9L,9H] 

28F256A 

32 

64 Kbyte flash memory 

[10L.10H] 

32K x 8 SRAM 

28 

64 Kbyte SRAM 

[11] 

82510 

28 

Asynchronous Serial Controller 

[12] 

14C88 

14 

RS-232 Line Driver 

[13,14] 

14C89 

14 

RS-232 Line Receiver 

[15] 

82C55A 

40 

Programmable Peripheral Controller 

[16] 

PM7006 

24 

DC/DC Convertor (5V-1 2.00V) 

[17] 

7406 

14 

Invertor — Open Collector (O.C.) 

Cl 

20 jllF 

2 

Capacitor for CPU reset 

D1 

1N914 

2 

Diode for CPU reset 

FI 

BUZ11A 

3 

MOSPOWER nFET 

J1 

DB-25 

25 

Connector (male) 

OSC-1 

20 MHz 

14 

CPU Oscillator 

OSC-2 

18.432 MHz 

14 

Serial Controller Oscillator 

R1 

10 Ka 

2 

y 4 W, 1 0% Resistor for CPU reset 

R2 

1 Ka 

2 

y 4 W, 1 0% Resistor for O.C. pull-up 

SW1 


3 

Momentary Push Button for CPU reset 


NOTES: 

1. Place a 0.1 juF bypass capacitor at the Vcc input of each 1C. 

2. Place a 0.1 u,F bypass capacitor on the Vpp input of each 28F256 flash memory. 


28F512 UPGRADE FOR THE 
80C1 86/FLASH MEMORY DESIGN 

To upgrade the 80C1 86/Flash memory design to han- 
dle 28F512’s, the range of the CE# signal has to be 
increased. There are a number of ways to generate a 
CE# signal that will span the 128 Kbyte address range 
of two 28F512 devices. 

1. AND two of the current MCS lines together (defined 
for 64 Kbytes each); or 


2. Change the MCS individual block-select size from 
64 Kbytes: 

MMCS VALUE = 41F8H, 

MPCS V ALUE = OAOB8H 

to 128 Kbytes: 

MMCS VALUE = 01FEH, 

MPCS VALUE = 0C0BEH 

Also, cut the CE# trace to the RAM sockets. Then 
wire MCSO# to the RAM CE#. This eliminates the 
MCSO# and LMCS# range overlap caused by in- 
creasing the MCS range to 128 Kbytes. See 80C186 
Data Sheet page 21 and 22 (Order # 270354). 
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28F010 UPGRADE TO THE 
80C 186/FLASH MEMORY DESIGN 

To upgrade the 80C186/flash memory design to handle 
28F010’s, a CE# signal has to be generated. There are 
a number of ways to generate a CE# signal that will 
span the 256 Kbyte address range of two 28F010 devic- 
es. 

1. AND two of the MCS lines together (defined for 128 
Kbytes each as noted in the 28F512 modifications): 

Cut the LMCS trace to the RAM sockets. Connect 
MCSO# to CE# on the RAM sockets (U10L,UH). 

Cut the MCS2# trace to the flash memory. Add an 
AND gate. Connect MCS2# (cut trace) and 
MCS3# to the inputs of the AND gate. Then wire 
the AND gate output to the CE# of the flash memo- 
ries. 

Also, change the onboard memory MCS register to: 

MMCS VALUE = 01FEH, MPCS_ 

VALUE = OCOBEH [ 128K blocks] , 

and delete: 

LMCS REG and LMCS_Value. 

2. Add a decoder; 

Add a decoder (74HC138). Connect address lines 
A18 and A 19 to the B and C inputs of the decoder. 
Tie the A input of the decoder low, and enable all the 
enables. By using outputs YO, Y2, Y4, and Y6, you 
have four CE# lines decoding 256 Kbyte blocks 
each. 

Cut the MCS2# trace to the flash memories. Con- 
nect the Y2 output from the decoder to the CE# 
input of the flash memory. 
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Figure 2. Integrated Latch and Decoder 


3. Replace the address latch (U2) with a PLD that 
latches and decodes. 

Program a 5C032 as an integrated latch and decoder. 
Replace the upper address latch [U2] with the Intel 
5C032 EPLD. Cut the CE# trace to the flash mem- 
ories. Connect the flash memories’ CE# to the 
5C032 pin 12. This maps the address space 40000H 
to 7FFFFH. See Figures 1 and 2 for a comparison of 
the 74HC573 (U2) and programmed 5C032 pin outs. 
Figure 3 is the source code for the EPLD. 

Also, change the value of the MMCS and MPCS 
registers to 64 Kbyte blocks so that the MCSO# 
range does not overlap the LMCS range. 

MMCS VALUE = 41F8H, MPCS_ 

VALUE = 0A0B8H. 
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Figure 1. Latch Pinout 
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Thom Bowns - PLFG Applications 
Intel 

January 13, 1989 
EPLD HOTLINE: 1-800-323-EPLD 
002 
5C032 

Custom Latched Decoder 
OPTIONS: TURBO = ON 
PART: 5C032 

INPUTS: ALE@11, RESET@1, A19@5, A18@4, A17@3, A16@2, nBHE@6 

OUTPUTS: LA18@17, LA17@18, LA16@19, LnBHE@15, nCE3@14, LA19@16, 

nCE2@13 , nCEl@12 

NETWORK : 

ALE = IN (ALE) 

RESET = INP (RESET) 
nRESET = NOT (RESET) 

A19 = INP (A19) 

A18 = INP (A18) 

A17 = INP (A17) 

A16 = INP (A16) 
nBHE = INP (nBHE) 

LA19 , LA19 = COIF (LA19d, nRESET) 

LA18, LA18 = COIF (LA18d, nRESET) 

LA17, LAI 7 = COIF (LA17d, nRESET) 

LA16, LA16 = COIF (LA16d, nRESET) 

LnBHE , LnBHE = COIF (LnBHE, nRESET) 
nCE3, nCE3 = COIF (nCE3, nRESET) 
nCE2, nCE2 = COIF (nCE2, nRESET) 
nCEl, nCEl = COIF (nCEl, nRESET) 

EQUATIONS : 

LA19d = A19 * ALE + LA19 * !ALE ; 

LA18d = A18 * ALE + LA18 * !ALE ; 

LA17d = A17 * ALE + LA17 * !ALE ; 

LA16d = A16 * ALE + LA16 * IALE ; 

LnBHEd = nBHE * ALE + LnBHE * IALE; 

nCE3d = nCE3EQN * ALE + nCE3 * !ALE ; 

nCE2d = nCE2EQN * ALE + nCE2 * !ALE ; 

nCEld = nCElEQN * ALE + nCEl * IALE; 

nCE2EQN = !(A19 * 1A18) ; 

nCElEQN = !( IA19 * A18) ; 

nCE3EQN = !( IA19 * A18 + A19 * IA18) ; 

ENDS 

Figure 3. Source Code for the Integrated Latch and Decoder 
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INTRODUCTION TO 
REPROGRAMMING 

You Are in Control 

Rewriting any type of memory requires hardware or 
software control. Traditional EEPROM designers com- 
bined all control functions into each chip’s periphery. 
This provided a highly functional chip but at a high 
price. On the other hand, DRAM designers provided a 
bulk memory with little integrated peripheral circuitry. 
Each system designer then accommodated the DRAM 
with external refresh signals and learned quickly that 
failure to refresh yielded non-functioning memory 
boards. Initially, software drivers controlled DRAM 
refresh; today controllers provide the same function. 

Similarly, early disk drives required every user to write 
software to manipulate drive head movement. Failure 
to follow drive specifications and algorithms caused ir- 
reversible head crashes. Leading-edge engineers faced 
these challenges and triumphed, as evidenced by the 
sophisticated systems available today. 

Since 1988, thousands of engineers have written soft- 
ware to direct flash memory reprogramming. With first 
generation flash memories, one sends a control signal to 
a device to begin and end programming or erasure. It is 
a simple process implemented on more than 40 million 
units, however care must be taken. If algorithms are 
not properly followed, a device may be rendered inop- 
erable. This document discusses proper software and 
debug technique, which yields dependable first genera- 
tion flash memory operation. First generation products 
include the 28F256A, 28F512, 28F010 and 28F020. All 
second and third generation Intel Flash Memories con- 
tain automated program and erase routines. 


FUNDAMENTALS OF FLASH MEMORY 
OPERATION 

Adaptive vs Brute Force Algorithms 

Many designers use EPROMs regularly. Few consider 
the programming algorithms because the PROM pro- 
grammer vendors take care of that function. 

Two types of algorithms are in use today: 

• Adaptive Algorithms 

• Brute Force Algorithms 

Adaptive algorithms such as Intel’s Quick-Pulse Pro- 
gramming and Quick-Erase algorithms reduce pro- 
gramming time. A feedback mechanism recognizes 
when each byte has been programmed sufficiently. You 
may ask how is the point of sufficiency determined? 


One simply adds the net effects of Vcc and tempera- 
ture variations, and superimposes on those factors the 
normal EPROM charge leakage to obtain the answer. 
The next question is how can these factors be checked? 

NOTE: 

EPROM and EEPROM charge leakage occurs over a 
very long time — typically 100 years. Reliability papers 
often discuss charge leakage in terms of the memory’s 
data retention characteristic. 

If you look at EPROM programming algorithms, you 
will notice that Vcc is elevated during programming. 
The elevated Vcc acts as th e feedback mechanism for 
the adaptive algorithm. Reading the device and check- 
ing for program completion is called verification, or 
margining. (One is checking the margin to Vcc fluctua- 
tions.) For example, if the part can be verified at 6.25V, 
then it can withstand the fluctuations and normal 
charge leakage. 

During the past few years most major EPROM manu- 
facturers have converted to adaptive algorithms. The 
algorithm loops back and programs a byte again if the 
first program operation does not verify at the elevated 
voltage. 

Brute force algorithms simply program each byte mul- 
tiple times, typically with long program durations. This 
type of algorithm has no in-system margin verification. 
That is they assume but never verify program margin to 
the typical environment effects. 

Many flash memories that specify a brute force algo- 
rithm may fail to retain data for 10 years. Additionally, 
they may not read the data correctly even at specified 
Vcc an d temperature extremes. 

Intel’s flash memory program and erase algorithms are 
both adaptive. They offer margin verification without 
requiring users to elevate Vcc in-system. When issued 
a command to program verify, the memory’s command 
register logic taps an internally-generated elevated Vcc 
from the user-supplied external Vpp (12V). This is why 
it is essential that you provide the specified Vpp voltage 
and follow the given adaptive algorithms. Intel’s adap- 
tive algorithms, combined with the command register 
architecture, assures reliable code and data storage and 
dependable system operation. 

Figure 1 shows an example of an adaptive byte pro- 
gramming algorithm. Appendix A compares the algo- 
rithm in Figure 1 to a brute force approach. 
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Figure 1. The flow chart shows the fundamental 
nature of an adaptive algorithm. Based on the 
outcome of program verification, the flow may 
loop back for another program operation. 


Moving Charge and Other Factors You 
Should Know 

This section discusses the mechanics of flash memory 
programming. For most system designers, transistor- 


level discussions were last heard in college. We may 
recall that DRAM consists of a storage capacitor and a 
transistor. We remember this clearly because failure to 
refresh that capacitor causes systems to malfunction. In 

like fashion, one should understand the fundamentals 
of flash memory reprogramming. The understanding 
will enable error-free memory operation and reliable 
system performance. 

In simplest terms, each data bit equates to a memory 
cell. Intel’s flash memory uses one transistor per cell 
with the smallest possible architecture. This delivers 
the lowest cost per bit and highest capacity, levering 
system software (rather than bulky, complex cells) for 
reprogramming control. 

Figure 2 shows a simplified cross section of Intel’s flash 
memory transistor. Note the structure; the cell is a 
stacked gate MOS transistor. An isolated floating gate 
stores the memory charge. The floating gate consists of 
a layer of (conductive) polysilicon surrounded by (non- 
conductive) oxide layers. 

On a DRAM cell, each transistor connects to a capaci- 
tor which stores the memory charge. The major differ- 
ence between flash memory and DRAM derives from 
their cell structure. The DRAM cell loses its charge if 
not refreshed within a few milliseconds. On the other 
hand, the flash memory floating gate maintains its 
charge for typically 100 years. The structure is isolated 
and insulated by the field and gate oxides — hence the 
name “floating” gate. 


ETOX Flash Memory Cell* 


Control Gate 
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•Patented Intel Processes 


Figure 2. Simplicity of design assures increasing densities, manufacturability and reliability. 
These are the attributes that drive mainstream memories. 
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CONTRARY TO INTUITION 
CHARGE = DATA “0” 

NOT DATA “1” 

PROGRAMMING: 

ADDS CHARGE TO FLOATING GATE 
DATA — 0 

ERASURE: 

REMOVES SOME CHARGE FROM FLOATING GATE 
-+ DATA - 1 

PROGRAMMING DATA WITH MIXED Os and ts: 

ONLY DATA "0” BITS GET CHARGED 
DATA *T* BITS REMAIN UNCHARGED 


Changing the memory contents is simple. Figure 3 
shows two memory cells — one being erased and one 
being programmed. Erasure removes charge from all 
bits simultaneously. Programming adds charge to se- 
lected bits. During erasure, not all charge is removed. 
The erase verify operation tells the system when 
enough charge has been removed. At that point, the 
flash memory behaves like a U.V.-erased EPROM. 

Removing too much charge by erasing too long renders 
the memory unprogrammable. Excessive erasure lowers 
the cell threshold to the point where the transistor is 
always on and always reads data “1”. (Recall that the 
cell threshold, V t , determines when the transistor turns 
on or off.) You must control the erase timing within the 
algorithm specifications on first generation flash mem- 
ories. 


A second erase consideration relates to the first. Prior 
to erasing the chip, you must blanket program all bytes 
to data OOh, regardless of the previous data. This step 
equalizes the charge on all transistors. 

If you skip this step and proceed directly to erasure, an 
interesting thing happens. Consider a typical byte pro- 
grammed with data OAAh (1010 1010b). While pro- 
gramming this data, bits with data ”1” remain erased 
(charge removed), and bits with data “0” are pro- 
grammed (charged added). Following programming, 
normal read operations sense whether a memory tran- 
sistor has more or less charge and drives the outputs 
accordingly. 
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Erasure then removes charge from all bits. The bits that 
have had charge added (data “0”) have some quantity 
of charge removed; bits with less charge (data “1”) 
have charge removed as well. This is akin to excessively 
erasing the data “1” bits. Pre-programming all bits to 
data “0” equalizes the charge which allows for con- 
trolled, uniform erasure of all bits in the device (i.e., all 
1,048,576 bits in a 28F010). 

The sections entitled “Margin for Error” and the 
“Erase Algorithm Interpreted, Program all Bytes to 
OOh” discuss this concept in greater detail. 


ERASURE— THE GOLDEN RULE 

Erasure removes charge from all memory cells in paral- 
lel. This lowers the cells’ threshold voltages from the 
programmed level (6.5V) below Vcc to the erased level 
(3.2V) The device continues erasing until told to stop 
by the verify command or until the integrated stop-tim- 
er counts down. 


Margin for Error 

Allowing erasure to continue too long depletes the 
charge in floating gates. So you ask — how long is too 


long? Figure 4 shows the margin for error of a typical 
device. Following the algorithm would have stopped 
erasure after 1 second. Cell depletion occurred after 10 
seconds giving a lOx margin for error. This lOx margin 
exists if the erased cell erases in 1 second or 10 seconds 
(i.e., within the algorithm limits). This chart shows one 
typical example where the device happened to take 1 
second to erase. 

Flash memory has generous margin for error over the 
stopping point defined by the algorithm. The stopping 
point is defined as the point when all bytes in the chip 
verify to FFh data. The erase operation duration 
(Twhwh2) is specified at 10 ms ± 500 juts. Five hun- 
dred microseconds offers substantial allowance for sys- 
tem latency during erasure and even for slop in the 
timer generation. Processors or controllers can execute 
many lines of code in 500 fi s, and the margin for error 
simply adds another guardband. 

Proper software and system design will never rely on 
the additional margin for error. Remember, you control 
the program code and system operation during erasure. 
Once you have fully debugged your driver code, the 
issue of software control disappears entirely. 



error in erase time before a device becomes inoperable. Remember, 
each device has its own erase time, thus the use of an adaptive algorithm. 


I 
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Most Common Development Issues 

Having covered the fundamentals of flash memory re- 
programming, let’s move on to the system’s hardware 
and software perspectives. The following list of ques- 
tions might have occurred to you . . . 

•You have defined a system power supply with regu- 
lated 5V and 12V outputs (Vcc and Vpp). Due to 
the smaller capacitive load on the Vpp supply, Vpp 
powers up much faster than the Vcc supply. Will 
this affect the device? 

• How does the flash command register architecture 
reset? 

• Suppose your code sends a signal to start erasure, 
and never tells it to stop? 

° Suppose your software delay timers are not calibrat- 
ed. Instead of stopping erasure after ten millisec- 
onds, the code issues the stop command after 10 
seconds? 

° Suppose your 6 jits timer used between the erase and 
erase verify modes is only 2 jus? 

• Suppose you decide to skip the first erase operation 
(program all bytes to zero) because the device is al- 
ready programmed with data? 

® Suppose you are programming and erasing devices 
in a 16- or 32-bit system? 

The answer to all these questions can be found in the 
following sections. The questions and the reasons all 
relate to the discussion of how the cell works. 


Device Initialization and Reset 

Many logic devices which contain command or control 
registers also have a reset pin. This pin serves two pur- 
poses: it resets the device’s internal logic; and it syn- 
chronizes the device’s clock to the system clock. 

Intel’s first generation flash memory command register 
and reprogramming circuitry reset to the read mode by 
three means: 

1. raising or lowering Vpp with Vcc “ 5 V; 

2. raising Vcc with Vpp = 12V; 

3. issuing the reset command twice in succession. 

NOTE: 

Method 3 stops erasure or programming as well as re- 
sets the chip. 

A few cases require closer consideration. 


Case 1. The System Controls Vpp with a Switch 

Assuming Vcc is stable with Vpp switches on, then the 
command register defaults to the read mode. No pow- 
er-on reset is required. 

Designers might opt to include the Vpp switch for 
either (or both) of two reasons. The first reason is pow- 
er minimization. Depending on the technology used, a 
voltage regulator or pump’s efficiency can range from 
40% -85%. Switching off the V PP supply minimizes 
system power consumption. See Appendix B for an ex- 
ample Vpp generation circuit with ON/OFF control 
capability. 

The second reason is absolute data protection. This fea- 
ture is not available to 5V-only EEPROM because the 
reprogramming voltages are generated internally. On 
that class- of memory device, logic glitches can spuri- 
ously change data during system power up or power 
down. Flash memory’s 12V power requirement offers 
absolute control over these concerns; with Vpp below 
Vcc + 2V, data protection is guaranteed. Internally, 
the electric fields are simply too weak to spuriously 
write data. 


Case 2. Vpp Powers Up before Vcc 


Systems with Vpp hardwired to a regulated transformer 
might encounter this case. Typically, Vcc will charge 
many more bypass capacitors than Vpp. Vcc will 
therefore power up much more slowly. 

The flash memory power-down (Vcc = 0V) default 
state blocks Vpp from disturbing the array. These con- 
ditions hold while Vcc * s helow ~ 2V. Once Vcc rises 
above ~ 2V, the internal logic kicks in and resets the 
device to the read mode. (This is analogous to the inter- 
nal Vpp reset condition described in Case 1.) 



Should the three contr ol pins glitch during the power- 
up phase (CElow, WElow, and OEhigh), then the com- 
mand register acts to filter the data. The command port 
will only react to the correct command sequence. 


Designers might opt to hardwire Vpp for a number of 
reasons. The first reason is cost minimization. A regu- 
lated 12V secondary from a transformer is commonly 
available. Adding a switch or a power supply sequencer 
adds cost and complexity. The second reason involves 
consideration of the end application. Using the flash 
memory as a read/write memory requires optimization 
for the write cycle. Powering Vpp on before each write 
would waste considerable time. 
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Bus 

Operation 

Command 

Comments 

Standby 


Wait for Vpp Ramp to 
VppH ( = 12.0V)(D 

Use Quick-Pulse 
Programming 

Initialize Addresses, 
Erase Pulse Width, and 
Pulse Count 

Write 

Set-Up 

Erase 

Data = 20H 

Write 

Erase 

Data = 20H 

Standby 


Duration of Erase 
Operation (T W hwh 2 ) 

Write 

Erase 

Addr = Byte to Verify; 


Verify 

Data = AOH; Stops 
Erase Operation 

Standby 


tWHGL 

Read 


Read Byte to Verify 
Erasure 

Standby 


Compare Output to 
FFH, Increment Pulse 
Count 

Write 

Read 

Data = 00 H, Resets 
the Register for Read 
Operations. 

Standby 


Wait for Vpp Ramp to 
Vpp 1 (1) 


1 . The Vpp power supply can be hard-wired to the device or switchable. When Vpp is switched, Vpp 1 may be ground, 
no-connect with a resistor tied to ground, or less than Vcc + 2.0V. 

2. Erase verify is performed after chip-erasure. A final read/compare may be performed (optional) after the register is 
written with the read command. 

3. CAUTION: The algorithm MUST BE FOLLOWED to ensure proper and reliable operation of the device. 


Figure 5. Quick-Erase Algorithm for Intel’s First Generation Product Line 
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Case 3, Warm Resets 

Warm resets, where the system maintains power while 
rebooting, requires closer inspection. Consider the situ- 
ation where the system is reprogramming the flash 
memory and a hardware or software reset occurs. 

The boot software would not realize that programming 
or erasure is ongoing and would not know to stop the 
reprogramming operation. Therefore safeguard against 
this condition with one of two means: 1) ensure that 
control logic switches Vpp off during reset; or 2) reset 
the flash memory before resetting the processor. For a 
software reset, simply add the flash memory reset com- 
mand to the interrupt sequence. For hardware resets, 
wire the reset switch to the interrupt controller instead 
of directly to the reset input. Hardware resets would 
then execute the software interrupt sequence. Intel’s 
second and third generation flash memories all include 
a H/W reset pin (RP#) formally called PWD#. This 
pin is essential for any device with automation or em- 
bedded algorithms. 


The Erase Algorithm Interpreted 

The following section offers a block by block explana- 
tion of the Quick-Erase algorithm shown in Figure 5. 
Understanding the reasons behind a function will en- 
able you to appreciate the importance of following the 
algorithm explicitly. Deviations will negatively affect 
the part’s performance and should not be attempted. 
Note: the effect may not be immediately apparent. 

Apply VppH (Optional, see Discussion on Device Ini- 
tialization) 

Switch on the local Vpp supply prior to erasure and 
programming. The time required for Vpp to reach its 
steady state 12 ± 0.6V depends on the capacitive load 
and the impedance of the printed circuit board trace. If 
you measure this delay on a wire-wrapped prototype 
system, remember that temperature, printed circuit 
traces and the board’s layout change the load seen by 
the Vpp generator. Allow Vpp sufficient time to ramp 
before proceeding with the next step. 


Program All Bytes to OOh — > Data = OOh? 

Prior to erasure, blanket program all addresses in the 
flash memory to OOh (charge state), regardless of the 
previous data. Verify that each address equals OOh be- 
fore proceeding to the next address. If you use only part 
of the memory array, you still need to pre-program the 
entire array for erasure. An example where this is an 
issue is using a 512K in a 256K socket. A second exam- 
ple is a system where internal microcontroller memory 
overlaps the external flash memory space. 

Programming data OOh equalizes the charge on every 
bit in the array. This is necessary because erasure re- 
moves charge from all cells regardless of their previous 
state. 

For example, reconsider the byte containing AAh data 
(1010 1010b). If you skip the pre-program step, then 
during erasure when the data “0” bits get charge re- 
moved, the previously erased bits (data “1”) lose addi- 
tional charge. This drives the cell threshold a little low- 
er. The next time you erase the chip and change the 
code, the threshold will drop to 2.8V. 

If the memory transistor is not pre-programmed to data 
“0” before the next erasure, then its threshold will drop 
on successive reprogramming cycles (denoted by E3, 
E4, etc. in Figure 6). Repeated violations of the blanket 
programming requirement drives the threshold to the 
point where the transistor is stuck on (data = “1”). 

Variable Initialization 

Initialize two variables and a constant: ADDR (ad- 
dress), PLSCNT (pulse count), and TEW (erase pulse 
width). The pulse count increments from 0 to a maxi- 
mum of 1000 erase tries. The erase pulse width remains 
constant at 10 ms. The address increments from the 
flash memory starting address to the ending address 
during verification. 
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Figure 6. Successful erasure requires blanket programming all bytes to 
the data “0” level first. This prevents threshold decline on successive erase 
cycles (E2, E3, etc.). Very low thresholds cause the chip to malfunction. 


Write Erase Set-Up Command 

Write the erase set-up command (20h) to any flash 
memory address. This prepares the selected device for 
erasure, but does not activate the process. A second 
erase command (20h) is required. Any other data writ- 
ten to the flash memory between the set-up and erase 
commands will abort the sequence. Once the process is 
started, it will not stop until told to do so. The correct 
stop erasure command is Erase Verify (AOh). However, 
any command including the Reset command is an ille- 
gal sequence and will stop erasure as well. 

Write Erase Command 

The erase command starts the erase process. Internally, 
the device switches the voltages on all memory cell 
drains, gates, and sources to the erase configuration. 

Time Out Tew (10 ms) 

Start your software or hardware timer. Until com- 
manded to verify or until the integrated stop-timer 
counts down, the flash memory continues the erase pro- 
cess. Therefore, assign a high priority to the timer in- 
terrupt. If a higher priority interrupt occurs, stop the 
erase process and switch contexts (store all variables, 
registers, etc.). This will allow reentry into the erase 
procedure in a controlled fashion. 


Write Erase Verify Command 

Write the erase verify command (AOh) to the flash 
memory at the address given by the ADDR variable. 

The erase verify command performs many tasks. Inter- 
nally, the device stops erasure and latches the given 
address for verification. Additionally, the command 
changes the voltages on the memory cell drains, gates 
and sources to the erase verify configuration. 

Time Out 6 juts 

This time out accounts for the internal slew rate of 
switching the memory array from the erase to the erase 
verify configuration. Do not attempt to read from the 
device before 6 juts has passed; the device will appear to 
still be programmed. This is because you have not al- 
lowed sufficient time for the memory to change config- 
urations. Your code will then interpret this as a need 
for extra erase operations, and will continue erasing the 
device. 

NOTE: 

6 jus is a minimum specification. You can use the 
10 jas timer developed for the programming algo- 
rithm. 
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Read Data from Device 

Read the data at the address given by the ADDR vari- 
able. This Should be the same address driven with the 
erase verify command. 

Data = FFh? 

Compare the output data at address ADDR to FFh. If 
the data equals FFh, then that address has been erased. 
Continue verification until the last address has been 
verified or until the maximum erase pulse count (1000) 
has been reached. Typically, most devices will fully 
erase within 50-100 erase loops. 

Last Address — > Increment Address 

Check the ADDR variable to see if the last address has 
been verified. If not, increment the ADDR variable and 
re-write the erase verify command. Remember to write 
the erase verify command to address ADDR, since the 
verify command latches the address. Also, if your sys- 
tem has 64K byte segment boundaries, be sure to incre- 
ment the base pointer every 64K byte addresses. 

Write Read Command 

After full chip verification, write the read command 
(OOh) to switch the device to read mode. If you plan to 
reprogram the device immediately, this step is not nec- 
essary. 

Apply VppL (Optional) 

Switch Vpp off. With Vpp left on, the command regis- 
ter offers data protection by requiring a precise se- 
quence to initiate programming or erasure. However, 
Vpp controls overall command register operation. 
Turning Vpp off disables the command register, thus 
providing absolute data protection. Without the high 
voltage, the reprogramming mechanisms cannot occur 
and the component becomes a read only memory 
(ROM). 

Abort/Reset 

Whenever a system error condition occurs (reset or re- 
boot), write the Reset command (FFh) to each flash 
memory twice in succession. This is a good initializa- 
tion practice in systems leaving Vpp at 12V. The proc- 
essor would be unaware if prior to the reset, it had been 
in the middle of erasure, and this sequence aborts era- 
sure. 


The Program Algorithm Illuminated 

The full algorithm will not be interpreted here, al- 
though a few items should be noted. You can find a 
conceptual version of the Quick-Pulse Programming al- 
gorithm in Chapter 2, Figure 1, and the complete flow 
chart in Appendix C. 


First, similar to erasure, a two-write sequence starts 
programming. The first write is the Program Set-Up 
Command which primes the chip for programming. 
The chip then latches the address and data to be pro- 
grammed on the second write. You can abort program- 
ming by writing the Reset Command twice in succes- 
sion instead of the data to be programmed. 

Second, the device continues programming until com- 
manded to stop by the Program Verify Command. 
Similar to the Erase Verify Command, this command 
performs a couple of functions. Internally, it halts pro- 
gramming and latches the given address for verifica- 
tion. Additionally, the command changes the voltages 
on the memory array’s drains, gates, and sources to the 
program verify configuration. 

The cell programming mechanism is self-limiting. 
However, do not assume that programming all twenty- 
five 10 jus operations in one pass is the best way to 
attain reliable operation. To a certain degree, program- 
ming stresses the memory cell. The stress is considera- 
bly lower than that applied to EEPROM (2 MV/cm 
lower to be specific). But why stress a component with- 
out cause? The adaptive Quick-Pulse Programming al- 
gorithm with its fast program operations, minimizes all 
stresses and affords the greatest reliability. 

Finally, after writing the Program Verify Command to 
the device, wait a minimum of 6 juts before reading the 
device. The time out accounts for the internal slew rate 
of switching the memory array from the program to 
program verify configuration. Do not attempt to read 
from the device before 6 jus has passed; the device may 
appear unprogrammed. Your code will then interpret 
this as a need for extra program operations. It may 
needlessly reach the 25 operation limit, even though the 
byte most probably programmed on the first pass. 


Ramifications of the Golden Rule 

Always follow the erase command with an erase verify 
command to stop erasure. Interrupt-driven systems 
must give high priority to servicing the reprogramming 
timer interrupts. Systems that reset upon a watchdog 
time-out must reset the flash memory device before re- 
booting. (See discussion on device initialization.) Like- 
wise any non-maskable interrupt should software- or 
hardware-reset the flash memory before performing a 
context switch. 

Use an oscilloscope to calibrate all time delays before 
attempting erasure. The delay modules include the 
6 jus, 10 jus, and 10 ms timer routines. 

Blanket program all addresses to OOh data before eras- 
ing. Verify correct implementation of the programming 
algorithm with a PROM programmer before attempt- 
ing erasure. (Chapter 4 explains how this can be done.) 
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16- and 32-bit systems require special attention. Each 
flash device has its own erase characteristic. Do not 
assume that if the low byte of a data word is not erased, 
then the high byte must not be either. 

Always follow the listed guidelines and take care while 
developing your code to eliminate the erase control 
issue. Consider it similar to implementing any control 
function. Once the code is debugged and stable, the 
issue goes away. 

You might ask, is it not possible to control erasure 
through hardware? The alternative to software control 
is integrated hardware control or an external controller. 
Intel ofers a complete line of high density, cost-effective 
products with integrated hardware control, often called 
automation. Whether software or hardware controlled, 
Intel’s ETOX Flash Memory offers the most reliable, 
dense, manufacturable, and fastest read/write nonvola- 
tile memory. Other EEPROM approaches have draw- 
backs of multiple transistors per memory cell. This 
property negatively affects all those attributes offered 
by Intel’s ETOX flash memory. 


DEBUGGING YOUR CODE AND 
OTHER TIPS ON TESTING 

As with any software checkout, a few simple principles 
enable complete flash memory algorithm debug. The 
following sections offer some hints to make your job 
easier. 


Software Drivers Save You Time 

Intel saves you time by offering various processor-fami- 
ly flash memory drivers. You simply edit the files to 
suit your system. Then assemble the driver, link, and 
locate it, and you are ready for debug. 

These drivers offer the framework for successful flash 
memory reprogramming, and require some customiza- 
tion to fit your particular system. If your processor’s 
driver is not available, you may use the available driver 
software as an example. One caution in advance: The 
drivers have been written in assembly language to give 
the most speed- and memory- efficient code. However, 
most people prefer high-level programming. 

High-level programming can be used for everything ex- 
cept software-timer generation. Compilers may give 
different routines with different object code on each 
compilation. Therefore, the timers must he either hard- 
ware-based or coded in assembly language. Software 


timers also present some risk if there is a frequency 
upgrade change on the controlling processor. Regener- 
ate and check your timer routines whenever the system 
clock rate changes. 

Timers, Test Loops and Assembly 
Level Programming 

Timing circuits or software play the most crucial role in 
flash memory reprogramming. Good timers precisely 
control their function; sloppy timers produce faults. An 
example of a sloppy timer is one produced by a compil- 
er. Each time high-level languages recompile, the low- 
level object coding may change. Thus, a timing loop 
may be 10 ms one compilation, and much longer or 
shorter the next time. 

You can check your timing method with the following 
simple technique. Develop test loops which call the var- 
ious timers’ routines. For example, implement the 6 jas, 
10 jlls, and 10 ms timers used with the 28F512 and 
28F010. If you have a spare port or peripheral output, 
use it to trigger an oscilloscope. Follow the trigger call 
with the timer routines. If you do not have a spare port, 
write to the flash memory address space before and 
after each timer call. You can trigger the oscilloscope 
off of the flash memory CE# signal. Remember to 
power-down the system and remove the flash memory 
before attempting these methods. 

Once the timer code has been verified, you can link and 
locate it to a higher-level erase/program algorithm im- 
plementation. 

Programming — The Key to Proper 
Erasure 

Earlier sections described the importance of program- 
ming 00’ s prior to erasure. This procedure equalizes the 
charge on all memory cells; following this step all bits 
erase in unison. 

A conclusive debug technique can check your program- 
ming software. Simply use your software to program 
zeroes into the flash memory and then verify this step 
using a conventional PROM programmer. Load the 
PROM programmer’s buffer with all zeroes and com- 
pare the buffer to the flash memory. If your program- 
mer does not service the flash memory, call the compa- 
ny for the latest software upgrade. Alternatively, one 
can easily rig the 512K flash memory to look like a 
512K EPROM. Simply jumper Vcc on a 32-pin socket 
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to a few pins. Note that the 27512 EPROM and 
28F512 flash memory have different intelligent identifi- 
er codes. Override the identifier code check to use this 
method. See Figure 7 for socket details. 

Some microcontrollers have limited address space or 
internal memory that masks certain external address 
space. Even if you do not use sections of the flash mem- 
ory, you must still access these sections to program ze- 
roes before erasure. Map and decode port bits to access 
unused address space, and verify that all bytes are pro- 
grammed to zero before proceeding with erasure. 



programmer as a 27512 by jumpering the 
appropriate pins to Vqc- The same method 
applies to the 28F010. 


16- and 32-Bit Systems — 

Achieving Optimum Reprogramming 
Throughput 

Erasing flash memory in 16- and 32-bit systems re- 
quires special consideration. One could implement the 
program and erase algorithms in a byte-wise fashion, 
but this is time-consuming. Alternately, one can treat 
the multiple flash memory as a data word, and gain 
optimum performance. 

The primary consideration with the latter approach is 
that one device may program or erase faster than the 
other(s). Subsequent programming or erasure of a slow- 
er device compromises the functionality of the faster 
device by subjecting it to the slow-device timing. 

Consider an example of erasure in a 16-bit system. Af- 
ter 10 passes through the erase operations, both devices 
verify through address 07C3h. Then at address 07C5h, 
the processor reads data word 83FFh. 

Since erase data is FFFFh, a few bits in the upper byte/ 
device have not erased. The natural flow of the algo- 
rithm would dictate another erase operation. But what 
about the lower device? Could it be completely erased? 


Of course it could be; every device erases at a different 
rate and the algorithm has only checked up to address 
07C5h. 

You can take advantage of the data rate of wider data 
buses by utilizing the command register, the reset com- 
mand and an analysis of erasure. Each erase operation 
is 10 ms. Each byte verification takes 6 jjls. Therefore, 
erasure takes three orders of magnitude longer than 
verification. Optimization for erasure yields the opti- 
mum performance because verification is a second 
order effect. 

Let us reconsider the previous example. At address 
07C5h, the data word does not verify. On the next erase 
operation edit the erase (and erase verify) command 
word such that only the high byte gets the erase com- 
mand, and the low byte gets a reset command, (i.e., 
change the command word from 2020h to 20FFh). 

See Application Note AP-316 for a detailed flow chart 
for this approach. Note this document is based on the 
28F256; however, most concepts carry through to the 
higher density devices. (Literature Order number 
292046). 


Logic Analyzers and in-Circuit 
Emulators 


Many programmers use logic analyzers and in-circuit 
emulators to debug code. These approaches are fine for 
flash memory algorithm debug if certain conditions are 
met. 



1. Check timing routines with an oscilloscope; there is 
no alternative. 

2. Know your code and set breakpoints intelligently. 
One designer had the bad luck of throwing in a 
breakpoint in the middle of the program 00’s loop. 
After stepping through a couple of byte program 00 
loops, he called the erase flow routine. Can you iden- 
tify the problem? 

3. Single step through your reprogramming code, if and 
only if, the flash memory device is removed from the 
system. 


Testing Your Software — One More 
Time 

Some flash memories specify 100 erase/program cycles. 
This is a minimum specification; Intel Flash Memories 
cycle 100,000 times. With this in mind, feel free to 
check and recheck reprogramming operations. There is 
no reliability risk in doing so. 
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One confidence-raising test is similar to that done on 
systems: stress the system/software by executing test 
code numerous times consecutively. Set the reprogram- 
ming drivers in a loop, and let them run 20-40 times. 
On each consecutive pass, use a constant data pattern 
such as OAAh. This tests the reprogramming code from 
a quasi-static perspective. Missing is the true system 
environment. In the true system environment, multiple 
inputs compete with the flash memory for interrupt pri- 
ority. Also, RF noise from motors can cause spikes and 
glitching on Vpp or Vcc- Additionally, fully loaded 
systems or partially loaded systems might have differ- 
ent Vpp response characteristics or noise levels. Signals 
that look clean in the lab, might not be all that clean in 
the true operating environment. Therefore, flash repro- 
gramming tests should be done in the true system envi- 
ronment as a final test. 


Watchdog Timer Debug Circuit 

This section describes a simple tool you can build for 
debugging your code. Since Intel’s first generation 
Flash Memories contain integrated stop-timers, this 
tool offers no real benefit. It is simply shown in case a 
designer is debugging code for alternate sources. An 
EPLD watches the flash memory data bus and control 
signals for the erase sequence — erase set>up, erase, and 
erase verify commands. Once the CPU initiates erasure, 
the debug tool starts a 15 ms timer. Should the timer 
count down prior to receiving the erase verify com- 
mand, then the circuit switches Vpp off. 

This tool does not check for the other items discussed 
in the Tips on Testing section; you must still check 
those yourself. 

Figure 8 shows the circuit schematic. The EPLD 
source code and the name of an Intel EPLD applica- 
tions engineer is located in Appendix D. 



Figure 8. Watchdog Timer Debug Circuit 
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TROUBLE SHOOTING GUIDE 


Determining the Root Cause — 
Software Error vs Device Damage 

The three major indications of a flash memory problem 
are labeled in the following section. The subsequent 
paragraphs define potential root causes to investigate. 

I. The Device Does Not Program 
Did it program before? 

A. No. 

1. Trigger your oscilloscope on CE# while prob- 
ing Vpp. Verify that Vpp has reached a steady- 

. state 12V when the device is first written. 

2. Set the time-base to 10 ju,s/division (the dura- 
tion of the program operation). Trigger on 
CE# and probe WE# (look at both traces). 
Check the duration of the 10 jus program oper- 
ation time delay. Also, check the duration of 
the 6 jus delay between writing the program 
verify command and read. 

3. Look for ringing on Vpp when Vpp has been 
switched on. Over-voltage stress on Vpp (ring- 
ing with amplitude greater than 13V) will de- 
stroy Vpp’s silicon structure. 

4. Power the system down and back up. Look for 
destructive glitches on Vqq or Vpp (greater 
than 7V and 13V respectively). 

5. Verify erasure and programming on a PROM 
programmer (if available). Fill the programmer 
buffer first with OOh data and program the buf- 
fer to the flash memory. Then erase the device, 
and repeat with AAh data. Repeat the last step 
with 55h data. This sequence fully exercises the 
array, the input buffers and the output buffers. 
If all tests pass then check for a hardware or 
software error. 


B. Yes. 

1. Have you done anything that may have ESD 
zapped the devices (i.e., touched the devices 
while not being grounded, re-wired the proto- 
board with the components socketed, etc.)? If 
yes, check part as outlined in section l.A.5. 

2. Have you attempted erasure? If yes, verify 
your algorithm as outlined in Chapter 4. Also, 
implement the in-system intelligent identifier 
mode. If the device outputs an incorrect code, 
then either an output has been zapped or the 
golden rule has been violated. Section l.A.5 
describes a method of checking for ESD dam- 
age. 

II. The Device Does not Erase 
Did it erase before? 

A. No. 

Follow steps 1-5 outlined in section I. When 
performing step 2, adjust the oscilloscope time 
base to 10 ms/div. 


B. Yes. 


Has the board design, clock rate or software 
changed? System clock rates directly affect the 
accuracy of software timers. See AP-316 for a 
discussion on software timing versus clock rate. 

III. The Device Erases Spuriously 


Exercise all system functions while monitoring the 
flash memory chip selects. Verify that I/O mapped 
addresses or logic are not accidentally selecting the 
flash memory. For example, the space bar charac- 
ter sent from a keyboard controller happens to be 
20h. If the flash memory is accidentally selected 
while this data is on the bus, then erasure will com- 
mence on the following cycle when the condition 
occurs again. 
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APPENDIX A 


TWO APPROACHES TO ALGORITHMS 


Adaptive 

( Start 

Program J 


Program Verify- 
Read Data 
from Device 



Program 

Error 


Brute Force 



□ Efficient — 

□ Slow — 

Max Time = (10 + 6 jus) * 25 
= 400 jus 

Max Time = (100 jus * 12) + 3 ms 
= 4200 jus 

Typ Time = (10 + 6 jus) * 1 
= 16 jus 

Typ Time = (100 jus * 10) + 1.5 ms 
= 2.5 ms 

□ Reliable — 

□ Questionable — 

Verify Command slews internal voltages to simu- 
late elevated Vcc* 

Unknown margin to Vcc and temperature 
swings, as well as cell leakage; 

Figure 9. Left and right flow charts compare Intel’s (adaptive) Quick-Pulse Programming 
algorithm and another company’s (brute force) approach to flash memory programming. 











AP-325 


Intel 


APPENDIX B 



Figure 10. Basic flash memory Vpp voltage supply with ON/OFF control. 

When Vpp COMMAND goes low, the Linear Technology LT1072 switching regulator produces 12V. 
This circuit is just one example of a Vpp supply. 
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APPENDIX C 

QUICK-PULSE PROGRAMMING ALGORITHM 



292059-13 


Bus 

Operation 

Command 

Comments 

Standby 


Wait for Vpp Ramp 
to Vpph (= 12.0V)(D 



Initialize Pulse-Count 

Write 

Set-Up Program 

Data = 40H 

Write 

Program 

Valid Address/ Data 

Standby 

Write 

Standby 

Program^) Verify 

Duration of Program 
Operation (twHWHi) 
Data = COH; Stops 
Program Operation 
tWHGL 

Read 


Read Byte to Verify 
Programming 

Standby 


Compare Data 
Output to Data 
Expected 

Write 

Standby 

Read 

Data = 00H, Resets 
the Register for 
Read Operations. 
Wait for Vpp Ramp 
to Vpp| (1) 


NOTES: 

1. The Vpp power supply can be hard-wired to the device or switchable. When Vpp is switched, Vpp I may be ground, 
no-connect with a resistor tied to ground, or less than Vcc + 2.0V. 

2. Program Verify is only performed after byte programming. A final read/compare may be performed (optional) after the 
register is written with the Read command. 

3. CAUTION: The algorithm MUST BE FOLLOWED to ensure proper and reliable operation of the device. 


5-180 







AP-325 


iny 


APPENDIX D 

WATCHDOG TIMER CIRCUIT 


EPLD Source Code and Applications Contact Person 

Thom Bowns_PLFG Applications 
Intel 

January 5, 1989 
Rev. 008 
5AC312 

Watchdog timer to cut Vpp from FLASH if erase cycle too long. 

OPTIONS; TURBO = ON 
PART : 5AC312 

INPUTS: CLK, D0@3, Dl@4, D2@5, D3@6, D4@7, D5@8, D6@9, D7@10, 

nCE@2, nWE@ll, TIMER_IN@13, RESET@14, AHR@15 

OUTPUTS: TIMCLR@23, TIMST@22, LED@21, VPP@20 

NETWORK: 

CLK = INP (CLK) 

DO = INP (DO) 

D1 = INP (Dl) 

D2 = INP (D2) 

D3 = INP (D3) 

D4 = INP (D4) 

D5 = INP (D5) 

D6 = INP (D6) 

D7 = INP (D7) 
nCE = INP (nCE) 

nWE = INP (nWE) 

TIMER_IN = INP (TIMER_IN) 

RESET = INP (RESET) 

AHR = INP (AHR) % RESET active high if AHR is high 

CONDI = NOCF (Cld) % Conditions 1-4 are routed 

C0ND2 = NOCF (C2d) % through combinatorial feedbacks 

C0ND3 = NOCF (C3d) % to reduce product term count. 

C0ND4 = NOCF (C4d) % 

CLR = NOCF ( CLRd ) 

EQUATIONS: 

CLRd = RESET * AHR + IRESET * !AHR ; 

TIMEOUT = /TIMER_IN ; 

Cld = (/nCE * /nWE * 20H) ; % Write 20 % 

C2d = (/nCE * /nWE * aOH) ; % Write AO % 

C3d = (/nCE * /nWE * /20H) ; % Write other than 20 % 

C4d = (/nCE * /nWE * /AOH) ; % Write other than AO % 

20H = /D7 * /D6 * /D5 * /D4 * /D3 * /D2 * /Dl * /DO ; 

AOH = /D7 * /D6 * /D5 * /D4 * /D3 * /D2 * /Dl * /DO ; 
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MATCHING 

: WATCHDOG 




CLOCK: 

CLK 





STATES: 

[ VPP 

LED 

TIMST TIMCLR XSB ] 


START 

[ o 

0 

0 

0 0 ] 


SI 

t i 

0 

0 

0 0 ] 


S2 

[ 1 

0 

1 

0 0 ] 


S3 

t i 

0 

1 

1 O ] 


S4 

t i 

0 

0 

1 o ] 


S5 

[ i 

0 

1 

11] 


S6 

t i 

0 

1 

0 1 ] 


S7 

[ O 

1 

1 

0 0] 




% TRANSITION STATEMENTS % 


START: SI 



% From power up, go to SI right away % 

SI: 

IF 

CONDI 

THEN 

S2 

% If write 20, go to next state 

% 

S2: 

IF 

/CONDI 

THEN 

S3 

% Until not write 20, hold 

% 


IF 

CLR 

THEN 

SI 



S3: 

IF 

CONDI 

THEN 

S4 

% If another write 20, start timer 

% 


IF 

C0ND3 

THEN 

S7 

% If write other than 20, error 

% 


IF 

CLR 

THEN 

SI 



S4: 

S5 




% Trigger timer then go to S5 loop 

% 

S5: 

IF 

C0ND2 

THEN 

S6 

% If write AO, stop timer 

% 


IF 

TIMEOUT 

THEN 

S7 

% If timer times out. 







go to error state 

% 


IF 

COND4 

THEN 

S7 

% If write other than AO, error 

% 

. S6 : 

SI 




% Stop timer and go back to SI 

% 

S7 : 

IF 

CLR 

THEN 

SI 

% Error state, wait for a RESET. 

% 

END? 









EPLD Pinout 




5AC312 




W 


CLK C 

i 

24 

3V CC 

nCE C 

2 

23 

□ TIMCLR 

DOC 

3 

22 

□ TIMST 

D1C 

4 

21 

□ LED 

D2C 

5 

20 

□ v pp 

D3C 

6 

19 

□ GND 

D4C 

7 

18 

□ GND 

D5C 

8 

17 

□ GND 

D6E 

9 

16 

□ GND 

# 07 c 

10 

15 

□ AHR 

nWE C 

11 

14 

□ reset 

GND C 

12 

13 

□ TIMER_IN 
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Checklist: Most Common Mistakes that May Lead to Excessive Erasure 

• not programming all bytes to 00 data prior to erasure; 

• not observing the 6 juts set-up times between programming or erasure and verification; 

• attempting to program before Vpp is at 12V (Capacitive Load) 

• not latching the erase verify address with the erase verify command, or changing the address on the subsequent 
read cycle; 

Chapters three and four discuss the correct methods of developing and debugging code to diminish the possibility of 
making these mistakes. 
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INTRODUCTION 

Intel’s ETOX (EPROM tunnel oxide) Flash Memory 
adds electrical chip erasure and reprogramming to 
EPROM non-volatility and ease of use. Advances in 
tunnel oxides and photolithography have made it possi- 
ble to develop a double-polysilicon single-transistor 
read/write random access nonvolatile memory, capable 
of greater than 100,000 reprogramming cycles. Intel 
Flash Memory electrically erases all bits in the array 
matrix via electron tunneling. The EPROM program- 
ming mechanism of hot electron injection is employed 
for electrical byte programming. 

A command port interface, internal margin voltage 
generation, power up/down protection and address and 
data latches augment standard EPROM circuitry to 
optimize Intel’s Flash Memory for microprocessor-con- 
trolled reprogramming. 

Read timing parameters on Intel’s 28F256A, 28F512, 
28F010 and 28F020 are equivalent to those of CMOS 
EPROMs, EEPROMs, and SRAMs. Access times as 
fast as 65 ns result from a memory cell current of ap- 
proximately 50 jaA, low resistance poly-silicide word- 
lines, advanced scaled periphery transistors, and an op- 
timized data-out buffer. 

TECHNOLOGY OVERVIEW 

Intel’s ETOX flash memory technology is derived from 
its standard CMOS EPROM process base. Using ad- 
vanced 1.0 jam and 0.8 jum double-polysilicon n-well 
CMOS technology, Intel Flash Memory employs a 
3.8 jam x 4.0 jam single transistor cell (1.0 jam) technol- 
ogy and a 2.5 jam x 2.9 jam single transistor cell 
(0.8 jam technology), affording equivalent array density 
as comparable EPROM technology. The flash memory 
cell structure is identical to the EPROM structure, ex- 
cept for the thinner gate (tunnel) oxide. Figure 1 com- 
pares the flash memory cell to the EPROM cell. 

High quality tunnel oxide under the single floating 
polysilicon gate promotes electrical erasure. All cells in 
the array are simultaneously erased via Fowler- 
Nordheim tunneling. Applying 12V on the source junc- 
tions and grounding the select gates erases the entire 
array in one second (typical). Programming is accom- 
plished with the standard EPROM mechanism of hot 
electron injection from the cell drain junction to the 
floating gate. Programming is initiated by bringing both 
the select gate and the cell drain to high voltage. Pro- 
gramming occurs at a rate of 10 jas pulses per byte. 
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DEVICE ARCHITECTURE 
Command Port 

One feature which differentiates Intel’s Flash Memory 
is the command port architecture, illustrated in Figure 
2 . 

The command port simplifies microprocessor control of 
the erase, erase verify, program, program verify, and 
read operations, without the need for additional control 
pins or the multiplexing of high voltage with control 
functions. On-chip address and data latches minimize 
system interface logic and free the system bus during 
erase and program operations. High voltage (12V) on 
the Vpp pin enables the command port. In the absence 
of this high voltage, the command port defaults to the 
read operation, inhibiting erasure or programming of 
the device. 
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Figure 1. EPROM Cell vs. Flash Memory Cell 


The command port consists of a command register, 
command decoder and state latch, the data-in latch, 
and the address latch. The command decoder output 
directs the operation of the high voltage flash-erase 
switch, program voltage generator, and the erase/pro- 
gram verify voltage generator. 

Functions are selected via the command port in a mi- 
croprocessor write cycle controlled by the Chip-Enable 
and Write-Enable pins. Contents of the address latch 
are updated on the falling edge of Write-Enable. The 
rising edge of Write-Enable latches the command and 
data registers, and initiates operations. 
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Erasure 

Erasure is achieved through a two-step write sequence. 
The erase set-up code is written to the command regis- 
ter in the first cycle. The erase confirmation code is 
written in the second cycle. The rising edge of this sec- 
ond Write-Enable pulse initiates the erase operation. 
The command decoder triggers the high voltage flash- 
erase switch, connecting the 12V supply to the source 
of all bits in the array, while all wordlines are ground- 
ed. Fowler-Nordheim tunneling results in the simulta- 
neous erasure of all bits. 

The array source switch, shown in Figure 3, switches 
high voltage onto the source junctions. During erasure, 
the high voltage latch formed by M5 through Mg en- 
ables transistor Mi 5. Transistor Mi 5 pulls the array 
source up to 12V. Transistor M^ pulls the source to 
ground during read and program operations. 

To obtain fast erase times, the device must supply the 
grounded gate breakdown current which occurs on the 
sources of the memory array. The upper boundary for 
current sourcing capability of M15 is set by the maxi- 
mum allowable substrate current. If Vpp is raised to 
12V before Vcc is above approximately 1.8V, the low 
Vcc detect circuit formed by transistors Mi to M4 
drives the node LOW Vcc t0 9V. Transistors M9 to 
Mu then force the erase circuit into a non-erase state 
with M15 off and Mi 5 on. When Vcc rises above 1.8V, 
the chip will be reset into the read state. 

Writing the erase verify code into the command register 
terminates erasure, latches the address of the byte to 
verify, and sets the internally-generated erase margin 
voltage. The microprocessor then accesses the output 
from the addressed byte using standard read timings. 
The verify procedure repeats for all addresses. Should a 
byte require more time to reach the erased state, anoth- 
er erase operation is applied. The erase and verify oper- 
ations continue until the entire array is erased. 

Programming 

Programming follows a similar flow. The program set- 
up command is written to the command register on the 
first cycle. The second cycle loads the address and data 
latches. The rising edge of the second Write-Enable 
pulse initiates programming by applying high voltage to 
the gates and drains of the bits to be programmed. 


Writing the program verify command to the register 
terminates the programming operation and applies the 
program verify voltage to the newly programmed byte. 
Again, the addressed byte can be read using standard 
microprocessor read timings. Should the addressed byte 
require more time to reach the programmed state, the 
programming operation and verification are repeated 
until the byte is programmed. 

DEVICE RELIABILITY 
Cell Margining 

Erase and program verification ensure the data reten- 
tion of the newly altered memory bits. The cell margin- 
ing performed in the Quick-Pulse Programming and 
Quick-Erase algorithms is more reliable than historical 
overpulsing schemes as margining tests the amount of 
charge stored on the floating gate. 

Intel’s 28F256A through 28F020 Flash Memories em- 
ploy a unique circuit to internally generate the erase 
and program verify voltages. Figure 4 shows a simpli- 
fied version of the circuit. The circuit consists of a high 
voltage switch and the verify voltage generator. Tran- 
sistors Mi through M4 constitute the high voltage 
switch which disconnects Vpp from the resistor when 
the device is not in the verify mode. The verify voltage 
generator includes a resistor divider and a buffer. Inter- 
nal margin voltage generation maintains microproces- 
sor compatibility by eliminating the need for external 
reference voltages. 

Erase/Program Cycling 

One of the most significant aspects of Intel Flash Mem- 
ory is its capability for greater than 100,000 erase/pro- 
gram cycles. Destructive oxide breakdown has been a 
limiting factor in extended cycling of thin oxide 
EEPROMs. Intel’s ETOX flash memory technology 
extends cycling performance through: improved tunnel 
oxide processing that increases charge carrying capabil- 
ity ten-fold; reduced oxide area under stress minimizing 
probability of oxide defects in the region; and reduced 
oxide stress due to a lower peak electric field (lower 
erase voltage than EEPROM). 
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A typical cell erase/program margin (Vt) is shown as a 
function of reprogramming cycles in Figure 5. After 
100,000 reprogramming cycles, a 2.5V program read 
margin exists, ensuring reliable data retention. 

Reliable erase/program cycling also requires proper se- 
lection of the erase Vt maximum and maintenance of a 
tight Vt distribution. The maximum erased Vt is set to 
3.2V via the erase algorithm and the internal erase veri- 
fy circuits. Superior oxide quality gives an erased Vt 
distribution width that improves slightly with cycling 
(Figure 6). The tight erase Vt distribution gives an or- 
der of magnitude of erase time margin to the fastest 
erasing cell (Figure 7). 


SUMMARY 

Intel’s ETOX flash memory technology is a break- 
through in adding electrical chip-erasure to high-densi- 
ty EPROM technology. Intel’s CMOS Flash Memory 
offers the most cost-effective and reliable alternative for 
read/write random access non-volatile memory. Micro- 
processor-compatible specifications, straightforward in- 
terfacing, and in circuit alterability allow designers to 
easily augment memory flexibility and satisfy the need 
for nonvolatile storage in today’s designs. 








Figure 4. Erase/Program Verify Generator 
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Figure 7. Array Erase Vt vs Erase Time 











Figure 9. 28F512 Die Photograph 
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Figure 13. Flash Memory Pinouts 
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Byte-Wide Flash Memory in 32-Lead TSOP 




Figure 14. Flash Memory Pinouts 
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Columns are number 0 through 5 1 1 beginning with the column nearest the X-decoder. 
Outputs are grouped as follows: 


Array Organization: 

Left Half Array 
IO 0 IOi io 2 io 3 
® 1*384 BLo 

Right Half Array 
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BL 0 BL384 

Address 

Bitlines 

^3331 

EB 9 


a 2 

Ai 

Ao 

A 3 

IO 0 & 10 ? 
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Figure 15. 28F256A Bitline Decoding 
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Figure 16. 28F256A Wordline Decoding 
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Columns are numbered 0 through 5 1 1 beginning with the column nearest the X-decoder. 


Outputs are grouped as follows: 



Left Half Array 
OO 01 02 03 

Right Half Array 
04 05 06 07 
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Figure 18. 28F512 Bitline Decoding 


X-DECODING: Wordlines are numbered 0 through 511 beginning at the top of the array. 
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Figure 19. 28F512 Wordline Decoding 
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X-DECODING: Wordlines are number 0 through 5 1 1 beginning at the top of the array. 
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Figure 19. 28F512 Wordline Decoding (Continued) 
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Figure 20. 28F512 Bit Map 
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Columns are number 0 through 511 beginning with the column nearest the X-decoder. 
Outputs are grouped as follows: 


Array Organization: 

Left Half Array 
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Figure 21. 28F010 Bitline Decoding 
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Figure 22. 28F010 Wordline Decoding 
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Columns are number 0 through 511 beginning with the column nearest the X-decoder. 
Outputs are grouped as follows: 
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Figure 25. 28F020 Wordline Decoding (Continued) 
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Flash Memory 

Since the early 1970s, semiconductor memory devices have helped 
pave the way for smaller, lighter, more sophisticated computing 
products. The most compelling of these is flash memory — a 
technology in which Intel has remained the market-segment leader 
for over seven years. 

Intel Flash offers design engineers an entirely new memory 
alternative. Because flash is a high density, nonvolatile read/write 
technology, it is both a cost-effective and reliable replacement for 
EPROMs, EEPROMs, DRAMs, battery-backed RAM and rotating 
media. Flash’s inherent advantages over these technologies make it 
especially useful in portable systems that require low power, 
compact size and ruggedness while maintaining solid-state 
performance and full functionality. 

This databook is devoted to techniques and information to help 
design flash memory into an application or system. Informative 
datasheets provide many comprehensive charts, block diagrams, 
operating characteristics and programming modes. Application 
notes provide diagrams and hardware design information. Relevant 
article reprints are also included. 
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